Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: n62q4fkTtizvWxQGRK1EB8XUX9UB/T9xckeKema4AKc=
Subject key identifier: 7D:D2:81:9D:12:8D:1D:35:F0:18:6D:AE:0B:52:0A:DC:AF:C7:BD:62
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 019921B26B9384CAE8B424CE00102F05C6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 1020
Signing time: Sun 07 Sep 2025 01:02:45 +0000
Manifest this update: Sun 07 Sep 2025 01:02:45 +0000
Manifest next update: Mon 08 Sep 2025 01:02:45 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: i1wH181VcZQDZXv37FZ2AN8bBVuW/HqCTePn7mdQ3Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:6b:93:84:ca:e8:b4:24:ce:00:10:2f:05:c6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Sep 7 01:02:45 2025 GMT
Not After : Sep 8 01:02:45 2025 GMT
Subject: CN=7dd2819d128d1d35f0186dae0b520adcafc7bd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:11:3d:33:83:12:f2:bf:dc:c4:72:87:2c:
4c:2a:b7:79:e5:02:57:08:2d:87:e5:bd:c4:a7:67:
1b:da:61:50:1d:a5:ce:83:5e:ef:03:26:84:4d:c1:
77:1d:be:ca:50:8e:13:45:b2:3e:24:bc:fa:7a:59:
98:0f:42:2c:0c:fd:30:56:59:df:a5:90:44:75:b2:
30:05:69:56:fa:b3:00:d1:13:85:88:bd:76:2f:54:
66:de:fb:21:c0:4f:b6:ff:73:89:f2:86:fb:16:7d:
84:79:96:97:ab:2f:33:75:a3:bb:57:22:00:e7:56:
3f:1c:32:2d:b7:11:89:77:61:e8:7e:65:1e:f1:f3:
3f:99:1e:29:bc:12:19:2a:23:c8:da:77:8b:84:c2:
c1:59:19:d7:05:b7:40:fc:42:8b:44:f1:70:8f:5f:
2e:06:ef:43:6f:df:b9:0a:ae:32:f0:50:e2:05:0e:
a8:a4:cc:a6:48:34:13:9c:d4:4d:4f:99:0e:8f:b1:
7f:c7:62:1c:dd:b2:5b:5f:dd:31:c8:2f:68:64:dc:
13:e8:b6:fc:de:46:ed:36:c7:fe:c5:42:5b:19:ad:
32:2e:6b:50:da:f5:1e:8a:ee:06:d6:25:f3:d6:ac:
47:3c:73:b9:c3:a3:37:6c:df:6d:70:ac:a3:d9:62:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:81:9D:12:8D:1D:35:F0:18:6D:AE:0B:52:0A:DC:AF:C7:BD:62
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6e:be:db:ad:bd:99:d8:b5:b2:4d:2c:82:36:8c:f6:e3:a4:
6c:a0:27:36:dd:af:3f:b6:e0:31:7f:c5:77:48:13:96:f3:9d:
6e:fd:11:c1:0b:25:24:ab:ec:83:25:32:90:04:c7:a6:65:ce:
80:9e:85:8e:74:b7:86:09:a2:77:c4:65:2a:b0:d9:08:5d:a1:
f6:57:63:5a:9f:1e:ef:aa:c1:73:08:da:3c:69:60:b4:4b:50:
43:79:e6:ed:52:0b:b6:7c:23:b0:4d:fb:19:3c:ad:88:1c:5d:
fc:5d:45:a7:40:d2:a3:40:9b:af:5b:dc:4e:9a:0d:13:1f:91:
de:30:14:34:84:c5:4c:87:e6:cb:61:97:09:2c:9f:7d:4a:8a:
56:5c:bf:6b:48:45:70:b2:25:10:f9:ba:4f:fc:63:18:6b:c9:
69:d2:83:83:8d:63:62:58:91:83:b4:2b:bc:13:58:a0:c4:95:
5a:39:40:04:5c:4e:37:44:0a:39:61:be:70:75:f8:21:a2:6e:
ea:6f:b9:f9:22:89:28:c6:10:02:cc:35:aa:9a:51:a5:0d:92:
e4:57:5a:c4:e2:f2:63:db:d3:b0:af:84:07:3d:6c:6f:6e:09:
3b:18:39:c3:b1:98:72:c1:58:01:ce:76:d8:de:b8:9a:52:54:
65:a9:92:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsmuThMrotCTOABAvBcbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2U5MDcwMDVkYzNlYjA0NzBiYzNkYjQ2OTA4ZGExMDkx
N2I4NGEwHhcNMjUwOTA3MDEwMjQ1WhcNMjUwOTA4MDEwMjQ1WjAzMTEwLwYDVQQD
Eyg3ZGQyODE5ZDEyOGQxZDM1ZjAxODZkYWUwYjUyMGFkY2FmYzdiZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweoRPTODEvK/3MRyhyxMKrd55QJX
CC2H5b3Ep2cb2mFQHaXOg17vAyaETcF3Hb7KUI4TRbI+JLz6elmYD0IsDP0wVlnf
pZBEdbIwBWlW+rMA0ROFiL12L1Rm3vshwE+2/3OJ8ob7Fn2EeZaXqy8zdaO7VyIA
51Y/HDIttxGJd2HofmUe8fM/mR4pvBIZKiPI2neLhMLBWRnXBbdA/EKLRPFwj18u
Bu9Db9+5Cq4y8FDiBQ6opMymSDQTnNRNT5kOj7F/x2Ic3bJbX90xyC9oZNwT6Lb8
3kbtNsf+xUJbGa0yLmtQ2vUeiu4G1iXz1qxHPHO5w6M3bN9tcKyj2WJbWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3SgZ0SjR018BhtrgtSCtyvx71iMB8GA1UdIwQY
MBaAFAvOkHAF3D6wRwvD20aQjaEJF7hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAt
ZTM3MTg5OThiMTg0LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAtZTM3MTg5OThiMTg0
LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANW6+2629
mdi1sk0sgjaM9uOkbKAnNt2vP7bgMX/Fd0gTlvOdbv0RwQslJKvsgyUykATHpmXO
gJ6FjnS3hgmid8RlKrDZCF2h9ldjWp8e76rBcwjaPGlgtEtQQ3nm7VILtnwjsE37
GTytiBxd/F1Fp0DSo0Cbr1vcTpoNEx+R3jAUNITFTIfmy2GXCSyffUqKVly/a0hF
cLIlEPm6T/xjGGvJadKDg41jYliRg7QrvBNYoMSVWjlABFxON0QKOWG+cHX4IaJu
6m+5+SKJKMYQAsw1qppRpQ2S5FdaxOLyY9vTsK+EBz1sb24JOxg5w7GYcsFYAc52
2N64mlJUZamSNg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:32 2025 by rpki-client