Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
File: _CwEhVQA8w2Ng82ayoVo_H9KAYg.mft (raw, json)
Hash identifier: FUs+CCqZsiRvzcgF7loiBl64Gsp/AgVo6K7Hkk/8y+s=
Subject key identifier: A0:63:ED:24:93:93:64:1A:42:45:FE:C9:C6:07:30:56:6C:9B:F3:18
Authority key identifier: FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
Certificate issuer: /CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Certificate serial: 01991809E4A200C76055318A9FF26BDA46F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
Manifest number: 136C
Signing time: Fri 05 Sep 2025 04:02:05 +0000
Manifest this update: Fri 05 Sep 2025 04:02:05 +0000
Manifest next update: Sat 06 Sep 2025 04:02:05 +0000
Files and hashes: 1: _CwEhVQA8w2Ng82ayoVo_H9KAYg.crl (hash: 1XWMvysR/P87+fpkUKGIQHyd4V5JbYxtJUunK0Y7cQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:e4:a2:00:c7:60:55:31:8a:9f:f2:6b:da:46:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Validity
Not Before: Sep 5 04:02:05 2025 GMT
Not After : Sep 6 04:02:05 2025 GMT
Subject: CN=a063ed249393641a4245fec9c60730566c9bf318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:42:4a:26:df:ac:71:9e:c6:71:59:7f:65:
4e:63:94:c1:ce:f4:de:c8:87:60:96:4e:27:23:5a:
43:fe:d7:e3:0e:9a:39:6a:c2:89:e6:f5:d7:1e:e7:
5b:ea:72:54:10:17:21:66:14:aa:17:4c:10:37:eb:
62:d4:75:42:bf:63:ac:e1:25:86:03:72:58:4b:0b:
53:8f:b7:55:46:fb:52:1a:ad:c1:af:bf:4b:94:6f:
1b:34:41:d4:45:89:51:cf:25:ae:40:da:65:13:6f:
01:b1:99:13:88:30:da:cb:4f:2b:92:24:e5:9f:65:
84:c4:56:48:7a:0f:e2:b1:c2:dd:7b:71:45:cb:ed:
4f:4c:b7:00:ef:50:90:3e:8b:8d:7e:3e:20:08:d4:
39:b8:de:63:08:1b:ae:07:7a:2f:ee:5d:b9:59:e7:
ed:2a:75:5d:8d:64:47:23:20:ea:b0:c3:c0:7b:08:
60:4e:d9:0b:3e:e3:48:fb:94:f7:b4:2d:59:66:a0:
48:59:49:b9:5a:f6:0a:2a:39:f2:60:7a:a0:6b:be:
a8:cb:29:af:89:38:4f:04:18:23:6b:ea:f3:23:83:
0c:2d:ad:c1:b7:26:0c:07:cc:e3:3b:a5:c6:b1:57:
16:25:7a:66:42:25:e9:90:57:d7:a9:ad:0e:bf:79:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:63:ED:24:93:93:64:1A:42:45:FE:C9:C6:07:30:56:6C:9B:F3:18
X509v3 Authority Key Identifier:
keyid:FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:90:22:12:44:63:ad:0e:79:46:91:30:53:9c:dc:f5:ee:f2:
11:28:c6:2a:fd:82:e6:fe:4d:2e:94:fa:7d:8f:18:f0:5c:04:
35:d9:69:44:c4:af:50:93:48:f1:c2:2c:9a:1e:0f:d8:eb:67:
87:f0:e0:25:83:7b:c8:27:c5:3e:6c:d4:7a:40:9f:c0:8d:96:
59:b2:ed:d7:e1:9e:40:36:a5:b0:4c:9d:de:b4:1c:02:c9:f3:
f0:af:f4:c1:09:8b:6a:d6:d9:39:ba:65:99:19:fb:a5:f6:13:
57:1e:86:cf:c4:99:d4:c2:f4:48:1a:1a:95:d7:60:72:a1:e4:
3c:9b:26:d8:e3:72:5d:34:df:60:39:b0:47:00:f6:74:c4:2a:
ac:35:76:a3:38:e8:78:eb:78:41:73:3a:99:a2:fe:da:94:b0:
39:4b:ca:32:13:31:23:29:85:69:14:28:aa:5d:8c:6c:55:06:
ca:75:6b:c2:45:4f:24:eb:c0:f3:b4:9f:75:bf:d6:f2:bf:45:
d0:6c:66:48:ef:8e:36:92:0c:c5:8f:42:bc:ee:cb:cb:2a:f0:
bc:8a:32:f0:b2:c1:e8:29:28:33:c5:c7:85:ed:03:04:e8:46:
9c:d5:72:80:ee:b0:89:90:ac:38:f7:9b:2d:19:4c:7d:c8:1e:
78:f1:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:49:30 2025 by rpki-client