Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
File: ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json)
Hash identifier: VCTCmfeIvvEVbAXBXAV3HVXXMVr30HzcDa/y67wybQk=
Subject key identifier: 11:6B:FC:A5:B3:30:37:C9:0F:D8:0A:54:B4:EE:41:D7:9E:F0:65:EA
Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
Certificate issuer: /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Certificate serial: 0198A15F53201E2BE79B22EE12FE30E01D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
Manifest number: 067D
Signing time: Wed 13 Aug 2025 03:00:35 +0000
Manifest this update: Wed 13 Aug 2025 03:00:35 +0000
Manifest next update: Thu 14 Aug 2025 03:00:35 +0000
Files and hashes: 1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: wOSOk2XckTELq8X3pjSd+jeeQxsx0Ly6B2v+/oxsuiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:53:20:1e:2b:e7:9b:22:ee:12:fe:30:e0:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Validity
Not Before: Aug 13 03:00:35 2025 GMT
Not After : Aug 14 03:00:35 2025 GMT
Subject: CN=116bfca5b33037c90fd80a54b4ee41d79ef065ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:f1:78:ee:e3:71:bd:7a:98:0a:3c:18:a2:
30:37:5e:30:5f:d8:35:92:5c:56:81:44:ad:36:81:
69:c0:b0:fb:79:a0:f0:6c:d1:b7:fe:20:92:a8:ce:
b8:e0:6b:28:04:e9:db:74:1a:2f:17:0c:11:a7:57:
6f:e4:69:3c:14:64:08:f7:3f:8a:ea:f6:4a:f9:4c:
b1:8d:2e:d3:07:98:5b:51:20:0d:a3:63:a7:c9:f5:
6a:69:d8:ff:23:9e:83:6c:23:4f:6d:58:3d:c9:f7:
dd:85:2c:36:76:59:fc:46:e6:11:3b:6a:c3:df:16:
0c:e7:1e:03:f9:02:7c:f2:78:d3:e1:7d:1d:6a:37:
de:a4:c5:06:f3:0f:a0:35:2e:26:e6:a0:93:bc:37:
bf:8e:e8:a8:b7:f9:52:a6:77:a5:c2:a8:e6:c3:74:
f9:f5:55:7a:85:f1:97:13:8b:1a:cc:d7:df:00:fe:
7a:f8:5a:03:96:49:4b:09:65:c5:41:17:62:f5:d2:
91:82:de:5e:95:fc:ee:56:e3:e7:0f:48:74:e6:38:
b3:1c:3b:a9:82:0f:09:0f:74:47:09:da:a2:5c:51:
64:f1:ba:1e:97:58:7f:24:12:f2:19:ae:5f:92:6a:
08:e7:dc:46:d3:c4:d9:e5:3a:1c:52:6b:aa:7e:ba:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:FC:A5:B3:30:37:C9:0F:D8:0A:54:B4:EE:41:D7:9E:F0:65:EA
X509v3 Authority Key Identifier:
keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:64:15:f8:c9:21:39:a4:e7:89:62:29:0e:d5:02:c2:a3:81:
f3:7d:c8:4c:a8:fc:5d:ea:2f:18:ae:4d:27:32:22:46:7b:07:
c4:f9:77:d8:fa:6a:3a:ca:c2:b4:7f:c3:4e:c7:03:f2:73:bc:
40:f7:99:05:08:0d:6b:4e:32:24:b5:f5:2e:01:0d:44:77:0f:
20:53:e4:c9:5a:8a:69:65:2b:c3:99:a1:d3:62:f0:e1:f6:ed:
a4:44:a6:19:8f:e9:a4:5d:87:47:a2:bc:e0:b2:9c:a3:67:f0:
88:4e:27:8e:c2:eb:f6:a8:72:2a:0a:b8:14:12:6f:1e:ce:46:
a0:78:35:30:99:91:68:b0:4c:d2:83:4f:67:d1:81:59:fb:57:
38:44:f2:28:1f:aa:88:33:c4:16:d6:da:c6:57:0d:99:20:33:
e8:66:57:26:82:52:11:37:2a:bd:af:89:c4:65:28:c5:34:0b:
17:e8:8b:57:93:0f:fa:b9:4a:54:fb:3b:c5:13:7b:6d:6e:c3:
55:8b:57:af:69:54:c2:85:32:4f:e5:c3:47:3b:e5:fe:e8:2f:
cf:c3:6f:21:8e:a4:cd:ee:10:1f:cc:b5:c7:c3:68:c3:ae:43:
15:2c:76:f7:ae:8f:92:e5:3a:9e:48:c2:56:8a:ee:14:39:b5:
c6:52:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:21 2025 by rpki-client