Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
File: c0YEYfnEnrkXwZEVgLoORDLBJVc.mft (raw, json)
Hash identifier: tOfmQiOenJWnInSk3QB4DzYL3msprtUdJMVmXPtWnXQ=
Subject key identifier: B9:C4:13:54:4D:EB:B2:DD:B0:52:8E:09:5D:D2:BF:AD:C9:A3:6F:E1
Authority key identifier: 73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
Certificate issuer: /CN=73460461f9c49eb917c1911580ba0e4432c12557
Certificate serial: 019873E1E3BCA94AA59CA4A21C70C50EB706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
Manifest number: 06B5
Signing time: Mon 04 Aug 2025 07:00:40 +0000
Manifest this update: Mon 04 Aug 2025 07:00:40 +0000
Manifest next update: Tue 05 Aug 2025 07:00:40 +0000
Files and hashes: 1: c0YEYfnEnrkXwZEVgLoORDLBJVc.crl (hash: Vptuu3gNEBmZgv6829UZI3piJtbNQLssJGnlVlY/+mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e3:bc:a9:4a:a5:9c:a4:a2:1c:70:c5:0e:b7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73460461f9c49eb917c1911580ba0e4432c12557
Validity
Not Before: Aug 4 07:00:40 2025 GMT
Not After : Aug 5 07:00:40 2025 GMT
Subject: CN=b9c413544debb2ddb0528e095dd2bfadc9a36fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:71:89:2c:5e:09:12:f6:85:2a:da:e3:44:
c1:1d:2f:25:88:5b:04:6e:b4:8d:10:51:99:5a:93:
a9:0c:2c:7d:8b:46:eb:fd:66:dc:92:e9:ce:43:a6:
5e:4c:16:eb:2f:83:e9:d5:d3:d3:cb:f7:72:bc:82:
89:ff:7c:eb:40:b6:0f:fb:7d:62:97:22:58:80:d1:
c0:79:c3:28:72:2f:29:a8:ad:89:0a:d8:a3:f7:64:
e9:45:b3:fd:04:4a:02:b9:46:91:fe:99:5f:d3:3d:
cf:c3:a1:1d:19:ca:cb:3e:62:2c:6c:e2:79:e3:58:
cd:58:76:04:a1:9a:cf:50:ec:61:43:e2:fd:f5:df:
79:02:c5:ff:15:60:61:98:19:7f:38:11:7a:88:f5:
ce:f0:bd:7b:ba:58:4e:9b:49:50:db:e0:28:16:01:
d2:62:5f:48:75:a0:6e:62:c4:bc:41:ec:45:fc:d3:
e7:bf:c4:b0:0e:5d:7f:62:ba:50:71:6e:ae:86:01:
35:2f:02:a2:c5:a2:bd:80:e5:55:a3:06:4e:93:02:
87:5e:ec:d3:e2:c6:8d:27:75:ab:42:0c:5a:98:27:
a9:79:49:09:d7:ad:d9:f1:6c:47:87:52:2a:f2:14:
97:df:2e:a8:68:eb:f7:fc:20:ac:70:15:8b:50:dd:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C4:13:54:4D:EB:B2:DD:B0:52:8E:09:5D:D2:BF:AD:C9:A3:6F:E1
X509v3 Authority Key Identifier:
keyid:73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9f:19:0b:12:01:f0:f3:17:bc:c8:1d:78:22:8b:3d:49:77:
91:ab:b3:9d:a4:e2:ee:8c:f3:b7:04:a5:58:d8:5d:07:74:8a:
75:8a:a1:37:34:85:2b:bb:06:9b:e3:fb:92:8e:7f:6d:08:39:
42:c8:4c:ae:f9:9f:a6:3c:a1:9d:f5:0e:f0:f3:5b:72:a6:59:
97:bd:10:8e:80:d3:0c:6f:47:4d:da:fc:3e:16:00:7c:92:28:
a3:28:0d:a0:79:74:0d:77:ea:d3:9e:7d:d8:2f:f1:73:95:e5:
e2:ba:91:e4:e2:24:3c:8c:49:f4:37:42:02:72:57:fb:81:fe:
08:87:5d:9c:cb:79:d3:0a:2f:8e:75:5b:48:c8:1c:8e:83:a0:
88:f0:a2:18:bf:2b:a8:32:42:4b:fe:d7:60:0f:bc:2b:2d:b1:
cc:fb:b6:9a:78:fc:b1:8f:3a:79:78:7c:14:a0:a7:b7:a0:18:
a9:39:b0:59:9e:52:75:e5:18:27:04:eb:b7:db:87:83:b3:91:
07:d5:6e:f4:62:47:e9:fa:7f:d1:4c:fb:f1:c9:b8:49:d6:11:
9d:1d:08:38:e6:c9:ad:d5:2b:f5:19:9a:4e:ab:a6:25:93:a6:
07:8b:78:5c:d2:3c:be:b5:4d:46:ea:38:77:0e:07:f7:cb:d6:
60:1e:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:16 2025 by rpki-client