Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: kL/l/83sQxuJ1UIuD37Mm9vFwIL1cV3rH0rP8zlwWpI=
Subject key identifier: 10:4B:B6:40:A8:54:63:7E:3D:4C:33:A6:17:2C:C2:63:02:9F:64:D4
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 01988EED431F7A2B9A3194E9627257CF97CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0A62
Signing time: Sat 09 Aug 2025 13:02:50 +0000
Manifest this update: Sat 09 Aug 2025 13:02:50 +0000
Manifest next update: Sun 10 Aug 2025 13:02:50 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: KnZLWaE/ixdopwfGloTNwgjVkZy2PCARJo943qW+8rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:43:1f:7a:2b:9a:31:94:e9:62:72:57:cf:97:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Aug 9 13:02:50 2025 GMT
Not After : Aug 10 13:02:50 2025 GMT
Subject: CN=104bb640a854637e3d4c33a6172cc263029f64d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4e:90:d4:89:4c:ad:67:44:02:56:56:03:ef:
7e:8a:58:83:7b:36:72:2a:b2:7c:75:29:f6:de:26:
41:2e:86:f4:c2:af:31:bf:bd:51:b1:40:3b:ca:cc:
eb:96:a6:80:59:e7:22:ba:af:2f:ee:5d:8a:a8:26:
ed:44:54:ce:5f:8e:28:1a:c4:ff:e8:01:5a:ac:fe:
25:ea:7e:a1:cf:dd:c7:9f:f1:ed:1c:f2:ea:74:8f:
92:12:5c:b2:65:e2:2c:72:f7:7d:e1:60:5b:dd:d0:
16:42:07:2b:29:67:52:98:64:6d:6c:7c:cd:f9:7a:
c0:e4:f4:7c:8a:e9:1d:93:50:40:66:b8:fb:0a:19:
4b:31:da:8b:f3:6c:28:e3:f2:3b:86:eb:ea:f1:a6:
a0:db:14:fa:31:66:25:7c:63:0d:8d:62:6c:5b:ed:
5a:b5:48:09:71:fe:26:be:f0:97:35:a6:0d:a4:d4:
62:ff:19:21:2a:5c:5f:0c:31:c9:33:97:5b:ce:1a:
5d:82:ab:f9:60:e1:0e:59:8f:05:fa:6c:22:0e:f8:
c0:c5:11:c2:ed:e5:78:70:2d:ba:39:9e:cf:fc:dc:
a0:9e:0e:64:a7:c8:f8:f1:89:d1:8e:45:98:98:c9:
91:19:06:83:83:e3:08:41:c3:bc:6f:6f:43:88:11:
f9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4B:B6:40:A8:54:63:7E:3D:4C:33:A6:17:2C:C2:63:02:9F:64:D4
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:62:af:f8:10:2d:52:df:3b:fa:c8:24:7d:aa:41:b4:24:46:
fb:3b:7e:07:3a:cc:ef:10:34:bd:21:64:15:c7:dc:30:d5:89:
59:b2:af:19:56:25:ec:41:49:b6:43:22:b0:ea:bd:b3:88:84:
31:a4:58:ae:20:00:40:46:20:a9:19:a3:a6:b5:f5:5e:db:dd:
53:98:a8:42:bf:f5:dd:cc:eb:50:41:0f:61:d5:cb:ae:67:12:
e7:3c:e0:8d:89:fe:ba:46:87:1a:54:50:0b:7f:1e:83:8b:eb:
ac:ef:13:73:f2:48:5d:06:b9:ef:09:ca:0b:b2:d3:5b:fd:f8:
11:51:9f:14:1e:9f:7e:b5:9b:17:9b:9f:ea:33:61:77:05:ff:
b5:81:b9:9b:94:d7:2d:97:7b:6e:6a:55:8c:9f:89:48:72:36:
84:61:ec:a4:05:a2:e9:5f:0b:39:9c:eb:93:e4:c3:04:c2:95:
62:90:02:45:b9:43:03:c6:41:36:77:a2:01:12:65:cf:24:4b:
97:51:06:8d:60:bf:7f:ef:b2:a1:72:62:d2:22:3b:af:73:a7:
da:a6:cf:c6:ab:33:a2:6f:72:06:7c:c9:d0:e8:81:40:32:03:
eb:0d:de:31:a7:88:4f:21:79:d2:ea:0b:8e:ef:52:5a:dd:61:
08:5a:d8:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7UMfeiuaMZTpYnJXz5fPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzdiZDE0MzI5ODZkN2I1YjljNmU5Mzg2NWU1NDNhYmFm
NGYwZmIwHhcNMjUwODA5MTMwMjUwWhcNMjUwODEwMTMwMjUwWjAzMTEwLwYDVQQD
EygxMDRiYjY0MGE4NTQ2MzdlM2Q0YzMzYTYxNzJjYzI2MzAyOWY2NGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik6Q1IlMrWdEAlZWA+9+iliDezZy
KrJ8dSn23iZBLob0wq8xv71RsUA7yszrlqaAWeciuq8v7l2KqCbtRFTOX44oGsT/
6AFarP4l6n6hz93Hn/HtHPLqdI+SElyyZeIscvd94WBb3dAWQgcrKWdSmGRtbHzN
+XrA5PR8iukdk1BAZrj7ChlLMdqL82wo4/I7huvq8aag2xT6MWYlfGMNjWJsW+1a
tUgJcf4mvvCXNaYNpNRi/xkhKlxfDDHJM5dbzhpdgqv5YOEOWY8F+mwiDvjAxRHC
7eV4cC26OZ7P/Nygng5kp8j48YnRjkWYmMmRGQaDg+MIQcO8b29DiBH5owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBLtkCoVGN+PUwzphcswmMCn2TUMB8GA1UdIwQY
MBaAFAs3vRQymG17W5xuk4ZeVDq69PD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jNGQwODQtMWI2OC00ZGEyLTk4YzYt
NDU1ZDUyZjkwMGMwLzEvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jNGQwODQtMWI2OC00ZGEyLTk4YzYtNDU1ZDUyZjkwMGMw
LzEvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmKv+BAt
Ut87+sgkfapBtCRG+zt+BzrM7xA0vSFkFcfcMNWJWbKvGVYl7EFJtkMisOq9s4iE
MaRYriAAQEYgqRmjprX1XtvdU5ioQr/13czrUEEPYdXLrmcS5zzgjYn+ukaHGlRQ
C38eg4vrrO8Tc/JIXQa57wnKC7LTW/34EVGfFB6ffrWbF5uf6jNhdwX/tYG5m5TX
LZd7bmpVjJ+JSHI2hGHspAWi6V8LOZzrk+TDBMKVYpACRblDA8ZBNneiARJlzyRL
l1EGjWC/f++yoXJi0iI7r3On2qbPxqszom9yBnzJ0OiBQDID6w3eMaeITyF50uoL
ju9SWt1hCFrY6w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:02 2025 by rpki-client