Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: 3JfU6jM+0vq7gJv9ytiQUAFvtvYKom6SW0S4DxVHpEI=
Subject key identifier: 33:5E:45:2A:61:69:9D:16:D8:D1:B8:60:62:8A:06:00:4B:71:39:A3
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019922C3A67AFC313DD448AFC2AF10CF9F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0A86
Signing time: Sun 07 Sep 2025 06:01:11 +0000
Manifest this update: Sun 07 Sep 2025 06:01:11 +0000
Manifest next update: Mon 08 Sep 2025 06:01:11 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: 37udxeSQhtRp7thpg3Oy3VY3la9Tt4hyWZ9Pt2EWSe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a6:7a:fc:31:3d:d4:48:af:c2:af:10:cf:9f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Sep 7 06:01:11 2025 GMT
Not After : Sep 8 06:01:11 2025 GMT
Subject: CN=335e452a61699d16d8d1b860628a06004b7139a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:d8:c1:74:03:1d:69:7b:4d:06:6c:39:17:
fa:50:9f:f2:fc:0d:9c:1a:13:59:b2:40:09:d6:0f:
00:0b:ba:ed:cf:57:9c:49:4e:98:aa:21:36:90:77:
89:31:33:ac:84:ed:7b:b2:c5:1f:3d:ae:7d:d9:e4:
d4:62:43:12:af:b0:21:c1:e9:a8:5f:e5:e4:06:e1:
18:0c:ae:48:e0:40:ae:4d:b0:3f:3b:8f:a8:fc:5b:
49:76:46:e7:ab:f7:e3:fe:a8:d6:44:1b:a5:92:27:
97:a6:fc:7d:35:98:05:55:53:a1:0e:18:b8:a0:3a:
b2:21:57:6d:05:66:8b:69:44:d3:3a:ef:49:ae:c4:
6f:fe:c9:fa:f6:2d:72:e9:02:1e:2b:2b:e0:3e:75:
cd:0c:71:40:be:1c:0c:c3:23:96:21:07:c6:d5:25:
d9:27:38:98:9c:5a:7d:8f:26:6c:1f:ec:9c:d4:28:
12:f9:c7:56:10:89:3e:c2:78:dc:8e:96:40:a7:4a:
31:70:ef:4a:cb:cc:f3:ea:80:b3:46:f2:0d:b0:10:
68:a9:5e:de:09:18:3c:a3:e1:59:25:f5:b7:41:61:
cf:c4:41:91:49:84:a7:ee:c8:81:ba:11:c7:dd:5c:
27:06:51:e2:f8:f3:4d:0b:66:a8:a6:bd:45:b4:ee:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5E:45:2A:61:69:9D:16:D8:D1:B8:60:62:8A:06:00:4B:71:39:A3
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:4d:9b:05:fc:78:4e:d5:ec:0b:3b:18:8a:24:b4:06:07:
e6:28:94:3b:a9:84:2e:8c:32:09:ce:7a:57:00:b2:72:06:4c:
0c:07:19:0e:07:92:ba:a2:0c:46:25:ae:10:97:7a:e5:c5:78:
ff:4d:64:f1:df:b3:53:e7:f4:74:a3:63:7c:d9:df:15:14:29:
19:31:69:3d:b7:2a:ff:4f:5e:2f:c0:ab:81:21:b4:e6:8a:13:
d5:d5:17:eb:2e:f2:9f:10:93:6b:b3:48:1b:42:6f:e5:e0:78:
a2:35:70:00:b3:00:46:96:6b:a7:65:bd:61:44:ff:03:9f:44:
8a:c8:2e:01:31:5f:1b:91:86:98:01:46:a6:4d:e7:15:98:04:
09:e2:44:1c:10:f5:71:3c:f5:79:7e:04:55:2c:46:47:98:3f:
1b:4b:f5:66:13:b5:71:f4:a8:71:28:5a:da:41:80:0d:39:7a:
e1:79:9d:cd:25:7b:62:83:f2:35:bd:68:9c:10:ef:62:55:b5:
47:d4:b5:5a:5c:db:4a:81:b5:35:9c:08:d3:5e:ef:d4:d5:49:
b7:72:e3:80:32:24:09:49:c7:b1:c8:1e:49:ca:74:8b:a0:53:
33:f1:3b:7e:c1:69:e4:f1:03:32:87:98:d3:42:ed:89:94:b8:
ac:fa:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:12 2025 by rpki-client