Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: 0wjqmPV1GJWpJEDZrHVQSYipwPOPuBcSmAn7nCfIIIA=
Subject key identifier: 49:B4:39:14:C3:9B:89:13:B5:37:DD:27:74:9C:47:E1:D1:D7:0D:10
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 01987D8BAD370F1B4C7D29D01A0836E799B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 04:02:42 +0000
Manifest this update: Wed 06 Aug 2025 04:02:42 +0000
Manifest next update: Thu 07 Aug 2025 04:02:42 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: XNV02zSh45ZqJQoO7r7dtdGfQgCUgiba6hYqtycHcxc=)
2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:ad:37:0f:1b:4c:7d:29:d0:1a:08:36:e7:99:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Aug 6 04:02:42 2025 GMT
Not After : Aug 7 04:02:42 2025 GMT
Subject: CN=49b43914c39b8913b537dd27749c47e1d1d70d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:2b:88:d7:34:15:de:d3:8e:22:67:25:aa:
46:ec:cb:2f:69:29:d0:85:e7:71:3a:f1:4d:4d:29:
4a:f4:fa:ab:5c:9c:0d:39:2c:82:3d:dd:e4:cc:7b:
1b:b5:1d:ea:2d:6c:16:7c:c0:df:f4:e1:d4:a5:1b:
f4:53:38:34:1b:34:0e:08:ca:c8:19:98:c3:11:c6:
89:4f:21:18:24:2e:cf:3f:5c:62:d4:b5:57:66:9a:
65:f1:05:6c:25:e4:db:2d:92:f6:49:5b:e2:10:2d:
bf:c1:f9:a1:2a:4d:7a:c0:87:eb:c0:02:92:47:7e:
f4:9d:a0:37:ea:a5:23:37:a9:e0:90:b8:11:bf:f6:
1a:21:cb:79:45:2f:e4:6c:64:3f:8a:23:b4:14:69:
37:dc:f5:bc:64:d2:39:99:75:a2:f2:6b:41:3f:0d:
fa:ef:7c:6a:5f:9c:71:f9:a5:ac:ee:47:93:0e:6a:
c3:e8:e5:dd:15:5c:c0:24:4b:e5:88:f1:26:48:00:
87:27:66:a7:80:af:85:88:f5:59:e5:ec:2b:a2:f5:
f4:bc:a3:b3:27:e0:7a:1e:2d:c4:c2:76:f4:c6:2e:
20:6f:51:22:59:f2:9d:72:e2:c4:e1:1a:70:f1:65:
2d:72:5e:0c:4c:b9:7c:6a:09:69:14:1c:fe:6a:de:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B4:39:14:C3:9B:89:13:B5:37:DD:27:74:9C:47:E1:D1:D7:0D:10
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:24:21:d5:a0:fc:c8:50:32:35:fe:6a:70:25:28:db:6a:75:
76:ab:8d:f6:5b:05:63:52:55:89:6b:84:5c:d0:a4:50:84:79:
70:01:6c:f8:20:ce:23:2e:5b:15:9f:53:64:db:ec:cd:7a:ef:
c6:04:cc:d7:ff:80:00:fd:fe:31:13:8e:93:0f:8a:3a:01:9b:
4f:d1:76:d2:e1:6b:c9:bc:05:a5:d5:29:08:d5:da:ad:13:b7:
1a:07:0b:40:c0:ba:28:56:69:f5:b0:1d:98:d0:44:0e:ca:cd:
b5:eb:3f:3c:14:9b:b7:72:3b:9f:b9:31:48:40:33:b4:bc:ea:
e8:d1:fe:9e:82:26:8e:7b:d5:76:49:e3:d4:03:fe:eb:00:20:
78:f7:63:48:26:e8:31:4d:35:d2:9e:78:7e:cf:64:b9:98:93:
30:73:f0:2f:54:b1:5b:60:b9:ce:b6:38:4f:af:a1:cc:08:0f:
53:90:22:06:f0:28:01:4a:dc:11:ed:21:0e:2d:ff:94:69:6d:
b9:bc:89:8d:58:4b:2a:a8:e5:95:50:a5:a1:ee:d6:24:9e:1f:
d9:ce:6d:3d:b3:7a:ee:15:0c:45:cd:7f:0b:52:ca:e8:d7:f4:
fa:37:23:f7:3f:94:93:e6:4b:48:b0:92:90:0b:15:0c:8f:ed:
e5:83:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:47 2025 by rpki-client