Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
File: C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json)
Hash identifier: RZlSqnvfh6GWLEVSfgAsoomybd7L6CBcMuyIDfAzY8w=
Subject key identifier: 1F:B4:22:1E:C3:C9:95:E6:68:17:50:7C:14:0C:45:D7:45:F4:F0:5C
Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
Certificate issuer: /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Certificate serial: 019A7112A67AD3EECF3AB6DA391316D2C911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
Manifest number: 0DFE
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: DbmrIKLEkzohpH9DsVKvuIsLH+hRTU+u6Z5X3F1Iopw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a6:7a:d3:ee:cf:3a:b6:da:39:13:16:d2:c9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=1fb4221ec3c995e66817507c140c45d745f4f05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:84:13:c9:58:dd:41:41:17:14:67:6e:55:
2a:e5:52:81:b9:d3:d7:10:15:81:bf:c7:a4:b5:66:
5a:ba:d6:d5:fb:22:60:c8:5e:8e:8d:c6:06:c8:0e:
3c:9d:09:d6:c6:fd:b1:e3:77:28:f3:63:d1:3d:d3:
cb:1e:da:ea:fb:2a:04:1e:58:a8:b9:d2:57:4c:78:
86:9f:fd:36:69:3c:8e:a1:ec:c3:09:a1:de:bb:37:
16:e6:73:e1:d6:ef:cb:be:03:ae:9c:66:5e:12:91:
14:a2:01:b2:7b:49:28:84:2b:24:56:e3:ad:62:b2:
19:ca:5a:27:b0:db:ba:15:04:9b:3c:3b:e0:1b:5e:
ff:3b:d0:28:c4:a0:3b:41:09:75:f0:a4:8e:cb:2a:
fc:cd:53:3b:3e:ce:09:42:c2:78:35:06:b5:b9:6f:
36:cf:cb:47:03:dc:67:00:11:f7:1b:8c:3a:e9:01:
c9:92:68:61:cd:c6:7c:a8:56:6e:90:e0:4c:82:93:
32:62:f1:2d:af:c6:a6:0a:a9:a1:2f:fd:f8:62:3a:
83:2d:05:eb:98:5d:04:99:4a:b2:2e:83:1e:ee:cf:
9c:3a:25:4d:57:79:8d:7c:fa:68:f2:26:60:9e:54:
e2:3d:b0:1f:02:d7:79:aa:ac:c8:8e:a2:8a:37:6f:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B4:22:1E:C3:C9:95:E6:68:17:50:7C:14:0C:45:D7:45:F4:F0:5C
X509v3 Authority Key Identifier:
keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:63:cb:49:7d:41:8e:92:f3:7c:6f:20:29:72:d2:d2:db:75:
22:90:14:4f:7f:10:78:62:d9:99:82:a0:52:52:e7:4d:a7:0b:
eb:77:fb:e4:46:78:72:82:b7:0e:f5:10:3f:9b:b3:7f:a8:d8:
8b:ed:39:f3:db:f1:c6:a1:1d:b6:ff:16:3f:9c:1d:f6:3e:d3:
e3:1f:52:da:ab:7a:01:05:be:c6:26:fe:8e:c7:67:7b:5d:41:
c7:89:44:ec:9e:63:3a:a0:2d:c1:53:b9:61:fd:d3:a7:1c:63:
1b:44:11:cb:a2:17:9c:bf:16:43:23:36:07:76:36:5b:0a:23:
0c:d4:4b:0e:d7:1d:78:88:b0:16:05:b6:01:1b:f1:e5:9e:36:
66:7e:54:90:d7:df:d5:7a:9e:84:33:d9:60:aa:45:a5:3b:78:
5a:d2:9a:21:35:bb:46:6f:b8:f3:0e:a3:1b:d9:c8:7a:f3:dd:
2b:cb:70:f2:56:65:ff:ab:49:02:f6:57:b4:3d:cc:b3:f2:3b:
f5:1a:bf:4c:d3:5d:e4:b7:21:9f:a9:53:15:be:45:49:95:51:
03:c1:55:10:90:44:c0:40:f4:a3:87:5e:14:96:eb:9b:84:10:
6c:7f:a0:84:c4:46:ae:20:94:66:e9:35:38:ea:59:7d:2c:ea:
8f:76:31:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:16 2025 by rpki-client