Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: yeShLJGjNw4LOtngvQVCboamHkGZQposqx5TVZ8wVOE=
Subject key identifier: 5F:14:7B:7F:A5:A6:AB:F4:B1:CE:51:1B:95:0C:54:9F:DF:4B:9C:83
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019A4E18C941A96BFD8892A608EF5BD5DA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0B21
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: s9a2kT/isqv8aMVCrvVrKMMO5BemPy8v0YKCVXsEFNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c9:41:a9:6b:fd:88:92:a6:08:ef:5b:d5:da:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=5f147b7fa5a6abf4b1ce511b950c549fdf4b9c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e3:3d:6b:a2:d6:2b:a8:a7:c6:e3:11:09:8a:
09:99:7f:43:13:a0:93:1e:df:b7:47:ea:c1:1e:bf:
e8:77:24:5c:28:77:d6:88:53:6e:cb:39:99:10:e7:
c5:84:0b:5b:93:04:ae:99:84:56:a5:2c:88:5c:86:
f8:c8:de:26:a3:dd:29:6e:ee:ce:c8:11:f7:fa:ea:
4f:b5:8a:76:a5:09:6b:3f:b2:3c:28:c7:2a:e9:fe:
d1:7e:77:2b:07:8c:31:52:9f:c5:61:ff:cf:71:36:
5f:5f:11:5d:8d:cc:e8:54:26:4b:d3:01:15:42:aa:
42:2b:f6:68:48:03:dc:c2:f7:24:dc:02:a9:33:46:
0d:8f:37:bb:ed:d4:22:99:dc:a2:90:1a:6e:2e:c4:
8f:c4:a6:e4:99:59:86:98:ce:cb:84:ec:0d:64:3d:
ac:45:e8:c5:17:eb:c6:df:4a:57:15:0e:2b:8c:5e:
02:13:2d:f7:17:d0:90:8b:88:56:f4:b0:d0:d1:21:
7e:08:98:80:55:9b:6a:1f:25:18:f9:9c:65:76:46:
d9:c4:ca:a2:b8:db:f4:7d:e3:94:a9:03:08:db:e5:
33:3b:1c:01:71:9d:d1:36:00:54:89:3d:22:71:ab:
78:ee:c1:a4:7e:f3:1a:10:aa:13:86:39:97:48:01:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:7B:7F:A5:A6:AB:F4:B1:CE:51:1B:95:0C:54:9F:DF:4B:9C:83
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6e:8f:fe:3d:d6:bd:a4:b2:73:c9:1c:57:9a:04:ed:4d:9c:
54:b3:88:90:56:f9:75:0a:9c:35:7e:06:34:56:b5:99:55:e7:
46:20:28:1c:d6:cd:17:d9:a8:70:41:3c:6e:bd:18:70:b8:70:
ce:a1:9c:2a:c2:68:a2:cc:76:1f:71:95:85:4a:06:62:5c:da:
8a:91:ac:8e:67:62:0b:24:27:ca:55:d6:b9:97:80:32:ed:e7:
2a:a6:dd:0e:d8:7f:8f:72:6a:1b:cf:fe:d5:8f:fe:ee:c5:1e:
1c:69:1c:a8:89:e3:c4:08:db:e8:69:b6:34:c2:43:bb:f9:2c:
56:b5:97:65:a9:c3:7a:b3:ff:e6:a0:1d:c7:12:0c:d9:98:b7:
3b:8c:fd:e6:d8:7b:f8:f5:bc:7b:76:35:82:fe:e1:7b:57:dc:
e4:8e:da:17:76:fb:fe:45:9f:6a:a0:b1:5a:17:ed:1c:61:be:
6c:ac:58:99:5a:ea:9c:7d:32:ac:a3:45:83:c5:61:3c:03:0d:
27:30:cd:37:b6:da:cb:8c:ad:fa:77:8a:81:ce:da:80:4a:48:
eb:50:d3:9e:1c:b8:1f:3e:e6:9d:7f:ad:05:0e:81:2f:20:58:
ad:4a:de:17:9b:d3:82:5c:dd:bc:08:18:93:ca:76:e2:55:3d:
25:85:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:17 2025 by rpki-client