Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: LMvafme12kgw4sp048tkompyszn6jd2KV2xWXuEC8OA=
Subject key identifier: 4F:EC:2D:3C:58:0A:78:95:64:B7:40:8C:F8:FF:EA:A3:4B:3B:C6:81
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 01988922338AC362664327E6CADFB800F6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 0FD1
Signing time: Fri 08 Aug 2025 10:02:56 +0000
Manifest this update: Fri 08 Aug 2025 10:02:56 +0000
Manifest next update: Sat 09 Aug 2025 10:02:56 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: vPC6eAx4MjewGfBMsIgs0CpUb5d+zm4+4VHO16nIczs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:22:33:8a:c3:62:66:43:27:e6:ca:df:b8:00:f6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Aug 8 10:02:56 2025 GMT
Not After : Aug 9 10:02:56 2025 GMT
Subject: CN=4fec2d3c580a789564b7408cf8ffeaa34b3bc681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:f5:30:5c:20:7a:ab:08:eb:d9:97:f6:ab:
ea:09:10:87:77:e3:5f:ed:90:07:e2:70:70:c6:d6:
88:ce:be:88:a7:0e:ad:a3:90:c4:3a:d7:8e:43:c6:
a4:8d:aa:aa:d5:21:24:ba:26:9a:b3:81:ed:7d:73:
68:67:fc:e6:5f:b7:b3:83:ef:b5:ab:4d:d1:ac:d6:
f7:9f:ca:90:80:09:72:07:0a:49:d6:92:69:64:33:
60:d7:65:2c:ae:87:cd:6e:f6:86:f0:eb:25:72:d9:
c9:31:4b:33:5f:43:06:12:fd:e3:d6:89:00:6a:ee:
3d:f3:4f:88:10:09:54:89:12:f1:e5:05:7e:a6:f6:
8e:7d:40:5d:73:70:5f:f4:6b:7d:25:b5:b6:91:f6:
bb:fa:2a:db:1e:61:4a:6a:cf:5e:4e:9b:90:b8:f3:
5d:bc:b1:de:ed:fe:6f:1e:d6:c2:3e:6a:44:05:b6:
1f:2e:b8:0c:72:fe:bf:70:d3:07:32:1f:b4:4f:88:
8f:6e:32:de:28:46:d4:ab:fa:b2:38:3f:e2:b7:2b:
35:93:f4:85:af:ca:84:ad:94:12:12:3d:16:2e:73:
6b:ae:e1:e2:d1:bc:81:ce:77:90:2e:53:4d:5d:42:
ac:b7:83:16:07:04:2e:6f:f3:af:91:ff:56:a8:e8:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EC:2D:3C:58:0A:78:95:64:B7:40:8C:F8:FF:EA:A3:4B:3B:C6:81
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f1:e1:87:69:a3:24:56:ea:45:ed:a1:ef:82:a5:b1:73:8b:
1e:94:12:fc:01:60:ad:88:a2:88:61:17:9e:31:6f:3a:97:12:
d5:8e:ea:d9:7a:b5:84:7f:dc:14:44:a3:b7:ae:4d:bf:17:48:
08:f9:5a:36:00:ed:b3:91:84:50:b1:b1:19:29:2b:1a:50:a6:
cc:a7:52:50:95:c2:70:c7:2c:bb:15:30:28:2d:07:8d:b8:e8:
4e:15:ee:1e:89:a1:eb:85:67:f5:5b:62:76:65:c7:76:ce:d7:
ec:44:74:17:47:47:d8:8d:75:f7:ba:8d:0c:4c:7c:93:6c:f1:
b8:bb:03:f8:28:c5:25:90:47:f9:0f:a4:9e:f3:f2:77:ca:ca:
a8:42:da:11:0f:52:a2:88:35:30:a5:48:83:25:c9:05:3e:21:
01:8f:b0:6c:9a:f7:32:4d:6d:86:e8:5f:f9:5c:78:23:f6:c6:
bd:17:b2:60:70:4a:e1:0f:fe:20:ed:90:f1:cb:3d:0b:a9:89:
a6:2b:43:70:a6:6f:93:cf:85:9d:69:31:60:d6:c0:9d:7c:5a:
b4:41:01:85:ab:50:a3:04:d0:9b:ec:11:27:a0:0c:64:24:e0:
f2:0c:83:44:ca:74:a1:b5:e1:08:5e:c1:8d:f6:45:4a:69:a2:
70:c0:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:17 2025 by rpki-client