Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: Shk3SMhhHhBB6ojNciE7zGeCzQNB6SW2hjCHEDEqavU=
Subject key identifier: 57:E2:C3:06:96:89:4E:F3:BF:E9:E7:FF:28:D6:01:FA:3D:D5:4B:59
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 0199240D3EACCA6951C647567D6F2764FA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 12:01:11 +0000
Manifest this update: Sun 07 Sep 2025 12:01:11 +0000
Manifest next update: Mon 08 Sep 2025 12:01:11 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: MzwnWvlXHk/JogdMx0YSCExJP/STLq8eIKB7B75JC+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:3e:ac:ca:69:51:c6:47:56:7d:6f:27:64:fa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Sep 7 12:01:11 2025 GMT
Not After : Sep 8 12:01:11 2025 GMT
Subject: CN=57e2c30696894ef3bfe9e7ff28d601fa3dd54b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:d9:db:6f:c1:6a:14:12:92:83:13:8e:c6:
8d:f5:a4:1d:6a:9e:b4:46:88:69:b4:73:b7:e9:21:
a2:33:90:07:85:3b:9c:69:fd:81:f1:a8:d1:53:29:
c1:1d:4e:89:1b:5a:30:dc:74:0d:11:71:90:40:56:
0d:4a:cb:f5:e1:50:a1:6f:8c:ae:62:07:28:1f:67:
24:b8:95:f9:d7:db:ef:66:2e:90:ca:63:d1:4c:09:
bb:2e:2b:49:58:bd:9d:cd:07:4d:77:b4:ba:81:ea:
49:41:2d:67:c5:a1:0b:74:21:2e:14:c6:f0:d8:11:
de:b9:86:33:50:cc:3c:d0:d1:fc:83:9e:5b:da:0d:
f4:c4:90:13:af:0b:c0:62:d8:86:f9:66:5d:ea:64:
34:ed:c0:91:40:48:69:d7:77:65:0f:8d:87:0e:17:
de:10:d0:ed:17:98:37:4f:c5:88:e0:48:a0:b1:10:
a8:ac:ff:9b:c0:1c:72:8e:ae:81:6a:ff:64:21:89:
86:bc:ae:a9:77:72:dd:5a:41:f2:b7:86:da:c8:ba:
a8:87:f1:f2:d1:ea:d4:c3:93:b5:40:2d:8f:1c:8d:
9d:a8:8d:a3:ef:47:44:16:da:65:32:55:51:a4:ae:
18:8b:74:ad:10:d4:dd:69:9e:c0:24:16:c7:95:1d:
07:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E2:C3:06:96:89:4E:F3:BF:E9:E7:FF:28:D6:01:FA:3D:D5:4B:59
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:31:02:e7:fc:ee:6d:df:3b:e4:80:66:6c:67:9c:51:8f:66:
01:1f:c7:c9:fa:26:19:35:97:d5:5d:bb:6c:9b:f9:3d:0c:8d:
2d:f7:a3:1f:6f:d0:d2:14:02:25:09:8b:d4:9b:94:cb:1a:8e:
47:9e:40:01:8a:ec:52:07:8a:e3:a3:e3:fe:49:c8:cc:6c:51:
be:b7:ca:fb:a4:f3:76:0d:70:7a:4b:12:02:24:b1:a5:92:06:
1a:1e:0d:e6:11:8d:c9:a9:35:25:57:61:04:8b:ad:99:bd:41:
77:24:54:4e:5a:74:13:a3:73:de:e6:58:92:c8:3a:eb:5c:ba:
5c:1d:bd:58:d2:21:7c:42:0e:e5:98:72:f7:81:bc:d8:73:98:
70:a0:bf:18:25:71:d2:41:be:64:0d:ee:1b:27:e1:8b:67:4f:
87:f4:be:02:25:c9:2d:91:f2:49:6b:09:43:ee:16:e2:a3:75:
9c:eb:9d:01:d4:0d:c4:6e:28:74:cc:be:c5:c1:c2:06:9a:2c:
be:4d:10:8f:fb:35:c2:cb:7d:df:a9:8c:8d:e9:99:cd:9d:86:
40:1e:a1:b1:ab:16:3e:49:d5:76:08:00:b2:49:bb:5d:a9:35:
07:91:9d:ad:c7:6b:7b:ad:54:1c:10:1f:17:41:28:91:8a:2a:
06:57:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:49:26 2025 by rpki-client