Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier: 799PplXSN1eU07tl9cfNzciakETWIVmf9hq5xM2QVG0=
Subject key identifier: 4D:BB:01:68:3A:5D:F6:EC:67:5A:29:77:21:C7:95:66:C7:87:E1:F9
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 01987298B0ECE1A51AB04E4945D4D51E19A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number: 0DC9
Signing time: Mon 04 Aug 2025 01:01:05 +0000
Manifest this update: Mon 04 Aug 2025 01:01:05 +0000
Manifest next update: Tue 05 Aug 2025 01:01:05 +0000
Files and hashes: 1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: C7zmaDPNAKd33q3WbVsdDZ8wC8LAoONaa+UVTN8enPs=)
2: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (hash: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=)
3: INWe7JHY3LSZtRLCNKJA9CyWVj4.roa (hash: Yo4nt69BrN4AQ4hoMVSQ6OOsFPB4EPZWgV8+aVYUE7U=)
4: nGmNNcPYPqUlkXgs_RQgBIHWHdU.roa (hash: qd/h+GWajfOX6OMR5HYNSJZTt3Etfb5C3Mcx9RhNRgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:b0:ec:e1:a5:1a:b0:4e:49:45:d4:d5:1e:19:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Aug 4 01:01:05 2025 GMT
Not After : Aug 5 01:01:05 2025 GMT
Subject: CN=4dbb01683a5df6ec675a297721c79566c787e1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:61:4f:3a:3e:a3:e9:c3:08:c3:b0:b1:c3:
39:10:56:65:de:19:6f:47:1f:9e:57:8b:2b:ac:59:
62:7f:0a:0f:54:37:92:27:55:b9:49:e6:7f:b5:10:
3c:57:1d:85:ef:33:b5:60:d5:df:a9:7b:72:ea:45:
43:e5:5c:da:50:f4:02:3c:cb:93:7b:32:19:dc:4c:
98:5c:5a:41:a1:95:81:c6:12:6f:ed:4c:b0:e6:66:
51:46:9c:6a:71:9a:e4:c9:3e:88:6e:3e:47:e8:c4:
d9:0c:ce:6f:39:3a:b0:2f:0b:30:55:17:3a:7d:c0:
d2:b9:62:83:5a:9f:6e:3b:a7:38:9f:fe:8d:89:ec:
6d:3b:c4:c6:a4:a5:bf:5b:26:f3:71:82:4f:83:e6:
3c:0b:60:20:14:87:b1:73:af:bc:b1:bc:b7:78:37:
d1:62:03:57:24:ce:b4:66:86:ee:4e:3a:f4:d6:ef:
d6:d4:f3:63:01:29:8b:13:0d:34:c4:70:77:e9:7b:
30:85:df:3e:f0:de:db:63:ee:1f:55:62:5d:47:61:
22:49:04:3c:37:14:74:d1:ba:02:bd:75:e2:48:d7:
c2:85:52:56:f3:2b:a1:33:43:d3:ff:96:af:42:46:
a0:11:3a:54:b0:3c:5a:71:ef:f1:6c:25:5d:38:11:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BB:01:68:3A:5D:F6:EC:67:5A:29:77:21:C7:95:66:C7:87:E1:F9
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:07:42:7f:37:6f:2e:e3:2e:c6:e0:19:35:47:00:44:c4:57:
a7:93:60:f1:16:ba:a6:48:17:b9:52:7c:f3:fc:7c:51:a3:f2:
fa:89:91:d5:96:20:c1:c4:c0:38:44:e2:f2:2b:00:e5:3f:25:
56:98:9b:b2:60:19:11:3d:96:12:51:ae:7d:17:ab:09:df:6d:
18:b4:bf:78:59:99:39:ad:42:79:12:e1:84:77:d7:13:ad:35:
3f:eb:d7:70:6a:5a:98:42:57:5f:70:a4:b5:7c:a9:7c:e2:40:
0e:56:43:4e:fd:c2:05:54:89:dd:3c:9f:6e:c6:6a:7e:79:5b:
4d:c6:6f:40:1f:ee:05:d4:7a:50:f1:29:51:1d:fe:e8:5b:b9:
fc:b2:e4:f9:68:01:5f:08:f0:06:82:37:c9:04:9c:44:b5:9e:
d9:6d:1a:79:3b:21:d0:17:8c:c3:f5:5a:c7:87:ba:7a:78:e3:
1e:0f:a8:b1:c9:89:88:a1:b7:3e:1f:48:a4:43:81:3e:00:10:
01:da:3a:e5:eb:e2:ac:82:7c:6f:ce:fe:a2:8c:0d:c5:62:fc:
14:85:42:2e:17:47:5b:6a:ca:34:f4:fd:1f:f3:23:84:c9:1d:
26:42:0a:96:f3:31:96:27:3d:77:3d:16:47:89:cd:21:4b:8e:
48:81:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:51 2025 by rpki-client