Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: kpGDCrSIKm6rkb2nzv0CU4JFn/VRG2KRKCaILULt1u8=
Subject key identifier: 94:8E:96:08:6D:93:96:37:75:8B:C0:A8:80:50:C3:4C:71:ED:4B:5D
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 0199387058B315B68176C7EE2281D01335AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 168D
Signing time: Thu 11 Sep 2025 11:01:50 +0000
Manifest this update: Thu 11 Sep 2025 11:01:50 +0000
Manifest next update: Fri 12 Sep 2025 11:01:50 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: LUd4DtOYkfrkS95YAg6K3qFQL0xlNqeH7jHtO6NiZ3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 11:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:58:b3:15:b6:81:76:c7:ee:22:81:d0:13:35:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Sep 11 11:01:50 2025 GMT
Not After : Sep 12 11:01:50 2025 GMT
Subject: CN=948e96086d939637758bc0a88050c34c71ed4b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:84:17:c5:f4:f9:7c:44:84:4a:5a:d8:4e:
59:af:10:1e:c5:a2:56:53:3f:bc:27:23:db:81:33:
75:70:0d:0c:6b:c9:2f:23:e7:b4:6e:c5:99:2a:7c:
4d:61:6d:46:a7:2e:85:5e:fd:35:3c:9b:0e:a2:3a:
46:3f:50:6b:1d:69:43:d9:22:d8:12:f7:67:7f:14:
e2:86:2a:81:70:5c:25:1a:1c:6f:2c:75:3d:c4:b7:
b9:17:9f:5d:d9:96:d8:af:dd:65:74:80:ea:d5:e6:
b7:be:13:07:39:da:6d:cf:77:95:0f:e1:42:e0:c5:
13:72:a0:f6:06:d6:5c:6a:29:1d:ef:0f:29:30:76:
44:85:87:fd:80:5b:51:7f:2c:f6:92:ff:43:40:3f:
67:a9:3d:d6:ee:3a:dc:73:41:2d:ea:7d:4f:37:44:
a1:0b:9d:a9:d0:f3:7f:06:37:86:22:87:6b:d5:3c:
43:7a:49:bd:fc:79:44:7c:2f:f0:10:21:bf:76:0c:
be:06:93:e8:63:85:46:16:0d:24:ec:4c:fc:d7:47:
b8:7b:45:2b:a2:f5:5b:02:0a:a6:95:cb:a8:3b:24:
b7:d9:24:42:58:7c:e0:70:2a:bc:36:4d:55:b1:00:
29:73:1d:9a:e0:35:6d:a7:1d:db:62:99:0b:88:a3:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8E:96:08:6D:93:96:37:75:8B:C0:A8:80:50:C3:4C:71:ED:4B:5D
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f4:55:64:40:40:31:fc:2c:e2:4c:4a:a1:de:d9:bf:36:8f:
de:07:34:f8:c6:fd:9b:2c:22:d0:a9:d2:3b:fe:ce:f5:68:09:
9e:6f:9e:87:d1:92:05:42:3c:8d:45:af:ff:3f:9c:14:3b:0e:
d5:3f:6f:71:be:03:27:5c:70:3e:da:58:f7:bf:45:8a:a5:83:
3f:a8:4c:40:9d:a6:e8:27:15:d2:fd:81:a4:73:33:8b:14:27:
a8:b9:cf:e6:73:5e:54:4c:b9:cd:83:63:a3:33:72:03:07:10:
65:21:48:a8:5b:08:77:02:9f:f8:ae:5c:da:ed:98:64:bb:b4:
d3:5b:a6:5b:6f:a3:28:81:63:f8:1e:f4:80:c5:d9:45:67:91:
91:c6:4d:bd:bb:aa:66:7d:4f:f9:5f:64:e7:b9:4e:e6:94:0d:
0b:8c:01:9d:29:2c:c0:ed:3e:5d:43:02:d3:0c:1e:43:ce:47:
c0:40:29:3a:bf:49:3f:02:a0:df:77:d8:8f:47:5a:2d:89:1a:
07:3e:0a:2c:15:d1:3c:1b:b3:52:95:c3:19:dd:8e:d1:29:d7:
f8:07:2c:fb:c8:1f:0b:41:21:3c:0a:de:0e:73:47:72:46:1d:
0e:c0:77:68:cb:2c:04:04:f2:cd:78:49:a6:33:21:44:99:39:
c0:29:bb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:16:57 2025 by rpki-client