Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
File: cn4hijGD9RKCflrG2eVCXivw7gM.mft (raw, json)
Hash identifier: Ks3UoQtMvfVobjFJSd7mPjeJQ3mecgCMXiZGkR1ccgk=
Subject key identifier: 87:B8:DC:3F:E8:C5:5B:B9:39:CF:1E:EF:FC:B6:73:49:D1:6A:EC:9D
Authority key identifier: 72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
Certificate issuer: /CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Certificate serial: 019923A02ECEF16ADDB42C713FE9A00AB596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
Manifest number: 0130
Signing time: Sun 07 Sep 2025 10:02:04 +0000
Manifest this update: Sun 07 Sep 2025 10:02:04 +0000
Manifest next update: Mon 08 Sep 2025 10:02:04 +0000
Files and hashes: 1: cn4hijGD9RKCflrG2eVCXivw7gM.crl (hash: zRsFOKOCd8ZrqN5SldTGRjcFozqsmJL4CZtiiWtI8fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:2e:ce:f1:6a:dd:b4:2c:71:3f:e9:a0:0a:b5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Validity
Not Before: Sep 7 10:02:04 2025 GMT
Not After : Sep 8 10:02:04 2025 GMT
Subject: CN=87b8dc3fe8c55bb939cf1eeffcb67349d16aec9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:7b:a8:8e:44:41:10:b4:3a:f2:2e:1a:72:
dd:34:37:c7:ec:97:74:6b:91:00:fa:9a:93:16:f7:
63:94:fb:32:17:32:04:4f:e9:66:a4:04:05:62:65:
1d:7b:e5:29:27:c7:6e:5a:13:52:da:51:b2:f4:03:
aa:41:66:53:0c:38:b9:0f:9c:0d:9b:98:ff:73:91:
a8:38:c8:1b:ae:90:3b:d4:48:89:e9:6c:ce:d2:d9:
51:a9:1d:35:fb:d8:8d:f7:6e:ca:43:b1:92:c9:c3:
09:2a:3c:c3:6a:65:de:90:19:5f:66:4c:5c:4b:31:
97:4a:e2:74:6d:a1:22:04:2b:09:4b:a6:0d:1b:94:
32:f6:dc:b9:89:cf:d8:10:88:bc:21:df:04:48:a1:
42:be:eb:3d:f8:da:08:c7:15:7e:ca:7f:1e:d5:3f:
de:dc:d3:2c:ef:a7:2b:f1:e9:c2:1d:e3:ae:73:a9:
f6:fd:a1:cd:17:30:77:69:45:cf:74:88:43:ba:fb:
dc:0c:35:d9:01:73:b2:3a:05:65:87:24:7e:12:a7:
da:d0:52:b8:11:4b:31:49:0d:5b:f4:f3:c9:74:30:
8a:09:7c:4f:6b:3b:5b:4c:a9:64:f6:85:8d:f0:cc:
b0:80:0b:3d:c3:6d:07:17:24:00:7f:99:2e:5b:60:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B8:DC:3F:E8:C5:5B:B9:39:CF:1E:EF:FC:B6:73:49:D1:6A:EC:9D
X509v3 Authority Key Identifier:
keyid:72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e3:c4:43:e8:5d:c5:cb:51:dd:37:ff:22:e3:46:15:ff:5f:
87:e7:4f:8d:07:89:69:13:65:40:d0:ab:4a:f3:3e:2e:52:e3:
73:8a:a0:f3:bc:46:b8:51:d8:1a:4c:c0:02:6b:22:a3:94:de:
e7:ca:25:60:b2:c6:94:7e:86:19:18:3d:87:aa:7c:e0:c2:45:
bf:6a:9a:6a:bf:4f:b7:bd:f3:61:32:4d:54:4a:54:94:5d:49:
ed:0e:44:4f:ac:c2:42:33:a2:24:e8:12:75:cd:8f:7a:dd:51:
5d:03:1e:a3:67:89:58:94:40:f6:f1:82:6f:14:3b:0c:dd:1b:
17:b2:80:3e:98:5b:12:af:ca:a4:99:d3:dd:3d:13:57:86:72:
ce:61:35:84:e4:62:ba:7c:b3:46:91:da:a7:80:48:7f:75:10:
4e:b5:ee:05:48:92:d0:e8:3f:09:54:90:ed:cc:ca:9b:db:0e:
02:6a:59:7c:69:e3:67:03:9e:e6:f7:2e:94:37:e1:4a:71:a8:
b1:cc:98:ed:09:a4:b3:6f:53:c1:66:39:c9:19:62:98:68:ff:
9c:fe:0f:32:82:fc:04:68:ef:ef:6c:1d:bd:5e:c8:df:c4:9a:
0e:f7:3a:63:95:fc:1b:53:9c:77:7f:18:2d:3a:6c:3b:14:4f:
b8:cc:76:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:09 2025 by rpki-client