Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
File: cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft (raw, json)
Hash identifier: e2VwosTS+HxADBLvujNGUmcPu4Rl2FW4pUybZ1erfRo=
Subject key identifier: F0:BA:91:73:1B:B4:6D:3A:DD:C3:42:EF:31:05:42:F3:DC:0B:C2:25
Authority key identifier: 72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
Certificate issuer: /CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Certificate serial: 019923D5EFAC6B119A884C2E112ECD738C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
Manifest number: 10D1
Signing time: Sun 07 Sep 2025 11:00:47 +0000
Manifest this update: Sun 07 Sep 2025 11:00:47 +0000
Manifest next update: Mon 08 Sep 2025 11:00:47 +0000
Files and hashes: 1: cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl (hash: Cr3cX7n1cPbgaOXA2q/rvmbB8JGdCRG581pQagXywkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:ef:ac:6b:11:9a:88:4c:2e:11:2e:cd:73:8c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Validity
Not Before: Sep 7 11:00:47 2025 GMT
Not After : Sep 8 11:00:47 2025 GMT
Subject: CN=f0ba91731bb46d3addc342ef310542f3dc0bc225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:20:96:04:df:9c:2c:fe:bc:da:0d:f5:22:
76:22:43:d3:37:98:8c:67:d4:49:c7:70:82:a6:61:
c6:a8:f5:85:37:fb:2c:d2:0b:44:94:1f:d4:89:d7:
5a:37:00:4e:b6:20:99:be:b4:25:8e:62:08:6b:7f:
69:c5:3d:4e:c7:3b:0b:79:89:cd:3c:13:02:05:85:
b1:e3:86:c2:0d:44:73:a0:43:8a:5e:e2:69:7e:60:
58:2d:88:db:12:5a:cb:17:4e:67:7d:99:a9:1c:45:
52:bc:64:3b:f8:24:63:a6:47:db:b0:96:b6:ae:95:
4e:74:07:c4:14:c5:12:22:ff:b8:0d:3b:5a:02:ab:
cc:0e:54:1a:03:2a:98:ee:d6:01:e6:fd:6d:81:ff:
74:7f:1b:64:21:6f:ef:60:66:8b:77:d5:db:4f:a7:
9d:70:73:51:37:64:68:4b:07:e8:f6:06:e6:bb:47:
61:5f:42:63:e0:be:ad:a8:27:8b:bb:d2:7c:92:73:
e6:1a:cc:78:8c:39:f8:58:e8:2d:37:df:50:e7:60:
50:fe:e1:84:56:0e:e0:1c:55:7b:e3:c4:f0:8b:d7:
70:a9:8f:8c:fc:77:67:a4:9e:29:fb:54:29:98:06:
51:53:c9:ca:4d:bd:79:55:d6:bc:99:05:39:1b:dc:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BA:91:73:1B:B4:6D:3A:DD:C3:42:EF:31:05:42:F3:DC:0B:C2:25
X509v3 Authority Key Identifier:
keyid:72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4e:8a:fe:fa:23:37:1e:b9:75:20:a9:44:8e:07:62:39:59:
0c:f9:49:83:a3:8a:8d:27:bf:78:fd:72:77:51:f9:c6:03:78:
53:21:b6:87:0d:48:7d:ba:d1:b9:62:bf:6d:3e:ac:a9:77:38:
47:cf:a6:bd:37:a3:b1:14:a4:84:01:0e:1a:27:a2:47:2f:1f:
8d:54:ad:be:27:11:79:78:64:51:0e:4e:ce:af:ad:7c:8e:6d:
04:7b:4e:14:0a:39:71:ba:9b:7b:3f:39:6d:96:32:8c:54:b8:
dc:90:2d:19:23:f8:7c:91:c6:9b:31:89:ff:e1:fc:25:7e:bf:
9b:f2:94:a1:bd:64:a1:86:88:ff:6e:79:10:04:f1:0b:17:78:
98:66:0f:28:ea:86:14:e0:aa:bf:30:e1:29:42:40:d8:ac:04:
b4:ff:0e:5f:53:29:be:a3:46:4c:69:6c:34:32:60:1d:f5:09:
03:60:89:ae:fa:a2:31:8b:d2:18:f1:f9:50:35:ea:4e:6c:7d:
cc:8d:17:d9:f7:15:df:c9:29:d4:8d:f0:9b:f7:ba:5b:ab:94:
e1:af:97:7a:18:79:12:ed:36:4c:e8:50:06:8b:67:38:b4:2b:
59:c8:95:6f:b0:65:c4:d7:b6:0a:13:7b:2b:8c:60:23:f6:55:
3d:8b:39:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:01 2025 by rpki-client