Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
File: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft (raw, json)
Hash identifier: gBS9NE480yDVr5fNd3bPSnOAttbN2T5I+13b8SA2KXM=
Subject key identifier: C2:A4:C2:9A:62:A7:84:3A:DB:A2:58:4B:71:A4:E6:05:66:30:F2:47
Authority key identifier: FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
Certificate issuer: /CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Certificate serial: 0198D5BC35DBFBBD560DB6891BECC33A68E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
Manifest number: 0D52
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl (hash: KQDe5Ad38+NJbuCYbBxghOJqWjJBwdnTfQI4jEbK3ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:35:db:fb:bd:56:0d:b6:89:1b:ec:c3:3a:68:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=c2a4c29a62a7843adba2584b71a4e6056630f247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:64:bf:9d:a8:69:10:00:24:08:6f:b5:0a:
c9:52:c6:4b:83:03:f7:88:24:a6:79:11:66:83:50:
26:ec:ba:d2:09:4c:85:9d:01:70:b7:fd:45:62:53:
72:24:69:e4:d3:3c:0b:ed:75:63:00:20:e9:dd:69:
61:19:42:e9:1e:a5:69:db:bd:c6:b3:d0:30:07:0e:
07:dd:c0:c5:13:d7:99:ce:5c:50:4e:18:d0:f4:5f:
20:0f:02:4c:6e:72:97:85:05:e8:c4:c7:e1:84:5e:
59:9e:01:ea:88:68:3b:15:bf:a5:f5:85:44:57:26:
97:e6:aa:70:4f:ac:8c:0c:14:04:6b:98:e1:32:ed:
21:83:3d:18:98:4d:4c:ea:1e:1b:83:18:c5:18:b1:
ec:5a:ec:9b:ad:5b:50:54:54:f8:3c:0d:a7:1f:84:
b5:29:4e:34:b2:d3:61:70:67:d1:7e:44:17:b6:9b:
fd:58:f7:5f:f8:88:5d:4e:e6:6f:c3:51:11:de:07:
0e:df:e8:a4:ef:23:0e:2f:bd:88:9f:b9:91:c8:a9:
62:d8:ef:21:84:10:cc:7f:f3:9a:4a:b8:7a:90:eb:
ff:f1:e4:5f:6b:d6:2a:6c:6d:85:05:95:d1:5f:37:
a7:32:d6:6b:31:43:67:85:bc:1f:8b:05:68:06:15:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A4:C2:9A:62:A7:84:3A:DB:A2:58:4B:71:A4:E6:05:66:30:F2:47
X509v3 Authority Key Identifier:
keyid:FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f0:69:69:72:36:cd:b9:74:36:2c:7f:cc:6d:ae:fb:bc:05:
3e:5b:d8:7f:5b:cc:e9:b0:04:49:61:af:e3:80:4c:33:a7:20:
c4:98:52:62:1e:62:70:57:7a:f0:58:0f:9d:11:e2:3e:1b:50:
0a:fe:b1:bc:47:80:d5:d2:73:a5:9f:69:09:89:b9:d3:a1:15:
fe:2f:07:9c:ce:e3:73:a5:09:45:2b:e2:d0:29:86:d7:97:d8:
9d:9f:a2:3a:e6:0e:a0:bc:48:23:4d:2f:fe:b6:49:e7:ef:82:
03:33:bc:30:1d:0e:a2:db:d3:16:ef:69:f4:ed:37:2a:0d:0f:
fa:9c:c8:89:11:17:10:63:dd:54:71:d2:c4:77:1e:9b:33:de:
96:87:31:b7:5b:21:aa:d3:90:e8:2d:33:07:00:8b:08:1a:4a:
de:c3:4f:3d:c2:70:ce:48:1f:c3:3b:43:be:71:b0:46:48:66:
c0:12:6f:fe:c5:25:b8:31:a5:9f:65:2a:6b:63:42:01:d3:63:
6d:27:da:2f:b4:7d:13:37:9a:5e:ab:76:16:fa:1b:1a:9b:6b:
75:c6:5e:13:e7:c8:26:9a:ac:a4:e4:6b:87:08:4c:28:bc:9d:
bf:a7:50:5b:e7:34:72:7e:0e:3f:c1:56:10:03:ad:91:0a:a6:
e6:d0:69:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:01 2025 by rpki-client