Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: shbv/l/8xvuuBiXPpOddPSM/ycnoO0NTJBUdAahZQ6M=
Subject key identifier: 41:8C:3A:D3:61:B8:04:95:FD:88:51:44:FB:86:D4:34:8A:04:0F:2B
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 019A4DE1EA402D9A91EF91E0FE9B7C15A11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 058B
Signing time: Tue 04 Nov 2025 08:00:42 +0000
Manifest this update: Tue 04 Nov 2025 08:00:42 +0000
Manifest next update: Wed 05 Nov 2025 08:00:42 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: yvNOTobbEMX2I1cxZVM/Xy+hbR3XLLrzXPg1803miOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ea:40:2d:9a:91:ef:91:e0:fe:9b:7c:15:a1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Nov 4 08:00:42 2025 GMT
Not After : Nov 5 08:00:42 2025 GMT
Subject: CN=418c3ad361b80495fd885144fb86d4348a040f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f6:27:3e:e0:72:31:a3:fc:17:da:df:be:a0:
9e:b4:a5:14:98:22:9b:fd:e6:44:5b:be:9b:39:9c:
6e:f8:47:e9:40:60:2e:06:16:ea:4d:87:53:6a:33:
b9:de:93:d2:ad:aa:be:57:df:69:b5:ab:5b:33:0f:
20:d8:6c:c7:53:79:e2:f1:4c:c8:0a:75:41:09:87:
20:95:3c:41:13:3d:52:45:1e:00:c2:6f:ed:6d:24:
b1:e0:40:41:51:5a:ec:23:1b:c9:9f:c6:8c:05:c2:
59:9f:e8:c3:73:44:36:4a:2a:4c:d4:55:5b:a2:dd:
19:1f:cb:7f:0e:ea:bf:a3:7a:b6:ca:10:03:6e:fa:
44:bf:ef:ee:02:77:0c:6e:00:2e:b8:9d:bd:33:0d:
aa:a5:29:4f:a1:90:35:96:26:fa:b3:75:5e:2a:b4:
dc:7a:1e:bb:47:cf:5f:5f:91:73:92:ea:35:7a:46:
23:9f:dd:cb:37:56:38:b0:93:a9:23:68:76:f6:98:
8f:b1:11:18:57:ce:5d:61:dd:ec:20:c8:90:91:72:
d1:37:51:4d:d4:f0:25:d7:ef:a6:c2:50:a3:b8:58:
49:a6:88:37:70:91:45:b4:4e:7f:c6:a1:50:c0:73:
3a:7d:cb:b2:72:f3:e1:30:df:72:36:35:da:aa:20:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:3A:D3:61:B8:04:95:FD:88:51:44:FB:86:D4:34:8A:04:0F:2B
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f6:4b:74:ba:80:11:85:26:db:8d:32:42:23:19:03:8d:1f:
ee:24:9e:72:c6:49:6a:fd:ec:94:38:7a:83:b2:47:09:f1:7c:
7a:e4:96:8b:f1:97:46:ff:2e:d4:22:7d:a8:f7:c1:b6:14:dd:
ff:35:c2:6b:a2:9e:34:74:14:f6:af:1c:9d:8f:f5:fa:8f:55:
66:35:b0:5f:31:7f:f5:05:32:86:ec:d9:12:84:2b:fe:40:fb:
59:00:cb:2c:01:05:95:04:b7:25:d4:87:ff:9a:3f:18:1f:0c:
9d:33:d2:cf:95:a3:e7:46:3b:1e:5e:c8:3f:eb:f7:6d:bf:f9:
32:95:db:df:5a:39:4f:d7:3e:e8:48:b5:57:3e:80:f4:58:be:
04:fa:4a:4a:f6:b3:43:f5:e0:0c:0e:62:90:70:dc:5f:bb:9e:
b0:fd:41:e5:0e:70:dd:81:80:0e:92:a0:7c:2e:f5:e0:28:bd:
75:15:da:af:3c:74:51:80:67:21:97:60:a2:db:76:4f:0d:08:
24:99:54:93:d1:2e:dd:3a:96:ca:33:75:a1:65:2a:81:b9:1a:
96:7b:1f:6d:9f:d2:9b:df:d3:0d:28:2f:4d:50:84:1f:e3:73:
af:1b:ee:ed:5d:05:4d:e8:a5:71:bd:32:a5:8b:43:42:ad:3d:
a7:69:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:02 2025 by rpki-client