Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json)
Hash identifier: SWWePXrEDn+qd8PhLJCLlz8ppHYDg5zFJyJg7qx3FNI=
Subject key identifier: 7D:3B:0C:55:06:B9:9D:88:E2:5C:81:59:4F:3B:6B:E5:41:C7:EB:45
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial: 01991E0A9D1B8844C1D05CD2533067FFA914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
Manifest number: 0566
Signing time: Sat 06 Sep 2025 08:00:35 +0000
Manifest this update: Sat 06 Sep 2025 08:00:35 +0000
Manifest next update: Sun 07 Sep 2025 08:00:35 +0000
Files and hashes: 1: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: IpJ+6xldtQx+UazVdHcGfEjMjWaJTteyZAvxwrve7fg=)
2: _dBsBWq_R_HniB_oYd_SwrrifoY.roa (hash: lvPRkYEC7iItDLaOxgMbuIXZsy0MYwbc8HCCgTE8KuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:0a:9d:1b:88:44:c1:d0:5c:d2:53:30:67:ff:a9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Validity
Not Before: Sep 6 08:00:35 2025 GMT
Not After : Sep 7 08:00:35 2025 GMT
Subject: CN=7d3b0c5506b99d88e25c81594f3b6be541c7eb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:5c:42:85:1e:95:29:c3:ff:c1:d5:e5:e6:
32:a0:6c:4c:bc:00:15:e0:e8:47:70:85:d4:bd:4d:
6d:93:0a:7f:97:b8:9e:54:a5:c8:49:da:a3:07:79:
32:f9:14:39:c6:4c:29:ae:34:f9:6e:64:b8:1e:e6:
f3:24:70:db:fe:5f:02:ef:26:ae:e1:b5:cc:81:90:
b6:c6:99:7b:98:20:8d:00:0b:4f:69:cf:6f:46:16:
81:02:d6:b0:38:fd:51:dd:62:25:21:a6:6f:bf:50:
57:3c:74:83:36:ab:01:3f:6b:21:28:4c:47:3c:09:
5a:49:ea:47:8c:96:49:62:a0:c1:b1:a9:28:74:35:
e9:19:e4:5b:8f:4b:1c:fa:2f:f6:fb:0a:42:ae:e9:
a9:43:3e:e8:41:0a:d7:4e:b8:e2:5b:9c:76:8b:9e:
09:44:2d:15:d1:bb:cc:21:f3:61:7d:3f:0d:42:c1:
e0:1f:a6:7b:48:ec:70:bb:8d:a5:4a:cd:ab:c2:4a:
8a:40:67:e1:b4:4f:d0:c6:be:29:a2:48:35:74:2f:
ad:23:fd:07:2d:7a:df:23:40:9b:8c:ea:61:b9:ac:
42:06:73:b3:56:a8:a8:7d:8c:67:2b:70:23:60:69:
ce:e2:8a:d2:34:3b:48:0b:87:d4:41:91:fd:f5:fe:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:0C:55:06:B9:9D:88:E2:5C:81:59:4F:3B:6B:E5:41:C7:EB:45
X509v3 Authority Key Identifier:
keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3b:86:c4:97:a6:69:97:19:3f:9e:2a:76:c0:03:c6:28:d6:
55:3e:e8:74:7d:4b:2e:2a:68:10:4b:bc:9a:ca:d6:76:8c:97:
63:b6:79:1b:36:a9:fb:aa:ff:1a:f4:9b:d9:37:62:6a:b4:28:
b0:a3:6e:48:9d:ae:53:ef:b4:2d:5d:65:ac:16:e7:50:13:fe:
a7:e5:74:ae:3e:77:c6:ae:bd:c6:4e:7f:ef:98:de:38:b0:1e:
94:0a:10:75:87:f6:c6:e8:ce:6b:2d:fc:3c:0b:bc:04:c6:a0:
c7:c4:92:f5:86:8a:a8:fe:43:14:d6:3b:df:81:14:95:17:4f:
a5:b1:73:02:59:48:62:2c:7f:b7:72:47:4e:f7:48:8d:0a:58:
ad:c0:e3:fe:d5:d3:a5:31:ad:9b:15:f0:6e:f9:bb:ed:de:74:
b4:24:63:b9:05:5c:8b:31:f5:21:49:79:f6:a9:cb:34:4c:0d:
dc:28:25:4e:6e:ba:0d:f8:5f:80:f4:1d:3b:29:48:fe:b2:3b:
c6:4e:20:75:3e:5e:f8:3b:25:22:a6:58:16:a1:70:45:70:f1:
88:95:bf:27:d8:17:09:12:f1:f0:b1:4e:99:43:a4:98:b6:e8:
00:5a:88:0d:9c:31:7f:98:f6:e9:7e:9d:4e:a7:66:35:c7:39:
1e:e4:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:26:48 2025 by rpki-client