Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File: c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier: QKb4D70mNdr2R52GN6gIg87+LQWSJZ1BbZhhXoQfCW8=
Subject key identifier: 02:80:98:6F:02:88:11:0B:40:83:30:98:E3:A2:A5:2A:34:24:A5:46
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer: /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial: 019A71B92032B9C49BD93C193BE7913D7563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: gN90TwNHZr8oIb2CcByT7lefkddqPLRpUcqx17DRjvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:20:32:b9:c4:9b:d9:3c:19:3b:e7:91:3d:75:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=0280986f0288110b40833098e3a2a52a3424a546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:dd:12:17:00:20:7f:2d:41:5b:d6:34:b3:
6d:4d:79:6d:4d:b8:a9:11:0f:96:5c:2a:b8:37:85:
cc:45:44:cc:4f:66:1b:32:e8:69:18:93:aa:cd:0e:
b1:b5:d5:5c:a6:56:4d:48:2c:13:1a:f7:a3:e3:1e:
1c:50:4e:a8:41:94:80:02:f5:ff:df:dd:ba:af:57:
dd:65:66:49:55:11:e3:fc:d3:ba:3e:f5:89:6f:7f:
20:be:94:91:fb:66:89:46:fa:5a:81:1f:6d:2d:af:
6a:81:ed:42:c7:c2:56:5d:3b:3c:c6:ed:a5:ce:5f:
1e:5f:a3:ca:db:15:6c:f2:90:e5:a6:85:b3:32:ca:
73:b4:29:26:e9:77:5f:c8:9e:44:76:04:1c:75:3a:
15:d7:a0:23:17:dd:1e:07:8e:89:b5:77:27:18:39:
91:f3:3a:49:b2:9e:19:cb:41:c4:91:88:7d:14:1c:
36:1b:91:90:80:e1:bc:3d:7d:3d:ad:f0:e1:92:22:
1b:9f:09:f0:11:8b:21:91:0f:1b:57:ec:f8:f0:1b:
28:be:63:64:2a:cf:bb:60:85:44:c7:99:94:80:bc:
82:0b:36:66:43:4d:7f:c3:1c:cf:12:a9:f4:4a:aa:
65:d4:08:02:6f:a5:82:54:25:3b:c3:be:0b:f9:18:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:80:98:6F:02:88:11:0B:40:83:30:98:E3:A2:A5:2A:34:24:A5:46
X509v3 Authority Key Identifier:
keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d6:e6:58:7d:6e:b0:7c:42:dd:72:6c:e9:13:8c:f2:40:a6:
54:8c:73:63:7a:9e:06:9c:32:b1:ac:a9:8a:b7:a1:63:34:dc:
42:f0:f3:c4:8f:35:76:0e:73:79:05:3b:ec:27:0d:21:ad:9d:
00:bd:8d:e3:6c:e4:25:6e:de:59:26:08:6d:36:8e:97:3d:46:
c6:06:0d:62:84:68:5a:e1:ac:b6:07:cf:3f:2f:ca:bb:01:05:
64:33:63:28:34:19:08:65:e0:fa:b7:8c:bf:46:82:18:2d:a1:
cc:8f:34:9f:cc:47:ce:1c:59:74:49:90:2e:22:61:38:a3:dc:
5e:e6:54:c4:02:2c:eb:3f:cc:01:f3:e1:a8:2f:b9:bc:8c:2c:
b8:83:2a:c6:23:57:5c:6d:03:34:ec:1f:fc:af:e0:9f:79:2b:
c7:23:ca:e7:db:5b:00:c7:19:12:3b:a7:02:76:20:d3:6d:53:
3d:7b:09:6e:c4:54:df:07:7c:08:0a:7b:a5:f9:dc:ea:2f:6c:
1f:49:03:2d:47:01:6b:7f:c3:08:60:e4:e8:e7:55:71:35:75:
f0:2a:53:90:69:b7:c6:09:89:b8:8c:78:4e:87:3e:8c:cc:c3:
8b:d4:16:4a:03:3d:91:da:f7:c6:a0:cf:f7:91:54:01:75:e0:
85:b8:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:07:28 2025 by rpki-client