Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
File: c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json)
Hash identifier: HYBV3jjHvQQYwPitPpRvXw7V7BxeNA3h5JWui6aDD6c=
Subject key identifier: F0:BF:87:21:7E:75:46:A1:D3:54:F6:94:57:B1:FB:EC:DE:01:50:E3
Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
Certificate issuer: /CN=73500eeb47c2f13571876a19663537f8b636a80f
Certificate serial: 0197B7B2F5042C73CB570AF2FEFFAF02EEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
Manifest number: 023C
Signing time: Sat 28 Jun 2025 18:00:48 +0000
Manifest this update: Sat 28 Jun 2025 18:00:48 +0000
Manifest next update: Sun 29 Jun 2025 18:00:48 +0000
Files and hashes: 1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: CU4vRaA1GorfnevKu7CWFqdLXMeS/sJ8B8FOfxlxTxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f5:04:2c:73:cb:57:0a:f2:fe:ff:af:02:ee:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f
Validity
Not Before: Jun 28 18:00:48 2025 GMT
Not After : Jun 29 18:00:48 2025 GMT
Subject: CN=f0bf87217e7546a1d354f69457b1fbecde0150e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:6c:03:3b:bf:b4:96:7b:e2:26:21:05:b8:
09:a1:22:3d:30:49:bb:f6:b5:33:02:02:e6:60:98:
57:39:47:3c:60:a5:b1:91:dd:9a:54:af:64:2c:be:
3d:ad:56:7a:36:0b:11:e5:6a:98:04:bb:9e:8d:73:
54:56:c4:ba:62:f3:83:94:ac:f2:1f:eb:87:92:4c:
b4:95:99:06:90:69:94:5c:c0:51:c9:7d:aa:d2:0d:
7f:8b:20:fd:13:36:e8:0a:84:34:3b:3a:43:56:2d:
62:db:43:65:4e:9b:7f:23:cb:75:06:d8:53:d8:f6:
8a:76:a9:82:df:39:30:88:71:e7:c6:f2:ec:f2:2c:
a0:33:56:b8:dd:56:e9:f8:05:91:8e:a2:38:80:5a:
43:44:17:8b:13:f3:1f:8f:58:c4:c5:64:d9:31:3d:
39:44:29:0b:e3:e0:e9:0a:1e:13:f0:1f:4b:bc:c5:
7c:a8:8b:54:f3:28:44:02:c3:70:1d:52:61:61:1a:
d7:1a:0f:99:9f:e8:1b:e9:ab:8f:70:39:1a:a9:c2:
42:36:8a:75:83:0f:00:e4:86:e5:9b:f0:45:a3:62:
3c:0f:3d:3a:64:40:ac:4c:b2:4f:0c:94:46:e7:c0:
e5:74:c7:32:3e:a8:ac:81:29:b1:c3:5d:5e:ec:b1:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BF:87:21:7E:75:46:A1:D3:54:F6:94:57:B1:FB:EC:DE:01:50:E3
X509v3 Authority Key Identifier:
keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9e:89:e3:cb:c1:e2:48:1a:e8:c5:b8:00:0a:72:16:ae:e8:
f7:8c:c3:74:39:71:91:bd:57:c6:c0:db:8f:cc:7c:75:bf:23:
af:2b:36:ab:73:aa:69:89:de:8e:e5:5b:ab:95:0b:cc:b0:29:
40:3f:ab:dd:ca:ac:77:bd:cf:55:e2:c7:40:91:a2:df:c2:ff:
8f:64:c0:bf:57:a2:8b:32:7f:f1:37:c5:b8:52:fd:8d:46:d7:
c1:9f:af:e6:0d:af:45:7e:78:2e:c4:88:14:55:41:67:8c:c1:
92:eb:43:38:f1:4c:0e:81:8e:8c:af:46:c2:3c:3b:60:42:6a:
e0:70:7d:1d:a3:30:70:5a:9e:a3:61:b0:61:70:dd:5f:cc:e6:
fd:b9:50:2b:70:fa:35:e5:b3:51:a3:74:b4:2e:21:15:da:f4:
8e:9a:0c:c5:35:83:fb:ed:20:c9:1c:07:59:e0:50:ee:b6:82:
59:76:2c:7d:1d:9d:53:aa:e4:75:e5:5c:94:7d:cb:d2:76:a3:
40:8b:d3:a7:ec:72:4e:de:a3:80:eb:58:24:9e:2e:7e:f5:50:
64:8d:38:d4:62:f5:4d:48:cd:a7:a3:1f:6f:8e:27:10:c9:bc:
3f:ab:0c:1a:4f:65:63:f6:31:3f:79:8e:6e:3c:ca:5f:c5:ea:
09:41:dd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:43 2025 by rpki-client