Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: eeVzk5hfeZgyNF3quG3FWyioTG1uTG5olFGPFRF9EmM=
Subject key identifier: 50:1D:00:0A:88:6D:1F:A3:10:6E:DE:BE:73:19:DB:22:6D:C9:86:28
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019873E28828F6C08F901CAB0DA6861931EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0A2B
Signing time: Mon 04 Aug 2025 07:01:22 +0000
Manifest this update: Mon 04 Aug 2025 07:01:22 +0000
Manifest next update: Tue 05 Aug 2025 07:01:22 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: EM+T8ftD1VB6wNCkGE+RfdA9QS0YNi17zfvdSF3nwQA=)
2: RymBY7lnNBMXp_yUGm6cXmk9pIY.roa (hash: NXhw0vi4/QtrtywYV0kwabkAShMb2W3sLGUUgAEfvq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:88:28:f6:c0:8f:90:1c:ab:0d:a6:86:19:31:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Aug 4 07:01:22 2025 GMT
Not After : Aug 5 07:01:22 2025 GMT
Subject: CN=501d000a886d1fa3106edebe7319db226dc98628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e5:04:bd:81:61:7e:0e:65:78:84:72:c9:70:
18:88:ac:1b:62:ac:8d:87:80:50:1e:62:25:62:a6:
25:dc:17:51:b4:39:cb:1e:58:25:d0:a5:f7:3f:3d:
93:36:b9:6e:55:96:c1:57:d7:6e:50:76:2e:a5:ce:
bb:1c:33:e7:84:96:76:9e:2f:fd:77:e6:18:1c:10:
55:88:30:e3:97:64:1b:b8:e9:62:09:ad:fb:4c:33:
4a:c2:c1:27:4f:c9:ad:bb:02:d6:9a:4e:c3:43:41:
06:96:e1:3b:8d:d6:17:b5:a1:e9:0a:bd:08:20:4e:
dc:f4:43:7e:54:47:f8:e0:6c:b0:98:ac:fa:72:4b:
78:e6:f4:ef:45:9f:f8:d4:59:9c:64:17:c6:d5:fd:
ae:1e:0e:fa:03:5c:76:76:55:32:f3:68:fa:bb:27:
53:a1:2b:35:3f:91:85:f7:c7:0f:00:77:7b:13:4b:
45:f4:67:7f:b8:3b:22:4f:68:df:8d:5d:fc:36:6a:
c2:db:62:4d:26:d3:e1:39:5b:ad:f4:a8:c0:e9:3e:
1d:0b:e5:03:44:56:9a:33:36:7d:a7:69:d7:aa:d2:
f4:f5:91:5a:bf:84:46:cf:6d:60:50:3a:98:99:11:
04:b0:e1:4f:a9:35:07:b7:24:57:5d:a0:07:2f:de:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1D:00:0A:88:6D:1F:A3:10:6E:DE:BE:73:19:DB:22:6D:C9:86:28
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b0:95:55:51:b0:be:6b:79:88:32:99:cb:63:28:a4:73:ea:
a5:ab:f0:95:ad:79:af:a5:8b:37:53:4f:16:4e:5e:d8:b7:0f:
25:bf:5e:38:22:16:0a:9b:2e:db:d4:81:a3:b6:c7:8f:9f:f9:
16:98:b8:83:2c:2a:65:ab:1b:aa:00:0c:d3:d3:57:18:e2:5d:
c2:5e:38:0f:6d:47:da:90:f5:20:89:19:2f:ae:00:86:80:ce:
62:c8:42:c7:36:e4:0c:23:50:ec:b0:78:05:ad:85:4a:5d:18:
b2:24:80:1e:32:a6:88:ef:b0:46:0d:42:9c:d9:9a:7d:75:5c:
43:9b:d6:d5:a5:49:c6:30:df:c9:76:32:46:e2:73:d4:48:de:
3b:57:11:1d:4c:13:bc:9d:48:41:69:17:60:5d:f6:f8:a3:93:
50:af:0d:ee:d3:36:97:a0:77:a3:37:85:e8:75:69:98:e6:cb:
ad:8c:83:ad:07:82:af:67:b0:cc:51:72:40:30:7c:5e:4b:79:
8b:d9:79:4e:79:d1:b9:7c:b0:ea:63:98:e2:36:d9:f4:5c:cb:
2e:65:e2:fd:a8:cf:6b:5c:dc:86:1f:17:a7:53:76:f8:23:ec:
44:e5:ad:61:ae:73:78:ac:f7:83:1c:9d:55:f7:63:a0:1d:51:
32:68:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:59:22 2025 by rpki-client