Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: JsqM8GyoGxkWHInU2H29GztwLplzb3/h2o5bKXawmTM=
Subject key identifier: B1:67:48:94:17:94:0D:2F:5F:EB:54:FF:7C:A9:1A:70:7E:41:71:7E
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 0198733D91E0562506E2A864B3E18E500327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 09FF
Signing time: Mon 04 Aug 2025 04:01:11 +0000
Manifest this update: Mon 04 Aug 2025 04:01:11 +0000
Manifest next update: Tue 05 Aug 2025 04:01:11 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: Qyg2MHHnXX44TvzWboDk9tnoY7xfzmjZ7gXmyPw2bGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:91:e0:56:25:06:e2:a8:64:b3:e1:8e:50:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: Aug 4 04:01:11 2025 GMT
Not After : Aug 5 04:01:11 2025 GMT
Subject: CN=b167489417940d2f5feb54ff7ca91a707e41717e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:87:95:fa:7b:af:6d:84:0f:df:c3:84:0e:
80:20:ae:ba:fe:59:8b:17:ba:27:9f:15:e1:66:3b:
66:c8:73:b4:8a:70:b0:5e:62:6a:ec:af:31:b3:e0:
a6:cf:3d:20:31:45:ca:a6:74:56:52:28:33:eb:f6:
69:2b:d4:c0:fd:8b:80:5b:a3:d8:cf:4f:26:3f:33:
f1:7c:4c:77:ea:27:c1:4a:51:c4:46:8c:a4:5e:a9:
93:73:61:c5:0f:44:dc:b9:4f:6e:66:22:5f:47:61:
ec:d4:ce:2b:36:61:0d:8c:af:8a:60:7b:8b:4a:69:
a5:a2:33:90:71:09:7e:09:a1:9a:8c:3c:99:04:a2:
d1:86:15:46:41:9b:39:53:4e:b1:14:10:c9:46:47:
88:56:ef:87:48:74:8f:b8:ce:f3:fa:ec:c3:08:1b:
07:ce:47:ed:88:e3:41:5f:34:47:8a:bc:8c:45:7f:
e5:bd:bf:be:19:7b:13:2b:f6:8f:e5:2e:db:63:10:
ea:49:5e:3c:f6:56:41:de:99:f0:83:4a:78:24:1a:
fa:6b:33:64:90:8c:9f:3c:57:06:44:f0:75:8b:01:
a7:48:38:04:59:2f:a7:d3:30:f2:ec:4d:14:81:8e:
3f:48:aa:ba:75:be:39:62:82:67:6a:0c:3c:c8:9a:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:67:48:94:17:94:0D:2F:5F:EB:54:FF:7C:A9:1A:70:7E:41:71:7E
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:14:bd:7b:28:29:74:ac:d3:76:06:7e:fa:a5:a8:04:f5:d5:
8b:82:c0:e1:ae:d2:d4:a0:17:58:48:16:d4:2c:fb:6b:5c:b9:
f9:a0:ab:e5:78:58:c7:4a:1f:39:0c:7c:b0:a7:fd:b0:60:46:
8e:f5:d8:6b:67:4d:20:d3:92:b1:f1:ab:0d:02:c2:be:32:3b:
f1:a5:03:18:3e:ff:53:4e:41:82:46:0a:76:fe:b6:2d:46:2b:
7e:6b:f6:43:b3:cc:17:48:43:d8:ed:1e:45:9a:24:e8:83:65:
44:89:0c:51:4e:c0:a8:02:30:c8:d8:4d:30:ad:8e:a2:6f:0d:
21:2e:7f:4f:1a:cd:2c:6b:70:91:ee:24:c8:07:0d:b2:67:77:
ec:f3:48:ef:54:7d:f3:4c:39:03:48:b0:eb:5c:e4:19:3a:42:
1d:f7:2f:3d:8b:d2:20:53:32:9b:2f:52:54:dd:19:0e:4a:c6:
b6:8a:a6:a0:5f:44:eb:e1:2b:1e:81:90:e9:c4:de:e1:7a:76:
ac:95:f0:59:32:71:ce:c1:81:72:b8:06:53:28:c8:af:e3:19:
3a:6f:3e:69:ff:ed:55:66:c7:6c:8b:84:e3:07:4f:78:ad:da:
00:fb:50:08:ef:f6:35:42:37:87:8f:36:27:0c:1c:74:ca:bf:
31:a9:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:53 2025 by rpki-client