Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File: c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier: 4m2X5Fs8Nw/vZzzOeDheAumUXBjBKdBj4QsVTVFEuJc=
Subject key identifier: 97:57:B5:EB:0A:D9:1F:84:0F:17:87:A8:C9:21:41:EF:50:56:0C:13
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer: /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial: 019A03A4393CE78CA6DF3350EA066D0587C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 22:01:25 +0000
Manifest this update: Mon 20 Oct 2025 22:01:25 +0000
Manifest next update: Tue 21 Oct 2025 22:01:25 +0000
Files and hashes: 1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: Y+mDWKRl0k2JWE1JVR9aSS+nUnAwQbR3M1c8EeT1m9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:39:3c:e7:8c:a6:df:33:50:ea:06:6d:05:87:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Validity
Not Before: Oct 20 22:01:25 2025 GMT
Not After : Oct 21 22:01:25 2025 GMT
Subject: CN=9757b5eb0ad91f840f1787a8c92141ef50560c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8b:3a:0a:fc:4a:7d:91:94:e0:02:78:7b:52:
d9:81:9c:69:d9:f8:6f:21:5d:a7:c2:1f:cd:49:0f:
3e:87:9d:e3:cf:0d:a4:cc:8a:47:f2:8a:50:db:df:
41:62:17:3b:1f:5a:c5:fb:d2:6b:d6:94:72:9c:e3:
b1:b1:ab:10:5d:db:89:3c:44:e2:54:71:9f:8e:a1:
a1:43:22:dd:d3:0e:0e:af:21:fb:0f:07:86:74:5a:
46:23:7f:f5:02:99:f9:d6:51:c0:fa:5f:61:0a:96:
9f:d5:05:c9:45:c9:a9:32:15:24:dd:9c:bb:98:8b:
d1:c8:3d:76:6b:a8:f9:40:a4:ea:01:8d:9b:d6:7d:
02:e1:53:cc:4b:02:45:f7:03:1c:ee:27:88:d3:fe:
23:3e:98:a2:f1:92:30:48:66:23:c7:0d:da:00:d0:
3e:91:61:ba:ba:34:75:2a:04:7f:95:59:0f:1c:c2:
2e:08:b0:49:ae:5e:ff:4a:fd:e3:87:e3:44:34:99:
a8:ad:fa:d5:75:38:40:f3:e3:0a:e5:00:05:91:f9:
27:9c:3b:04:7a:52:79:6c:eb:b1:05:66:bd:d4:0b:
ca:15:e6:dc:54:3d:d1:f0:7e:79:d3:67:f7:e6:6b:
3b:b5:37:42:45:c0:44:7a:78:78:8c:8a:81:33:c3:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:57:B5:EB:0A:D9:1F:84:0F:17:87:A8:C9:21:41:EF:50:56:0C:13
X509v3 Authority Key Identifier:
keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:24:f8:05:10:ca:c7:f8:7f:58:d0:a4:82:b8:dd:32:a5:09:
a3:f9:d8:e3:1a:98:12:32:75:46:22:53:58:20:15:50:82:9d:
9b:61:00:e7:91:a3:60:31:ab:96:fc:a5:df:b8:a8:e0:6a:07:
df:8b:2b:e9:e1:cb:2c:7e:25:a6:b7:03:08:ff:86:d3:e2:c9:
55:f7:dc:64:3f:bc:fc:00:e6:0c:36:76:87:ee:ae:fd:1d:5e:
bd:63:68:df:52:de:31:17:64:1b:b8:4b:0b:cc:d0:95:6a:da:
19:34:0e:a2:be:83:c3:34:dd:48:d1:16:46:1e:de:ea:fe:2b:
0d:a6:90:c6:17:bd:fb:b8:65:46:0e:8a:67:b4:18:44:99:b5:
08:fb:ce:ff:ea:e7:52:9e:78:75:52:46:b6:41:0c:2b:a1:82:
0e:54:e2:0f:3e:4e:41:e7:9b:f5:97:3d:83:f3:68:a5:62:c3:
fc:39:2e:fe:1e:d8:12:10:2a:b0:e1:4a:37:a7:1e:57:b3:7d:
92:7c:aa:b4:57:01:a9:06:2b:b5:05:49:25:3f:52:b2:dd:df:
6e:cc:8f:2b:cf:f0:2b:36:70:43:9a:01:d6:b0:5a:a5:1e:40:
01:ea:76:94:57:02:81:1a:ea:9d:7f:f2:f6:8c:46:22:43:df:
f5:ed:07:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:25:24 2025 by rpki-client