Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier: yg0RTJYz+xy1HZeDswHO1+NV7aQejzxsWYXtezXymHw=
Subject key identifier: 4B:B2:41:B9:83:78:DD:8F:1B:BA:D2:F4:C4:8F:A5:7B:0B:7C:EF:95
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial: 0199161BB651096064492DC54AF61B66F868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number: 0FE6
Signing time: Thu 04 Sep 2025 19:02:18 +0000
Manifest this update: Thu 04 Sep 2025 19:02:18 +0000
Manifest next update: Fri 05 Sep 2025 19:02:18 +0000
Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: ba/UmcciL+LQSEo1rvZJPPOhlk9CiR/8c9tp9UCZxN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1b:b6:51:09:60:64:49:2d:c5:4a:f6:1b:66:f8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Validity
Not Before: Sep 4 19:02:18 2025 GMT
Not After : Sep 5 19:02:18 2025 GMT
Subject: CN=4bb241b98378dd8f1bbad2f4c48fa57b0b7cef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:9a:9d:3f:21:c5:f4:b1:69:00:b2:b2:31:
f1:e7:a7:b0:a7:72:95:13:96:9c:43:9c:78:8c:97:
f3:69:74:35:e2:35:60:b4:a0:c6:79:bf:9c:90:c3:
0c:6e:fb:30:b0:e6:bb:e7:61:c2:e2:40:a1:56:cf:
f4:cf:ff:10:0b:02:5f:58:99:9a:34:1e:50:cb:32:
b1:25:43:e2:8e:1b:be:16:c7:35:95:99:3d:db:02:
41:1f:8f:8e:81:d0:f7:12:f3:3a:5d:54:c6:38:10:
b2:b0:9c:9a:43:80:69:db:a2:77:55:45:03:34:ab:
61:43:41:71:4e:88:f0:40:d7:6e:13:dd:24:a2:59:
30:90:1f:62:12:90:4d:f9:95:c4:b4:a1:2e:1e:0a:
53:ba:e9:f6:73:6d:ed:a3:24:9b:ab:b5:9a:60:29:
c4:51:4d:9f:71:52:0f:cf:5b:59:9d:6b:18:4f:45:
7b:14:04:b5:6c:67:a6:5b:7d:ab:d4:ff:b2:33:b7:
0d:5c:70:3c:63:f0:45:b2:1b:53:bf:67:99:8f:c0:
a2:68:a9:18:ca:09:51:1e:88:61:b1:45:6e:00:15:
e8:72:e3:1e:88:dc:10:c4:15:2e:5b:1a:22:f9:10:
98:00:39:cc:ce:20:10:44:c1:0e:ff:2a:e6:42:95:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B2:41:B9:83:78:DD:8F:1B:BA:D2:F4:C4:8F:A5:7B:0B:7C:EF:95
X509v3 Authority Key Identifier:
keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2c:03:fb:0f:35:76:71:25:60:f1:46:9e:9f:12:76:f8:cd:
e6:03:13:cb:47:3a:13:28:da:c0:79:e1:cf:00:87:4a:99:fe:
29:c7:9a:94:a0:38:ff:0f:4a:4b:9c:99:ae:4b:f6:c7:eb:ba:
60:d9:a6:1f:8e:2e:09:c8:c6:fa:31:e3:8f:64:fd:6b:75:7d:
7a:a0:e2:00:04:db:46:30:38:e3:9a:b5:58:3c:b4:03:45:dc:
60:b5:8c:b3:d2:c8:33:36:97:50:aa:51:b4:64:5c:ba:3d:1d:
b3:31:66:74:a7:94:ce:a2:f7:98:0d:97:49:f7:8c:46:fd:ba:
5f:10:f1:5e:d3:3e:5b:75:07:be:2c:46:87:e5:7b:85:b6:ba:
6d:67:62:44:cd:ba:fc:9e:b6:45:70:06:17:2a:05:a2:32:24:
fb:91:9e:03:58:45:b5:67:ed:a6:cc:52:42:00:46:13:90:c6:
3a:0e:2d:d3:d8:fe:5d:bc:0f:9a:75:40:4c:1b:7b:f0:0f:ba:
2e:e1:c9:b6:ce:56:f8:fb:11:8f:20:31:da:9f:72:f8:a4:95:
92:dd:e0:18:3f:25:75:2c:37:e6:1b:e7:f4:ae:9f:18:6a:ea:
66:1a:11:ae:a9:ab:4a:d0:4b:7c:74:92:d6:12:ea:6a:5b:03:
6d:cb:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:26 2025 by rpki-client