Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
File: c3gm9t2lQDSR5IfKTut9fNdvoT4.mft (raw, json)
Hash identifier: Nz6gIsc/Et2EETaz93UUIl2msRMSGTWCJke2SRCrvuY=
Subject key identifier: 7A:BE:4E:48:31:0B:0A:67:C5:23:54:4C:2E:6A:A0:56:B4:2E:BF:BE
Authority key identifier: 73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
Certificate issuer: /CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Certificate serial: 019921E7A62EB31903C2D552781CD40FA0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
Manifest number: 2C
Signing time: Sun 07 Sep 2025 02:00:53 +0000
Manifest this update: Sun 07 Sep 2025 02:00:53 +0000
Manifest next update: Mon 08 Sep 2025 02:00:53 +0000
Files and hashes: 1: c3gm9t2lQDSR5IfKTut9fNdvoT4.crl (hash: oB3eZsW/SsymidV5yYbDBnCArzhbKDE9MxVxhrF/jig=)
2: mazPj7cdRL1I04pr_YJNNETJccU.roa (hash: 3OsJUxkMYMMTIuXPRezuzfI9FZxZPBdn1qkD0aOjzGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:a6:2e:b3:19:03:c2:d5:52:78:1c:d4:0f:a0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Validity
Not Before: Sep 7 02:00:53 2025 GMT
Not After : Sep 8 02:00:53 2025 GMT
Subject: CN=7abe4e48310b0a67c523544c2e6aa056b42ebfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:c9:62:35:65:93:e4:f4:5c:b2:b1:7d:4c:
ca:2e:11:bf:97:2b:b9:3a:d9:1f:15:8f:fd:03:a7:
b3:cd:e0:17:6a:14:5e:99:58:0d:c2:56:5a:ef:9d:
20:62:95:37:f4:26:b6:ac:db:68:54:89:e9:75:35:
80:c2:43:c2:bc:34:86:b3:ee:ba:ee:b9:66:eb:1c:
51:62:a9:11:bb:36:0a:fa:e9:d1:c2:82:d7:78:67:
10:25:86:2b:9c:2d:e8:b6:e4:c1:0f:87:55:5e:c2:
3a:bd:20:95:93:4c:98:cc:21:69:e0:36:a8:92:ba:
dc:54:df:f3:1f:26:56:9d:aa:80:0e:8b:b9:8d:d7:
bd:c5:73:13:cd:7a:a6:da:97:0f:40:c6:ae:05:aa:
3a:49:05:64:33:1f:65:87:77:d3:82:5f:09:fc:27:
54:80:20:35:0b:3a:11:a7:e7:1c:8f:7b:3a:7f:48:
c5:e3:37:3f:1e:8a:28:20:6c:61:70:8c:d6:c0:f4:
be:2f:b0:48:a3:64:d5:cd:91:18:69:56:2e:4f:eb:
b1:9c:57:63:30:f1:ff:a7:0b:0b:16:b6:db:e2:7c:
2f:d8:76:a7:c5:f3:69:41:c5:69:9b:88:0f:34:4a:
88:a0:5e:b1:24:a2:da:58:1d:88:77:86:da:e0:7f:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BE:4E:48:31:0B:0A:67:C5:23:54:4C:2E:6A:A0:56:B4:2E:BF:BE
X509v3 Authority Key Identifier:
keyid:73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0d:6f:71:fc:7d:55:a2:ba:25:a0:9c:9c:13:f1:90:59:ef:
e7:98:a4:a0:de:2e:49:f7:26:69:91:a2:39:f2:d3:60:14:3e:
b1:08:89:00:d6:6b:24:13:4f:71:aa:59:19:10:ef:71:1a:12:
e9:c0:df:b3:1c:ec:76:39:31:14:05:b4:50:11:98:b9:2a:6e:
4f:fa:11:67:71:ef:56:70:5a:5d:4e:2c:85:bb:f1:3e:6a:de:
32:19:56:7e:57:18:59:4b:62:0a:0c:f8:24:f1:22:20:93:98:
0d:34:a3:07:25:16:5a:3a:4b:b2:9c:ed:ce:4b:f4:82:0d:b8:
d3:f0:16:8f:fa:cc:fd:18:f7:b3:8c:1e:3b:30:23:9a:0b:fc:
ba:7f:30:dc:d9:d2:97:82:f2:50:e9:b3:66:24:09:0e:59:7a:
b6:d8:0e:8b:8a:8d:3a:86:6f:37:aa:9f:f7:fe:88:15:9b:65:
51:53:ac:bf:30:1e:81:bc:18:51:83:e4:38:f9:99:01:d9:70:
65:f4:4c:1b:46:6b:61:28:30:b5:08:e6:60:f0:3d:f5:92:8e:
6f:4f:a3:ef:51:92:ef:89:3c:b1:9d:36:3d:01:0b:60:a3:fd:
a5:09:fb:f5:4e:f7:f3:2f:79:03:95:b7:ca:07:3e:e2:a1:2b:
58:94:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:24 2025 by rpki-client