Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
File: c0YEYfnEnrkXwZEVgLoORDLBJVc.mft (raw, json)
Hash identifier: DdX4AjrxuF6hfdeZRPbARnrYkRaL6NSIFaPWQ1WuCuo=
Subject key identifier: 3D:0E:00:5A:F5:B5:6A:4F:79:8A:2D:37:4D:35:C3:33:59:63:CB:91
Authority key identifier: 73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
Certificate issuer: /CN=73460461f9c49eb917c1911580ba0e4432c12557
Certificate serial: 019921B0BF1859E01D2E4BAFBEB9574095C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
Manifest number: 070F
Signing time: Sun 07 Sep 2025 01:00:55 +0000
Manifest this update: Sun 07 Sep 2025 01:00:55 +0000
Manifest next update: Mon 08 Sep 2025 01:00:55 +0000
Files and hashes: 1: c0YEYfnEnrkXwZEVgLoORDLBJVc.crl (hash: XOKQMs10fpgzESLkMqVU2icrnpXvinZGlTzFmSNV2IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:bf:18:59:e0:1d:2e:4b:af:be:b9:57:40:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73460461f9c49eb917c1911580ba0e4432c12557
Validity
Not Before: Sep 7 01:00:55 2025 GMT
Not After : Sep 8 01:00:55 2025 GMT
Subject: CN=3d0e005af5b56a4f798a2d374d35c3335963cb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:ab:26:f1:52:ce:8e:65:96:29:b0:b8:b1:
b4:28:da:a5:5c:96:43:02:51:8e:c7:f0:b7:07:50:
63:ab:5c:ed:49:69:86:bb:4f:39:5e:2e:0d:45:b2:
24:28:e0:f7:64:f2:7f:a2:be:62:90:94:85:5d:b4:
c5:69:1c:2b:d4:7b:6d:c6:03:30:1a:36:67:e3:c4:
04:f3:5b:5c:93:1f:be:71:10:18:b9:ff:5a:4a:0a:
21:80:d9:12:10:35:a2:2c:cb:a3:a2:7a:3e:a1:87:
e9:2e:e3:fa:cd:19:f2:0e:e6:d3:ac:92:b3:25:b8:
58:e3:e1:d4:83:9b:ad:cb:d8:9c:5b:f7:fd:fc:8c:
31:32:07:79:ae:de:83:ea:ca:c1:a2:2d:6d:a1:a9:
22:5e:cf:91:5d:52:1c:12:46:62:bc:27:60:ee:aa:
db:96:e0:4e:c9:60:9c:08:4a:16:d6:be:ed:c7:07:
76:11:b2:2f:5c:d5:61:fc:2b:ea:a5:1c:96:ec:12:
86:d3:25:9f:41:68:dd:47:d3:17:1b:af:9f:6f:c5:
c1:d1:05:4c:29:4d:eb:74:4a:ba:f2:8c:6e:4b:63:
f7:24:ad:5f:4b:b0:0a:81:c2:6d:e5:90:46:b0:f4:
d0:13:ed:10:e5:38:e0:f5:03:1d:fb:cb:c5:68:f3:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0E:00:5A:F5:B5:6A:4F:79:8A:2D:37:4D:35:C3:33:59:63:CB:91
X509v3 Authority Key Identifier:
keyid:73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ad:6f:04:3f:db:6c:d5:66:37:c9:c9:96:39:21:3d:05:ae:
08:ba:18:3d:3b:eb:2e:20:b7:2a:65:24:76:d7:13:09:74:a0:
01:9c:e5:e8:20:61:64:f1:2f:f6:e4:c8:18:dc:64:2d:f6:c3:
eb:d3:3b:f7:50:34:9f:d7:fd:f9:e7:71:f1:49:49:17:2b:2a:
ce:a3:40:14:89:cd:11:cc:cf:81:ce:8d:c6:59:4d:8f:1f:87:
f5:b7:e5:e8:61:53:96:cc:6b:d2:3c:4c:6e:2d:a0:76:a2:f9:
6c:8a:de:93:58:32:8e:49:f0:02:f6:32:b2:6b:a4:85:0a:29:
8a:83:64:ad:b4:48:f4:b6:43:be:6e:87:a9:71:c9:7b:98:e3:
1a:89:27:c5:41:74:39:ba:39:d2:0e:7b:6b:c9:20:ab:f5:51:
c9:b1:07:c7:d7:9e:4e:86:de:fd:87:48:ac:21:82:ee:1e:14:
11:fd:7e:02:ae:4b:24:2d:c6:11:51:09:f2:ea:c9:80:45:08:
d3:dc:5a:41:cc:46:ca:b8:30:7a:5a:6a:18:5d:15:07:41:9d:
b9:b3:2e:fe:13:61:48:82:3c:e5:ce:91:ac:d2:93:31:97:26:
30:b2:d5:da:a2:1c:33:2a:61:e1:51:78:8b:f3:d3:79:4d:1f:
ee:02:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:19 2025 by rpki-client