Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
File: c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft (raw, json)
Hash identifier: TUtsL5/HWz45Er3yFzLUL4eGbtgvS2TrJdKJmq7a8sg=
Subject key identifier: E6:3B:50:A2:F4:E2:4B:54:2D:8B:E2:37:7A:90:1E:C0:7A:DE:5F:58
Authority key identifier: 73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
Certificate issuer: /CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Certificate serial: 0199FBEC36BA77B602DEBF2723D864EFBBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:03:05 +0000
Manifest this update: Sun 19 Oct 2025 10:03:05 +0000
Manifest next update: Mon 20 Oct 2025 10:03:05 +0000
Files and hashes: 1: c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl (hash: Qf9c+/gLBAL79CR71LXkS+hPolAVM7Og6bMRqYjX2L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:36:ba:77:b6:02:de:bf:27:23:d8:64:ef:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Validity
Not Before: Oct 19 10:03:05 2025 GMT
Not After : Oct 20 10:03:05 2025 GMT
Subject: CN=e63b50a2f4e24b542d8be2377a901ec07ade5f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:e8:14:89:fe:80:4d:4f:9e:cb:d0:10:1f:
d7:15:b3:b1:b5:52:b4:ea:5d:db:ab:0a:86:da:02:
a2:c7:cd:a2:5c:dc:c5:a4:3d:7c:fb:f3:f2:d6:4f:
22:81:31:84:5d:94:66:89:3d:48:7d:11:6e:31:d5:
a6:b1:c4:28:e2:f6:25:48:dd:15:84:83:f9:a6:95:
dd:45:c8:8f:3f:d1:c8:31:3f:2d:b8:b1:ad:51:75:
61:6a:09:a0:0e:be:31:ce:a0:38:e3:38:72:2f:29:
6d:1b:9e:20:99:b4:5f:01:92:cb:4e:86:bd:e1:d2:
70:56:c7:08:c6:a4:1b:2a:f5:81:25:ec:ac:8c:6a:
24:fe:c9:df:d4:9a:3b:e9:0a:9e:7a:1f:35:38:64:
56:c8:a5:de:9a:cb:51:56:42:06:6e:e4:d5:75:db:
6e:e5:37:ba:b9:95:11:6f:f0:71:2b:cb:96:3d:9b:
b5:c0:af:5f:c9:0d:61:c9:0a:45:34:e9:98:72:fc:
fa:dd:7c:76:86:8d:75:07:1c:51:3c:df:89:60:c7:
93:c6:df:f1:0c:db:30:6c:90:13:9b:ef:3d:e8:01:
d8:a0:4e:e2:ad:03:82:25:6e:ea:58:9c:5a:a0:50:
69:28:16:0b:2e:56:ba:81:6e:2e:3f:90:6c:0a:98:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3B:50:A2:F4:E2:4B:54:2D:8B:E2:37:7A:90:1E:C0:7A:DE:5F:58
X509v3 Authority Key Identifier:
keyid:73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9e:a1:74:8c:bf:7d:e5:f8:2c:c0:02:48:ff:fe:cf:3d:c8:
74:c4:01:95:67:cd:71:9c:e7:d9:29:e4:55:56:ec:86:6b:a2:
d9:42:20:fb:94:ed:96:ef:58:80:08:71:f5:9c:74:ff:c6:6b:
8b:c4:16:4f:2c:9a:ca:80:9a:24:39:df:7c:82:8a:f1:d8:58:
54:1c:a1:66:7b:9f:86:5c:82:19:16:78:a8:e2:76:ce:d8:8a:
d4:c1:13:c3:f7:1f:d9:2b:f5:01:33:9b:e5:67:bf:02:34:ce:
ba:1b:8c:11:46:4f:56:bf:19:48:3d:59:b7:c3:91:d0:0b:18:
81:e4:bf:31:d7:5d:53:fb:8c:8e:4f:9a:45:b1:78:2b:ec:0f:
b5:4d:ef:d4:2f:f1:e7:70:55:71:c9:d0:52:52:e6:40:cc:1a:
16:44:2d:8e:e4:27:55:4d:18:f2:d1:f4:7b:ba:30:72:7f:80:
9b:03:cf:d1:fd:33:db:a1:13:cd:ab:80:3e:24:6a:3f:73:2e:
26:98:ab:fe:d8:21:ff:ce:83:ff:f2:5a:d8:5c:93:78:9d:d2:
c1:af:a3:f1:d8:cc:29:f1:54:e5:a3:6f:51:87:7d:ca:74:03:
6f:07:6f:bf:8f:ed:f1:9f:09:67:6c:ef:40:fd:35:27:3b:3f:
f5:fc:db:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:01 2025 by rpki-client