Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier: qHTMQcjuHqsMYzbQcV6PNgD+orcG876+0OrxX/U1rN0=
Subject key identifier: 9C:A8:F4:48:9C:5E:57:F4:07:59:2C:52:72:21:BA:4E:CE:0A:E0:43
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 01993802A8F8241826E0FE88D8FF6D1E5E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number: 0E12
Signing time: Thu 11 Sep 2025 09:02:02 +0000
Manifest this update: Thu 11 Sep 2025 09:02:02 +0000
Manifest next update: Fri 12 Sep 2025 09:02:02 +0000
Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: REhowkrmCIJ/R0qWHB4fxW0o6ub2k+pU6jR0WkBh8hg=)
2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:a8:f8:24:18:26:e0:fe:88:d8:ff:6d:1e:5e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: Sep 11 09:02:02 2025 GMT
Not After : Sep 12 09:02:02 2025 GMT
Subject: CN=9ca8f4489c5e57f407592c527221ba4ece0ae043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:8b:76:54:02:ce:52:d0:b6:93:52:f3:59:
b2:02:35:ac:04:d1:f8:b5:a0:04:89:79:6a:6c:4b:
e2:60:92:50:b6:19:89:bf:74:98:c8:19:90:59:a0:
69:48:ca:1a:9b:4c:ec:21:2f:ac:b4:6f:5c:6b:d0:
33:cd:62:33:36:b0:9e:93:46:15:31:1a:72:4d:18:
b0:7d:70:0f:b3:e8:f6:96:7a:2d:a8:44:f7:91:d4:
9f:d6:7b:0b:bd:50:ad:a2:2d:4f:31:e7:56:63:9c:
22:e2:67:5b:c0:20:7e:6b:f9:05:43:19:62:b0:47:
14:38:81:c2:e0:d0:e5:f5:02:28:2d:9c:73:3b:3c:
12:98:93:44:45:c3:45:7e:43:a1:b3:1a:3a:d0:ed:
fe:c8:e7:f4:80:00:9d:aa:cf:5a:f6:0e:48:da:9f:
bc:6d:93:1b:b1:b4:44:5a:e9:c4:0e:58:91:69:e5:
fc:48:cf:16:d0:a5:69:a8:04:0e:85:a0:c4:90:12:
a8:04:1a:d6:69:b6:6a:8d:a8:44:65:35:4c:8d:be:
b9:3a:2e:67:17:b0:24:ca:c2:e2:14:ad:28:21:15:
68:5b:05:e0:9d:a5:bd:65:42:2f:ee:94:19:0e:c1:
a8:e9:86:f5:39:4b:a0:7b:cb:5f:ad:da:91:16:81:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A8:F4:48:9C:5E:57:F4:07:59:2C:52:72:21:BA:4E:CE:0A:E0:43
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a4:f9:76:02:bd:d1:8f:1f:09:70:c1:2a:b1:4c:ff:88:1b:
12:e3:23:12:0e:34:66:4a:3f:0b:45:4e:ad:7a:68:ca:3c:00:
4f:7a:48:ab:92:a3:b9:2a:63:3e:28:3d:a3:1e:d6:5a:56:2b:
66:83:1d:a7:ac:fc:86:1b:4a:4a:69:1d:0f:fd:a3:57:84:a3:
23:19:e8:37:67:98:69:74:26:ca:3a:42:89:47:f2:02:83:60:
be:26:ec:ce:d4:2e:91:ab:3c:a4:29:6f:72:64:39:69:bd:8c:
83:82:fe:0d:90:ea:fc:5e:84:75:43:c4:24:ea:87:d6:79:c9:
d9:71:35:6f:e8:9a:6e:9b:b7:3e:9c:64:e1:d8:ca:ae:22:73:
be:66:5c:e3:49:9e:cf:55:61:04:8e:9f:f9:af:49:e1:43:8f:
88:51:b5:24:3f:64:76:73:e4:df:fd:22:1d:2c:f9:22:a5:85:
32:5b:6c:61:ad:fe:e5:c0:de:70:b6:f6:27:9f:16:c3:73:45:
8f:02:d7:6b:b6:18:45:9e:d5:1f:60:3d:3b:9f:18:ad:6a:9a:
71:ec:3f:6e:4d:6b:4f:d8:73:34:22:f4:04:82:d8:73:19:8e:
ba:06:f7:a8:a6:4b:d0:8f:ee:80:32:0b:06:be:d0:71:78:b5:
6f:76:ed:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:39:51 2025 by rpki-client