Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json)
Hash identifier: kbo6w+av99qGKHCT0L7qv3lmiKryOJGynmricgtVmQc=
Subject key identifier: C6:0C:69:EF:4E:A6:CD:35:39:05:9A:32:FA:4A:F0:01:5D:C4:9B:D3
Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Certificate serial: 019923A0CD52945EDB5A65075F2955D458D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:02:44 +0000
Manifest this update: Sun 07 Sep 2025 10:02:44 +0000
Manifest next update: Mon 08 Sep 2025 10:02:44 +0000
Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: dI0AMq/c2rLuDeSJQ8LkUsVT3Auhimyp/zxLMIpo2h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:cd:52:94:5e:db:5a:65:07:5f:29:55:d4:58:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Validity
Not Before: Sep 7 10:02:44 2025 GMT
Not After : Sep 8 10:02:44 2025 GMT
Subject: CN=c60c69ef4ea6cd3539059a32fa4af0015dc49bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:53:0c:cf:e0:d2:af:76:c3:b5:c5:57:3b:
ef:9c:af:1e:85:15:df:a1:bf:22:81:b6:dd:10:c1:
3a:d8:75:8e:89:2d:7e:05:56:b9:95:56:8b:33:a4:
65:70:55:10:95:d2:e0:41:e7:fd:9f:ed:56:4a:86:
16:91:37:97:e4:5a:59:0d:8f:91:13:43:f3:bc:42:
22:f4:82:a7:c2:c0:48:25:8b:bf:b7:f7:4e:09:0e:
da:92:97:c8:55:5c:44:ed:23:4e:a7:7b:d3:ad:58:
8f:28:ca:e9:9b:6a:12:97:8a:42:04:4f:b7:f3:76:
2b:87:79:42:5e:e3:db:59:81:ea:7c:eb:b4:45:e1:
fb:03:33:e2:37:6a:e7:26:f3:c7:9d:ab:5b:ce:fb:
25:1c:23:2c:7d:33:48:05:da:20:ad:44:65:b8:9c:
fc:c3:c8:59:cc:e4:5a:a4:9a:e2:4a:eb:e0:04:da:
56:c4:35:c3:df:b1:8b:68:ad:67:d6:50:c3:46:eb:
da:90:c2:64:25:b2:14:9d:69:2e:fa:4e:de:09:e9:
f0:4d:43:1b:4f:6b:43:da:6f:fe:4f:68:0e:cf:60:
45:a4:82:ca:6d:cc:94:6e:c4:39:51:51:f6:e9:e4:
01:6c:22:24:60:aa:07:bf:1e:91:53:4f:4f:50:2f:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0C:69:EF:4E:A6:CD:35:39:05:9A:32:FA:4A:F0:01:5D:C4:9B:D3
X509v3 Authority Key Identifier:
keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:33:9f:28:9c:8d:5f:4b:b2:17:0c:2d:a2:bc:9e:70:52:40:
97:d8:f4:4a:5a:fe:16:80:fc:8f:7d:10:08:ea:84:d4:2b:10:
df:ab:45:fd:68:a9:79:eb:67:9c:06:e3:d7:fc:78:18:a9:7a:
9f:4d:ea:42:4c:3f:54:13:dc:71:b0:7e:a5:db:24:c8:00:87:
68:df:bf:48:61:9c:b2:4b:1d:74:66:73:0b:99:36:b0:13:eb:
7c:68:39:eb:7b:9d:70:d5:af:e2:52:11:6e:63:7d:18:56:aa:
a0:de:80:3b:ce:bd:37:50:c5:03:53:9a:fb:8e:66:5e:a8:f4:
67:9c:2c:03:72:7e:45:78:5e:0d:11:19:56:eb:dc:69:57:a1:
fd:c9:6b:ea:38:ba:38:c6:44:7c:24:2d:f9:7a:87:fb:e5:a4:
cb:26:eb:ae:da:fc:c7:a5:f2:77:cd:cb:bc:46:23:ba:72:b0:
71:2c:b0:2e:37:d9:f9:4c:f8:e7:99:19:7d:1c:78:1a:08:49:
e6:5a:c1:1b:e9:2a:c7:cb:56:70:0c:a1:1b:48:55:b4:b0:e8:
f3:6c:7c:b9:42:5b:89:7d:5a:d0:8e:1e:81:c3:3d:31:c2:df:
64:87:4f:29:c7:6f:dd:7a:a8:67:8c:5b:06:da:cd:8f:15:5f:
cc:6f:ee:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:33 2025 by rpki-client