Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: pJ6ZmEPYqoZZbmoiU+/OtDlgzr3OfAZn9GDy3QL1orI=
Subject key identifier: C2:F9:E7:B0:38:B0:FA:68:E1:73:4B:06:C1:69:63:23:2F:AF:E8:DE
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 01987D89FDC87DED4C2DAD0956B66D9AE12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 08E2
Signing time: Wed 06 Aug 2025 04:00:52 +0000
Manifest this update: Wed 06 Aug 2025 04:00:52 +0000
Manifest next update: Thu 07 Aug 2025 04:00:52 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: ZKMYXg8BST/X3An/ETha1uz85FBwWD1KAyZT35dcbG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:fd:c8:7d:ed:4c:2d:ad:09:56:b6:6d:9a:e1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: Aug 6 04:00:52 2025 GMT
Not After : Aug 7 04:00:52 2025 GMT
Subject: CN=c2f9e7b038b0fa68e1734b06c16963232fafe8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:3b:95:d3:c2:76:5f:cb:ec:fd:8a:66:a8:
47:05:13:ca:75:b0:51:65:fc:0f:5a:e6:30:23:5d:
c7:b0:64:ac:40:bd:56:cd:e3:f6:7c:8a:a1:31:0b:
ed:9b:a1:ae:27:72:a6:46:18:6f:dc:25:78:f9:61:
ce:11:cb:77:9a:88:12:2a:76:54:3d:dc:6f:da:df:
64:f2:f5:6d:02:14:87:86:00:ab:52:b9:36:d1:5a:
b8:bf:17:ad:e6:a6:89:37:0b:d3:26:b4:b9:ef:75:
32:fc:ee:a2:cf:2d:80:f7:fe:c1:f0:23:e8:5f:3f:
62:99:df:2e:d0:55:62:87:0a:57:6e:d6:d5:31:b6:
ab:aa:8c:79:cc:a8:1b:d7:e6:d7:6a:96:55:58:f4:
e2:7b:5b:5c:90:a2:f9:67:7e:8a:10:0a:f1:f5:fa:
69:a0:aa:18:3a:e0:44:a1:fb:0f:40:9c:6e:af:88:
92:89:82:0f:65:86:8e:b3:a6:8c:f9:dc:05:ad:f6:
74:ea:ff:b2:48:c1:f7:a9:6f:8b:96:8b:f8:da:f5:
c4:00:61:4b:b9:eb:89:b6:49:fd:24:94:75:d1:91:
b2:c3:cc:99:b9:1c:ac:f9:87:d8:c1:c0:88:24:7c:
96:38:62:9e:df:58:d8:21:8f:31:09:32:d2:00:5d:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:E7:B0:38:B0:FA:68:E1:73:4B:06:C1:69:63:23:2F:AF:E8:DE
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1f:de:45:15:1c:77:d4:b7:e6:41:3a:ac:d5:eb:26:58:73:
6d:11:a1:39:c9:e5:31:92:9a:da:4a:3b:d8:6a:b1:91:f1:0b:
bb:ac:e2:be:f5:bb:cf:98:97:98:22:2b:d4:9f:1d:de:d0:43:
74:80:c9:3c:0e:3f:82:23:28:a1:f9:60:ce:b9:88:64:53:53:
3c:d7:00:57:0e:fe:67:11:55:33:c7:9a:6b:a9:55:5b:82:9f:
76:f5:6b:47:9c:f0:0b:73:eb:67:23:5d:f7:77:74:ef:6e:67:
ef:0e:b2:c4:9a:e2:a1:41:f5:ac:20:7c:7c:7f:ce:1f:d2:18:
c0:2d:26:00:24:e2:55:3d:cf:b5:6d:48:7e:33:42:5a:1d:ae:
2b:85:b4:53:15:e5:77:bf:8d:ad:a7:07:5c:c2:0d:eb:60:bf:
97:de:f1:b4:6e:05:ad:a4:08:49:b9:60:37:1f:4f:f4:89:08:
0e:09:f6:a4:53:a8:09:3b:b7:83:f9:3f:5a:4e:14:26:33:70:
3a:b9:24:0f:a0:37:55:19:b4:70:24:16:2e:71:d3:be:92:bd:
52:dc:85:25:28:75:ab:d4:22:84:47:1c:05:d2:63:8f:12:8b:
e0:76:85:80:c6:15:bc:41:b3:4f:78:5c:b9:fe:c8:8e:e0:c2:
b9:1c:be:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:29 2025 by rpki-client