Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: yzewzgeLgTg3lwJr47yEPcMv6zxmNGlVrpmy4VsfhI4=
Subject key identifier: B6:17:C2:0F:A1:9B:F3:EB:24:ED:6E:A1:4A:50:60:A4:45:BF:AD:7C
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 019923A06E5365C88763118AD1CBA168E7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:02:20 +0000
Manifest this update: Sun 07 Sep 2025 10:02:20 +0000
Manifest next update: Mon 08 Sep 2025 10:02:20 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: 9QtddVwQc9pqpJkaNTheZhaEgnNyAOg7FKR2PZAeEGQ=)
2: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (hash: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:6e:53:65:c8:87:63:11:8a:d1:cb:a1:68:e7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Sep 7 10:02:20 2025 GMT
Not After : Sep 8 10:02:20 2025 GMT
Subject: CN=b617c20fa19bf3eb24ed6ea14a5060a445bfad7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:a2:27:0d:9d:9f:4c:47:ce:56:c6:34:d4:
c2:4b:80:d7:e6:29:c9:40:13:3b:3b:0e:b4:8b:ff:
b2:f9:00:a1:17:a9:20:59:20:3a:f9:c3:cf:26:fe:
3f:48:58:fc:26:40:a4:46:19:c2:37:49:5c:7f:66:
a8:e1:ff:2b:7e:b1:a7:30:c3:ad:74:e1:9c:d7:ea:
85:91:b6:e2:4c:74:d7:f0:e1:5a:9e:6f:5a:16:ea:
0f:89:3d:f7:75:30:17:84:d5:6b:35:6b:00:36:bc:
86:16:38:60:f8:e8:78:50:9f:82:a9:c4:be:52:6e:
17:9b:a8:0a:0c:3f:35:ba:59:67:e4:80:56:f0:6d:
f9:e9:28:1e:8c:13:59:ce:44:05:a1:b9:47:3a:d8:
d8:90:c6:19:db:ef:f2:02:12:f9:f5:fb:b6:52:e9:
91:a8:df:3a:40:f8:b6:d0:45:7a:7e:0b:57:a5:cc:
56:d2:03:71:4c:02:f7:d3:01:e3:b8:c4:b3:b6:bc:
04:0f:7b:20:89:dc:a3:e1:8e:97:ac:78:bf:c9:a7:
42:93:3d:61:7e:2d:a7:97:fa:b7:f5:26:16:30:f5:
94:25:1f:3e:09:83:99:1e:24:22:a5:29:bc:95:36:
6f:00:cd:58:f7:63:10:4d:20:56:9c:ca:a7:f9:3b:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:17:C2:0F:A1:9B:F3:EB:24:ED:6E:A1:4A:50:60:A4:45:BF:AD:7C
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fc:25:07:98:3f:b0:bc:63:86:6d:a8:80:3e:f2:b4:83:ca:
12:33:60:e3:96:f5:22:ad:72:23:7f:72:d7:f5:b1:d6:a8:b9:
7c:d5:2e:13:14:83:5f:01:84:24:58:0c:b0:a4:0a:de:66:5c:
b2:c1:ec:0e:4c:49:85:fb:08:2a:c6:79:6f:4c:1e:86:8c:38:
37:8a:db:4c:6a:cc:fd:bb:5b:c4:73:d3:d0:79:9b:32:76:77:
a8:4f:c1:c8:f6:6f:80:ac:93:ba:82:0b:b6:48:2c:65:15:08:
f8:e7:b8:76:99:83:67:e5:6c:13:6d:3f:04:d7:6a:86:64:87:
38:1e:43:2a:83:ad:5c:b5:0d:e7:12:60:a5:d8:c7:f9:e8:71:
9c:d1:c1:6e:44:ba:ef:e5:c6:99:aa:70:65:6d:ef:21:c2:ae:
64:bc:51:2f:a1:f2:46:91:58:79:63:b1:98:1d:82:cb:09:82:
55:fb:70:34:58:f2:9f:d1:f8:64:98:0a:47:14:c8:b4:12:8b:
2b:ce:59:f6:f4:33:09:f7:26:81:a8:9b:5e:e0:c3:2c:99:c3:
26:08:48:a3:18:38:d0:6a:03:98:ba:aa:14:54:6d:f8:11:7c:
19:0f:89:ff:8a:22:b5:03:ce:31:1f:b3:d5:26:f0:7d:ad:1a:
ed:d8:c3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:53 2025 by rpki-client