Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
File: c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json)
Hash identifier: cOkRqrc8uPWInHolk56kSftDNlqA4fZC/FIBRqMrV5w=
Subject key identifier: 8A:C5:1C:72:E9:16:A6:A4:A1:B2:25:3E:CC:4F:5A:53:56:D9:A5:89
Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
Certificate issuer: /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Certificate serial: 01988167FBB162DE003F7176E4D443DC67B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
Manifest number: 06CF
Signing time: Wed 06 Aug 2025 22:02:12 +0000
Manifest this update: Wed 06 Aug 2025 22:02:12 +0000
Manifest next update: Thu 07 Aug 2025 22:02:12 +0000
Files and hashes: 1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: Eu4pHQt0xzpJPdVh97dMUI0fuuRoaokc0fUeENUvgKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:fb:b1:62:de:00:3f:71:76:e4:d4:43:dc:67:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Validity
Not Before: Aug 6 22:02:12 2025 GMT
Not After : Aug 7 22:02:12 2025 GMT
Subject: CN=8ac51c72e916a6a4a1b2253ecc4f5a5356d9a589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:90:b1:17:b3:b5:46:10:ff:5a:f4:76:ef:
b3:b0:ab:9c:d6:5a:6c:94:84:c5:d0:f2:80:b0:e6:
d0:5e:02:cb:6a:1d:93:e4:a6:e2:3e:91:fa:da:34:
77:e0:40:19:34:ea:c1:01:a1:88:50:39:88:aa:5e:
ba:d0:73:ca:a3:79:4d:b4:cc:c0:92:2d:1a:61:a6:
08:14:79:80:1a:86:5c:8b:cd:02:72:d5:d2:58:bf:
11:49:97:6a:65:a4:6b:06:8d:72:34:3a:a4:ab:45:
2f:64:05:30:cf:02:b7:db:a6:8c:b6:ab:f3:d8:6f:
f1:48:f2:68:8a:0b:6d:dc:2f:ac:0c:f6:57:ba:3f:
7f:24:e7:60:25:e6:58:b4:9d:8d:ef:d9:78:28:38:
28:b7:33:2e:b7:8b:51:71:5e:aa:47:4c:b7:59:54:
e2:bb:86:fb:b4:50:c8:c7:b1:9d:dd:9d:15:c6:f0:
40:fe:a2:c9:67:7e:23:72:5b:16:b9:95:f4:0e:7b:
1a:67:3b:69:79:e7:58:74:27:97:db:d1:7d:be:80:
1f:b1:0d:2d:a8:4b:c2:91:20:df:a4:1f:d5:e0:b5:
da:fa:78:14:5a:64:e4:ec:82:ee:cd:3b:fe:9e:02:
63:46:6c:2f:fe:50:18:67:ba:72:54:a9:58:30:fc:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C5:1C:72:E9:16:A6:A4:A1:B2:25:3E:CC:4F:5A:53:56:D9:A5:89
X509v3 Authority Key Identifier:
keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:aa:08:df:6e:29:5d:fc:35:17:d5:c6:f0:2f:8d:93:ae:5f:
b8:e1:6e:e1:4f:7c:37:af:2b:5a:ab:9e:7d:5e:5a:a2:81:0b:
df:46:33:d0:72:0e:96:16:4b:52:ea:51:2e:1a:8b:43:93:dc:
48:76:6c:13:f0:8f:ae:d2:84:03:c4:4d:1f:2d:ed:b7:79:ff:
63:f1:05:6f:a9:a4:fa:b4:05:df:41:a9:c8:44:05:40:2a:58:
ca:73:b7:7d:f4:d9:a4:bf:e7:4c:31:6e:29:bb:ce:7f:6e:c6:
3a:8b:03:ba:ef:b5:b2:e0:a7:ec:90:c7:d4:97:d3:64:1f:f0:
6d:f3:26:2a:ce:fb:84:5e:3d:06:59:52:b5:01:0f:47:34:93:
c6:01:0d:48:8e:ba:c8:73:eb:c0:b1:20:81:45:b3:2b:5d:c4:
aa:81:aa:2c:ea:87:ea:10:69:79:3e:9e:1b:c8:5c:2e:08:e4:
ee:24:34:97:37:ec:04:7c:a4:8e:19:7b:20:a9:9f:5c:b6:27:
ee:ce:2f:88:98:b3:64:7d:fa:5a:9f:6d:1f:f9:20:d7:d8:9b:
95:cb:bb:41:93:8f:74:c0:43:42:56:2a:02:34:b8:d2:e8:28:
fb:ea:d3:21:ec:78:4a:64:6e:e0:12:e6:d2:0b:ed:20:50:ed:
3b:45:19:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:21:55 2025 by rpki-client