Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
File: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft (raw, json)
Hash identifier: VWAhF8BUMr3wOj9EG2lRzGlH+LicSpvIkMB1y95PCJ4=
Subject key identifier: 64:FC:0E:F7:BE:14:8B:F6:34:15:4D:14:AD:9B:D3:41:B2:8C:5B:DD
Authority key identifier: FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
Certificate issuer: /CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Certificate serial: 01987ED36ABD3C0E8C586CB7C334082073FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
Manifest number: 0D25
Signing time: Wed 06 Aug 2025 10:00:41 +0000
Manifest this update: Wed 06 Aug 2025 10:00:41 +0000
Manifest next update: Thu 07 Aug 2025 10:00:41 +0000
Files and hashes: 1: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl (hash: ygv7dbASynqtXUYr6FyHebOss/gV8XuDy0B0Dj6Bn54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:6a:bd:3c:0e:8c:58:6c:b7:c3:34:08:20:73:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Validity
Not Before: Aug 6 10:00:41 2025 GMT
Not After : Aug 7 10:00:41 2025 GMT
Subject: CN=64fc0ef7be148bf634154d14ad9bd341b28c5bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:5d:83:3b:16:25:c8:bf:fb:dd:9a:54:d8:
4e:c0:0d:a5:5e:a7:0d:fb:02:17:fb:d9:97:71:d5:
0b:d2:4c:73:b7:40:1c:94:2a:3f:d6:6e:3a:e9:73:
b6:0a:82:80:f0:47:e9:f2:df:ad:b9:ed:da:51:6d:
ac:ce:af:36:ea:f4:be:1d:01:40:0a:83:47:ea:7a:
aa:16:b5:44:8b:2a:9e:8f:9d:c4:39:8d:f0:e8:15:
5b:2e:e2:48:01:8e:da:b6:04:ea:43:65:f5:ee:47:
e3:a6:cc:c1:7e:f5:fe:6b:a6:c1:42:98:94:97:ec:
96:92:20:b8:2e:c3:84:f5:18:04:99:82:aa:ce:25:
17:14:62:2f:f3:2c:25:55:80:a3:ca:ba:1a:2f:9e:
01:f5:ba:d0:c8:17:9d:a5:df:c0:3d:05:1d:80:50:
19:0b:7a:a5:f1:58:85:a3:a7:54:c7:93:fe:22:8a:
93:1e:89:6f:b7:25:ba:09:62:77:83:cf:f4:01:99:
25:0b:70:00:e1:2c:7d:a7:e4:a4:6e:92:9a:f7:57:
d2:6a:1c:dd:2f:c9:11:42:9b:d6:89:51:94:bd:d8:
2d:b7:2d:17:d5:15:27:75:57:01:ef:ed:6c:23:de:
9b:dc:64:84:33:44:e3:ec:7f:a4:64:f7:89:66:6d:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:0E:F7:BE:14:8B:F6:34:15:4D:14:AD:9B:D3:41:B2:8C:5B:DD
X509v3 Authority Key Identifier:
keyid:FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b4:9e:c3:05:a5:54:b3:e7:61:e9:1f:90:64:c3:3a:fd:2d:
f9:b7:84:60:52:47:30:50:93:24:a9:b9:75:5a:9e:a1:ad:6c:
61:ec:d1:49:9d:2d:b7:33:e9:45:74:99:0e:f2:5b:ab:fd:10:
eb:7f:d1:c2:70:62:d7:ce:37:c9:68:7c:0d:ff:84:61:4e:c1:
fc:ca:1f:ee:f5:02:6e:1c:67:ab:83:c2:56:08:e2:bc:cc:b3:
e2:fd:bc:8c:50:6e:0f:f4:61:95:93:bc:f8:d9:f8:9e:9e:a4:
f5:dc:c5:a8:5a:87:bc:ee:38:80:2d:c4:cd:da:fc:b6:96:1d:
86:71:a3:9c:a2:26:ce:21:1d:d7:f4:dd:3c:34:7b:39:8f:05:
c2:c3:76:dd:c4:50:c6:1a:3b:c3:42:a8:cc:de:1e:57:4e:fd:
16:e2:39:70:c2:13:d1:67:05:a0:27:dc:6b:fb:b4:66:fb:5a:
b2:0a:6d:84:dc:df:1b:f1:0d:a9:39:cd:b2:17:b1:11:b7:fd:
1a:ca:77:d8:23:58:69:7f:f2:54:27:16:9f:d8:a0:89:aa:78:
af:b2:c3:59:7a:75:e1:66:27:6b:a2:6d:3d:49:26:0d:39:c9:
ef:f4:b5:9a:e2:df:29:74:9e:e5:9e:46:4d:58:ed:bf:98:9e:
42:a1:4b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:41 2025 by rpki-client