Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
File: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json)
Hash identifier: r8Ydb33M17pNDizjhjfdBEZd5Xu/upKZIp64XWpfqUY=
Subject key identifier: C5:D0:10:27:49:62:35:93:80:87:47:07:AE:32:2F:D2:6E:2A:61:BA
Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Certificate issuer: /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Certificate serial: 0198D73B5979ADBEF6D2215B6C710737E0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
Manifest number: 0AFF
Signing time: Sat 23 Aug 2025 14:00:47 +0000
Manifest this update: Sat 23 Aug 2025 14:00:47 +0000
Manifest next update: Sun 24 Aug 2025 14:00:47 +0000
Files and hashes: 1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: wH1L7SqSwfTrPIMr8QLcr4lLLPVnpdjHeR+pK7nC91M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:59:79:ad:be:f6:d2:21:5b:6c:71:07:37:e0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Validity
Not Before: Aug 23 14:00:47 2025 GMT
Not After : Aug 24 14:00:47 2025 GMT
Subject: CN=c5d010274962359380874707ae322fd26e2a61ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:f7:3c:d9:ce:e8:c6:fe:88:8d:fe:18:63:
6c:1e:ed:1a:df:d8:30:d2:90:4b:5d:ce:66:d6:30:
6c:41:3b:d3:55:86:68:a6:73:d8:38:a7:ba:c1:91:
51:1d:ac:5a:e9:b3:97:5a:17:08:8c:5e:f3:57:90:
7b:60:50:42:62:38:ca:c8:86:03:a0:2a:f3:d1:12:
11:50:dc:32:5a:c9:f0:e2:b5:7b:39:de:a6:c4:ee:
64:a4:6c:4a:98:b9:1a:a6:ca:3d:ad:f7:c3:7e:5e:
70:9d:e3:d6:29:08:5e:dd:f8:4b:13:37:ce:2b:5d:
7a:27:b2:19:26:ad:51:c5:45:81:dc:d2:95:a0:21:
07:85:05:b0:66:0d:f1:49:cc:03:d2:6e:8c:b0:2c:
01:a4:63:b8:ad:7f:0e:26:c8:ae:fb:fa:1a:13:96:
6b:b8:4e:88:d2:57:aa:1d:72:a5:43:fc:4e:0e:f5:
ff:ec:3e:f2:c8:64:83:f6:63:a6:ed:3a:75:01:88:
2e:4f:12:4b:67:b6:18:aa:df:58:01:ad:aa:ea:5d:
f9:ea:1a:69:b9:7e:c3:7d:11:9a:4c:29:23:b2:81:
57:54:25:6d:35:a4:ba:d2:f1:af:b6:a6:47:07:97:
df:a0:07:a7:ec:8f:69:e1:c8:1e:e8:bb:20:23:40:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D0:10:27:49:62:35:93:80:87:47:07:AE:32:2F:D2:6E:2A:61:BA
X509v3 Authority Key Identifier:
keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:86:81:ae:90:01:b9:00:2c:49:11:57:b4:7d:9b:79:dc:19:
5e:4b:d6:65:79:4f:bc:f7:ae:20:84:33:90:44:fa:49:d3:0b:
cf:20:b5:6c:e5:14:39:84:7c:91:67:72:31:86:d3:0e:74:42:
49:66:96:74:df:90:63:9a:3d:4b:4e:6b:e7:9a:77:a4:96:b1:
ca:12:8f:e9:f2:d0:d0:b4:b9:2b:e0:c1:c6:17:d3:5d:38:da:
08:fe:b3:89:4e:04:c5:2f:c9:1c:5b:28:db:7b:05:07:0a:39:
9d:a2:9d:48:e7:21:5c:c6:c7:da:39:22:2d:f6:68:40:48:c5:
ad:b1:ff:3a:b3:7b:27:60:b6:b2:ab:7a:15:97:77:6f:d4:a6:
78:a3:f1:aa:b4:02:0b:e2:76:87:b8:9d:0d:12:09:60:eb:50:
66:80:20:35:68:60:ce:e9:69:73:c2:ad:69:79:69:27:15:7f:
5e:e8:20:60:07:09:19:18:31:48:64:ac:63:62:f3:74:73:ee:
63:39:a1:cf:38:b6:77:fb:1d:3d:16:b3:dc:a4:9d:d8:1e:80:
de:1c:d7:79:22:c8:37:e3:4d:2a:e2:ea:4d:c8:37:40:68:7b:
90:aa:85:23:6d:04:41:be:63:6b:94:07:9b:be:03:5d:88:08:
a8:e6:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:45 2025 by rpki-client