Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier: euxf/tmLrzg5AvK8+GmAAOFzP45HL38d0lS1/I2lIYE=
Subject key identifier: C6:F6:67:00:E2:E3:F9:F5:EF:87:CC:C3:C3:70:70:20:C3:C0:88:94
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial: 0199331334CE79665C75827B7B36F35C580E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number: 1677
Signing time: Wed 10 Sep 2025 10:02:00 +0000
Manifest this update: Wed 10 Sep 2025 10:02:00 +0000
Manifest next update: Thu 11 Sep 2025 10:02:00 +0000
Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: MxXSf5Q/RN45rvBGwGKni/ptH4rPL6nKTa53afwWg7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:34:ce:79:66:5c:75:82:7b:7b:36:f3:5c:58:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Validity
Not Before: Sep 10 10:02:00 2025 GMT
Not After : Sep 11 10:02:00 2025 GMT
Subject: CN=c6f66700e2e3f9f5ef87ccc3c3707020c3c08894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:55:4c:3c:6e:20:68:dc:cc:3b:94:23:ad:
c3:49:f0:24:95:e9:81:d0:85:ab:51:c8:a4:40:ab:
5d:f8:85:0b:e1:0d:b9:fa:8a:bf:11:aa:1b:2a:0d:
48:e0:ca:ca:32:8c:14:4b:83:d4:47:6e:3b:4e:90:
92:cd:bc:27:32:35:68:48:54:8e:90:40:10:bd:cb:
7c:fa:66:4f:8d:77:53:07:b6:f1:73:3a:94:aa:01:
62:43:62:7a:75:e7:3e:8f:92:a9:b7:66:68:54:44:
22:e5:c4:35:d5:1e:12:97:d3:5d:17:f7:42:fb:b4:
07:70:36:76:d1:f3:a7:e7:dc:8f:fd:5d:3a:ad:a9:
45:12:5f:c2:d2:1b:40:2d:af:e0:52:9c:9b:61:97:
cb:9c:ee:18:6b:63:3f:6c:53:bb:cf:16:40:5f:af:
cc:1e:45:d8:0d:6c:8a:ef:62:ea:c4:6d:06:b0:0c:
b5:b3:67:2d:43:99:e0:0c:8c:59:74:2b:1d:88:db:
23:45:15:e0:96:a9:73:72:75:01:cc:2b:9d:7a:a5:
38:7f:72:22:d9:a1:2f:61:0d:19:d3:84:8e:2e:f7:
02:93:86:f3:cb:09:27:9c:19:0c:71:dc:f2:2d:8f:
ba:36:76:fa:08:20:a0:54:e6:1e:2c:19:61:55:92:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F6:67:00:E2:E3:F9:F5:EF:87:CC:C3:C3:70:70:20:C3:C0:88:94
X509v3 Authority Key Identifier:
keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5d:e6:e2:31:bb:97:67:bc:b9:21:99:6e:d0:50:3f:3c:8e:
43:e1:f5:16:de:83:70:76:43:c4:b8:d0:d6:a5:57:69:67:14:
68:87:79:9e:4a:f1:18:fe:9f:f0:6a:b5:cb:d5:fd:ca:fb:61:
1c:cc:d4:93:e0:15:6b:ee:14:9b:a6:db:e5:e7:d9:c4:8a:90:
27:6a:05:3a:83:23:c1:4e:9f:f3:ea:e8:99:25:7c:f8:c3:5d:
42:42:37:01:ad:06:01:39:23:43:ec:ce:5c:23:0c:33:b5:9b:
7b:e0:f6:2d:e4:30:82:62:c7:86:84:33:4f:f1:87:e3:8e:55:
b1:5b:ab:37:e0:56:0c:1e:c2:39:c6:21:c9:7c:0d:d7:88:5a:
6f:13:2a:8e:04:fc:49:bb:90:9b:a3:51:44:7f:43:19:9a:1c:
c0:3a:b7:10:f1:e3:83:6c:1c:8e:02:c6:e7:cf:e1:11:de:20:
4a:71:95:23:8f:a6:ff:17:c6:bd:94:68:83:43:dc:71:58:35:
cf:e2:63:15:49:42:d0:ec:12:59:02:f0:ec:21:04:ad:82:bf:
5e:d9:cc:88:81:34:6a:11:37:86:ca:dd:21:e1:af:16:b8:7f:
02:33:c5:e6:ba:06:59:c8:6e:4b:01:be:38:c7:c8:1b:63:5e:
bd:76:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:16:33 2025 by rpki-client