Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: lSuWlAeyknpWCIN/XursE3RYWnOnQNoftkUK+s3IgoQ=
Subject key identifier: 3A:C5:41:D3:6B:D1:C1:38:C4:E9:71:AA:29:A8:8A:21:73:27:62:0D
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 019873E2488D3AEEF232960890A933A7B07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0D77
Signing time: Mon 04 Aug 2025 07:01:06 +0000
Manifest this update: Mon 04 Aug 2025 07:01:06 +0000
Manifest next update: Tue 05 Aug 2025 07:01:06 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: U6vPNKVCubgTgVqXfq0izvXzPIksKGLYwOEgpjoOa04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:48:8d:3a:ee:f2:32:96:08:90:a9:33:a7:b0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Aug 4 07:01:06 2025 GMT
Not After : Aug 5 07:01:06 2025 GMT
Subject: CN=3ac541d36bd1c138c4e971aa29a88a217327620d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:18:d9:3d:38:9a:f4:27:96:bd:0c:d3:90:
20:df:0e:60:d2:1e:c1:b1:bf:e8:43:a3:b1:0c:15:
da:6e:26:25:c8:f1:25:8f:fd:43:e2:a9:04:87:e7:
a5:41:5e:1a:ed:be:f8:64:7c:50:3d:56:c3:14:b3:
9f:74:42:89:9a:ad:9d:88:b1:b4:21:37:46:2b:a0:
f8:8f:06:dd:33:6b:ca:10:3c:8c:ac:43:d8:a7:85:
9f:9c:c8:87:27:9f:25:f2:a1:c2:64:6b:06:3d:a2:
e6:3f:b1:5d:a1:f3:a7:85:59:34:88:0a:e1:2d:00:
1d:49:44:98:d7:f2:80:bd:f6:29:3d:d5:71:e4:a9:
e6:7b:4a:b8:db:f6:48:5a:64:38:1e:4b:8a:1f:df:
b4:2a:55:06:25:aa:e5:57:a5:08:27:fc:0b:65:67:
7f:7f:5a:ec:f2:6c:ee:a1:0f:f7:40:7b:e6:da:e6:
08:2d:f8:7e:58:50:50:5e:ad:a4:a8:49:7a:71:4d:
3e:52:ec:22:f8:4a:8f:86:28:9e:ac:97:35:86:9e:
3e:55:3c:8b:bb:1c:29:16:fc:41:d9:59:6b:07:b2:
89:98:09:c8:6e:d6:c5:75:d0:60:3a:3e:f2:d6:7b:
1c:2b:af:c7:31:9b:05:be:8e:f7:b5:eb:26:18:56:
4c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:41:D3:6B:D1:C1:38:C4:E9:71:AA:29:A8:8A:21:73:27:62:0D
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:01:70:cd:78:ba:dd:86:d8:13:96:5d:ad:b9:34:77:99:53:
54:bc:d6:d8:4b:cd:27:04:d2:1c:f1:85:ce:31:71:05:9b:7f:
50:94:76:fe:09:63:8a:92:2c:e8:12:48:60:0d:99:62:2a:6a:
8b:25:4d:eb:c8:98:54:89:c9:ec:2b:93:ed:9d:61:ef:ae:a7:
e7:48:c3:26:0c:69:cc:08:26:2e:e3:38:c4:87:0f:ee:4f:f9:
f7:04:13:c1:58:f5:a1:d1:ad:24:ab:6f:b3:0a:51:85:b7:cc:
25:2a:3d:4f:b3:70:7a:90:0a:d6:e0:25:4a:39:0a:cd:9e:51:
81:e9:94:18:cc:c7:bc:fc:29:4c:02:15:0d:3f:36:ba:a4:4f:
f0:d7:f1:e8:3b:f7:c4:d0:72:a2:40:6e:ac:e9:96:f7:9f:65:
02:29:76:1b:77:4c:cd:f5:14:32:4f:2f:e0:bf:51:0f:f9:1e:
09:96:db:d3:5f:18:ee:cd:86:4a:a5:51:11:d8:87:d4:11:28:
49:31:87:43:98:7f:cf:26:be:55:e4:0d:5c:db:7e:eb:58:3b:
d5:83:c6:91:23:b2:91:10:a2:fa:d6:54:53:01:e0:e8:3b:ba:
59:d5:b8:fe:e6:bc:e8:c0:86:18:20:93:08:ac:3f:17:5f:19:
ec:ae:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:26 2025 by rpki-client