Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: 0VQcLhqNvvWDZsy0BHVYPlMKtV3jgp6WA1eZ3o2KJYI=
Subject key identifier: C8:9C:CE:B8:29:FF:5A:D7:81:B0:60:F2:7C:73:33:39:0C:E7:CB:AB
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 019921B07BFF26142BD639950293FB46771A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 074D
Signing time: Sun 07 Sep 2025 01:00:38 +0000
Manifest this update: Sun 07 Sep 2025 01:00:38 +0000
Manifest next update: Mon 08 Sep 2025 01:00:38 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: lmgoPFUBLTLDXMqeuYfq17PWF8GWgyzirypYSw8kzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:7b:ff:26:14:2b:d6:39:95:02:93:fb:46:77:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Sep 7 01:00:38 2025 GMT
Not After : Sep 8 01:00:38 2025 GMT
Subject: CN=c89cceb829ff5ad781b060f27c7333390ce7cbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:4a:53:d6:cf:db:ad:5b:21:6b:f2:8c:d3:
bc:3e:cb:72:cf:d8:9f:12:1b:ce:28:22:27:ae:13:
fb:c4:17:88:79:bf:2c:0a:5b:d5:8a:f7:17:38:cc:
2f:a0:63:73:fa:a6:03:8f:bc:96:4b:aa:21:e6:32:
52:4b:c2:11:75:1a:53:cb:d0:b4:b6:d2:28:b0:59:
8b:e3:5c:64:de:88:2e:f8:60:19:a5:03:1b:1e:9e:
19:e7:7f:a1:67:25:c5:e6:36:cb:2d:69:33:03:da:
54:94:53:94:60:8f:04:c7:31:b3:ad:46:59:f4:d4:
f6:20:40:04:c2:89:58:fb:c7:a5:00:78:88:f9:c7:
68:a6:6a:74:7a:91:17:88:a2:97:e3:04:7f:c4:d7:
b9:84:76:68:1b:94:f7:74:bb:5f:53:13:85:25:4a:
80:5a:1d:64:28:31:cd:7b:cf:ca:07:16:1d:27:10:
f6:2d:2d:1f:da:08:8d:80:f8:34:85:c6:86:02:5a:
d2:34:54:c1:8d:23:af:c3:c3:e3:77:5a:4d:38:ab:
15:e7:d0:d1:27:bb:2e:4c:e2:f5:6c:03:94:01:b2:
b1:9d:2b:fc:a0:18:a9:ab:47:29:ee:cc:30:4e:e4:
29:75:fb:70:9b:4b:83:1a:ff:89:a4:f1:86:c5:dd:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:CE:B8:29:FF:5A:D7:81:B0:60:F2:7C:73:33:39:0C:E7:CB:AB
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:02:e8:bb:e9:37:53:cd:48:d8:f1:80:1e:48:8c:4c:08:a2:
e7:53:ad:aa:2f:1f:2a:6d:24:92:5b:fd:e6:f8:88:9b:93:6c:
ea:97:cb:5b:47:3f:30:62:d2:43:30:64:38:58:b8:60:a3:e7:
59:b4:e6:12:d5:e3:10:2f:d3:88:32:84:b6:38:ea:34:eb:09:
93:7d:19:60:01:62:14:62:5e:5a:54:3d:4a:fc:c2:80:bb:08:
e5:83:98:25:33:2e:9f:83:76:51:cc:01:38:0c:66:5b:a2:42:
fb:75:dd:89:c3:6e:32:55:6b:e0:07:d0:04:35:df:3b:21:78:
36:ac:7b:f7:7e:a0:10:a2:ad:ed:85:ee:4f:a8:43:2b:13:ac:
bf:81:0d:fe:80:09:be:07:25:ea:0e:4c:54:f8:3d:d0:22:63:
e2:6c:2d:ff:4b:84:1b:1a:53:04:17:80:93:d0:7e:f7:14:45:
03:b5:a7:db:39:ca:21:74:58:e9:f1:e9:44:d8:dc:a0:bd:d4:
90:13:dc:6c:a5:ec:80:5b:15:90:b7:11:87:f9:10:44:c1:13:
ca:f2:26:91:53:53:8b:af:6c:48:77:7b:63:57:3e:6f:08:5e:
81:0c:79:ea:21:3e:5f:ab:28:82:82:e9:33:2b:fa:56:af:0a:
c6:1d:62:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:08 2025 by rpki-client