Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier: v2duNSIPnqV4/l+sdsSRdsyWXMfdKJbvyEmjnzLSgKQ=
Subject key identifier: 46:12:6A:C6:12:15:B8:C1:C7:5B:36:4A:8D:8D:DA:67:E3:56:A8:D7
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer: /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial: 019923A00FD83515470D9C35BB5FC9634255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number: 052C
Signing time: Sun 07 Sep 2025 10:01:56 +0000
Manifest this update: Sun 07 Sep 2025 10:01:56 +0000
Manifest next update: Mon 08 Sep 2025 10:01:56 +0000
Files and hashes: 1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: 56+Jer+G9aIhvhep50N32MEuAny2Oc/cFR2PUSNWTx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:0f:d8:35:15:47:0d:9c:35:bb:5f:c9:63:42:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Validity
Not Before: Sep 7 10:01:56 2025 GMT
Not After : Sep 8 10:01:56 2025 GMT
Subject: CN=46126ac61215b8c1c75b364a8d8dda67e356a8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e8:97:dd:27:92:17:08:d7:36:9e:48:a3:ba:
62:14:3a:ed:99:3f:e4:8f:0c:55:c6:b0:a2:0f:8f:
b2:69:99:5b:7f:b6:eb:8c:09:0e:d0:51:32:1d:19:
e4:6d:a7:38:7c:14:e7:29:69:35:ea:0a:82:97:f9:
4f:6a:0c:e6:78:69:dd:6b:77:fc:ef:91:0b:34:a7:
56:80:bd:8d:65:89:de:bf:f6:ac:f6:90:27:c2:0e:
7c:bb:7d:ba:59:79:f5:38:ed:a7:6c:02:32:0f:25:
84:d1:b7:a8:45:70:da:e4:84:f7:b2:3b:c9:e6:88:
50:b6:19:a0:fa:20:de:09:3e:e6:08:5f:3e:aa:e3:
e7:ca:66:c6:18:cd:f0:ac:c2:14:5c:34:8f:73:33:
d8:5a:25:48:fe:7d:0b:30:b4:58:72:55:bd:0d:d4:
29:77:01:cd:0e:74:1c:f9:60:77:58:94:b7:01:6a:
9e:cb:29:fe:29:1e:51:71:b8:d9:1b:55:df:f8:c0:
36:d2:b5:0a:09:fb:ec:af:75:b7:fd:df:ed:03:1e:
f2:72:a8:f7:bb:34:e2:4b:76:52:77:a4:0c:14:ce:
55:b8:44:b6:07:23:e7:84:01:52:b5:38:42:49:fa:
a4:49:99:6a:93:8e:88:26:ef:47:cf:bb:a0:15:09:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:12:6A:C6:12:15:B8:C1:C7:5B:36:4A:8D:8D:DA:67:E3:56:A8:D7
X509v3 Authority Key Identifier:
keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:06:9f:e8:96:ab:75:7f:76:33:0d:c4:57:15:94:9d:2c:80:
c6:47:6d:9f:d5:fb:fb:2a:ce:c6:e9:a8:28:bd:d5:93:79:15:
ed:a3:27:b1:fa:79:c5:b7:29:60:68:ec:b4:ea:52:3d:c0:f1:
07:da:be:81:1d:ac:93:fa:09:08:4b:c6:ff:55:7c:52:d9:da:
de:6a:e4:59:bb:1f:9a:81:d4:39:56:f1:35:67:39:65:16:93:
ab:d6:b1:5b:4a:19:03:cd:e1:b2:b9:13:46:82:0f:dd:c3:3a:
be:d1:0c:b8:e7:ea:d4:26:9c:0c:ab:d3:3f:43:c1:02:63:c7:
9d:27:1d:0e:23:3e:18:b2:4e:22:f9:04:42:f4:ff:19:79:d0:
d4:10:f5:7e:dd:55:bb:33:56:5e:8a:16:28:49:88:a2:c4:a6:
74:27:4a:58:ce:9f:f8:32:cd:78:83:15:35:b1:fa:87:04:df:
84:72:55:1c:51:e7:45:90:fb:9c:28:d8:13:3d:0e:b7:be:6e:
0f:37:0b:ee:2f:3f:2d:de:4f:0b:88:fd:b8:75:4a:3c:89:ad:
13:a3:b9:6a:df:01:af:f6:73:ef:18:64:cc:3f:2f:db:0c:d2:
ed:3d:1d:9e:78:73:c9:db:74:f6:a4:85:3f:b6:8c:ab:b4:58:
eb:30:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:55 2025 by rpki-client