Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: aZCj6khJkN3rPa6z+Ta0m0kz56Y+htkzQ/EnDzGXhYI=
Subject key identifier: AB:8D:2A:4B:31:B2:05:BD:05:4C:8C:90:5C:3D:D4:95:CB:81:4C:2E
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 019916F5E1879061192F89D4D05336FD7A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 04EA
Signing time: Thu 04 Sep 2025 23:00:36 +0000
Manifest this update: Thu 04 Sep 2025 23:00:36 +0000
Manifest next update: Fri 05 Sep 2025 23:00:36 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: 0zwQVIYHXhqYxWsf+lb8qMsNgDMOwgQU2lLFWfEX6Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:e1:87:90:61:19:2f:89:d4:d0:53:36:fd:7a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Sep 4 23:00:36 2025 GMT
Not After : Sep 5 23:00:36 2025 GMT
Subject: CN=ab8d2a4b31b205bd054c8c905c3dd495cb814c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:c3:e2:2b:b5:b7:dc:24:9f:9c:f4:13:cc:
b6:67:fe:78:c3:1b:c0:dd:a1:0f:b1:56:28:45:3c:
08:01:9c:41:bc:f1:d6:1d:f9:0c:94:18:d1:a8:81:
71:d9:f6:57:95:6d:5f:ba:39:a2:da:7e:13:c0:28:
a3:f1:1d:10:cf:a8:6d:02:68:06:df:f5:ff:be:0c:
c6:cf:2b:a5:84:94:4b:a0:bb:15:4c:0e:1b:f1:8c:
79:6c:73:17:06:3a:09:51:69:65:52:51:ae:d2:ba:
a4:c5:8e:2c:f2:da:eb:0e:02:45:c4:5b:f2:35:bf:
bc:36:9a:7d:0f:da:f4:02:28:0b:47:43:fe:6e:41:
0f:a7:f1:a7:c6:21:53:52:5e:39:b0:aa:09:35:f4:
16:04:5b:2e:e6:54:80:89:49:9c:eb:e3:59:55:00:
9d:91:04:28:ff:b7:6e:63:50:0b:ed:a5:d5:33:55:
e4:5f:ec:56:d1:50:7d:60:1b:37:5b:99:f5:9f:5b:
dd:97:dd:37:6f:c5:36:1d:d6:a7:3f:84:2d:6c:95:
27:e9:5a:4d:86:6f:78:3d:be:95:ad:90:1a:84:b7:
28:3c:e9:b1:e0:cd:34:29:cd:6c:bf:b5:e9:2c:4c:
84:88:d7:31:4b:32:02:ab:27:72:5c:63:5b:c7:27:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8D:2A:4B:31:B2:05:BD:05:4C:8C:90:5C:3D:D4:95:CB:81:4C:2E
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:69:a6:00:64:2c:ed:78:9e:be:e8:96:0f:2a:73:8e:54:c8:
72:fa:b7:3b:69:d2:a4:cc:e9:c0:48:08:ae:38:d9:d9:bc:58:
c9:72:94:38:ad:38:5c:91:ba:85:8b:52:01:7d:47:0b:e6:ce:
85:97:b1:d4:29:2d:65:5e:69:92:49:82:fb:9f:86:d0:74:21:
47:0e:51:91:99:e1:4f:e4:7c:fc:72:d7:17:41:2d:0a:cb:5b:
d4:65:93:65:bb:7a:b0:e6:98:30:c6:cc:c8:c3:ed:b9:2a:34:
e6:f1:f8:ed:c3:c6:83:6d:40:f3:b4:cc:c3:25:a8:2b:b3:54:
26:41:58:48:4e:2d:90:49:d4:ba:9c:e3:f4:c5:44:7c:e7:bb:
22:ee:eb:13:b3:11:7f:d4:d3:e5:94:d1:a7:be:64:cd:ba:b8:
52:2b:eb:2c:b0:05:3b:d7:e6:20:3a:a7:44:5a:e3:11:03:c5:
37:16:10:4c:54:e5:db:99:53:95:ce:a6:2f:30:5a:d6:fc:56:
f6:e7:95:6a:d0:9c:c4:d8:78:fb:75:ce:fb:25:c9:b1:43:6f:
42:19:15:3d:90:20:b0:a6:72:a6:34:8a:7b:5b:dd:36:e0:2b:
ce:f9:ba:2d:64:25:c9:f2:6c:c7:ce:a2:e9:5d:42:f0:1d:c7:
d5:01:2b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:54:45 2025 by rpki-client