Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier: SzQ+p9FTShAv3FBps4Db5YCNcvEa1WT21NYKFSMQygU=
Subject key identifier: A5:CA:36:1F:56:29:C5:F2:9D:A0:CC:9B:36:78:21:D4:E8:E6:55:6F
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial: 019A01B57B0CDE2E32E7F1CF4B8250553F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 13:01:01 +0000
Manifest this update: Mon 20 Oct 2025 13:01:01 +0000
Manifest next update: Tue 21 Oct 2025 13:01:01 +0000
Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: axzjcCMXLSaHyEBeVzmYaI0SjwcdnE1CvyiWgAilKBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:7b:0c:de:2e:32:e7:f1:cf:4b:82:50:55:3f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Validity
Not Before: Oct 20 13:01:01 2025 GMT
Not After : Oct 21 13:01:01 2025 GMT
Subject: CN=a5ca361f5629c5f29da0cc9b367821d4e8e6556f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:29:ce:bb:8e:98:1b:a2:aa:b6:43:e9:7f:
37:80:21:fa:a6:53:b1:23:ae:d4:57:e2:a8:54:78:
56:5b:54:b5:c7:45:4f:d2:2a:63:0a:5e:c0:7e:17:
25:93:cc:da:bf:88:20:6f:1c:83:5c:1f:2e:89:af:
4e:31:fb:98:2d:a2:92:47:83:b2:b8:f8:8a:82:9d:
6f:fc:3c:39:72:cb:20:64:15:d9:99:48:ff:28:81:
e5:77:47:6b:84:65:18:1c:0c:41:7b:c4:f9:5c:d7:
7b:3e:da:fe:40:30:07:e7:69:2e:90:8b:e7:df:1f:
e5:82:e3:31:04:91:d3:13:37:1c:bc:41:a6:3e:45:
34:bb:d4:c3:10:56:05:a4:13:db:49:71:d4:50:57:
22:e1:c9:97:65:a2:f3:4a:89:30:9e:69:d5:72:b2:
22:a3:aa:eb:b3:b6:67:a9:ce:eb:cb:ad:11:0b:d4:
bd:e3:9c:74:c8:8a:e9:91:99:2c:eb:b1:e4:fe:56:
36:47:ed:81:aa:9d:69:ed:1a:53:93:43:1f:52:0f:
73:c7:c3:29:7d:16:d4:93:c0:ac:f0:a5:cd:3c:c2:
a2:be:1d:74:8f:40:e5:bc:f4:2d:07:86:f6:f2:3e:
97:a2:5c:18:a8:d6:28:31:f0:f8:43:0b:2d:2b:c2:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:36:1F:56:29:C5:F2:9D:A0:CC:9B:36:78:21:D4:E8:E6:55:6F
X509v3 Authority Key Identifier:
keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:89:ea:cd:ed:af:3f:62:24:b9:3c:cb:31:30:8b:83:f7:20:
9c:b1:85:20:0b:37:52:a1:cb:6a:54:be:6b:ae:d4:9c:ad:cd:
57:54:3a:a5:c2:93:83:c0:d6:2c:c4:dd:12:b6:96:02:b8:b5:
a6:e8:17:a4:c9:29:96:a4:27:ad:8b:16:06:95:13:6e:16:ef:
16:8b:01:11:ff:a4:0a:bb:da:04:02:1a:64:a1:3e:81:0d:fb:
5c:8e:e7:d0:58:d6:83:ee:ed:f3:39:8e:9c:b2:62:54:5f:29:
13:18:64:78:42:ac:bb:9c:ae:e7:af:7b:10:ed:78:10:4c:5e:
cf:28:9f:b5:08:f7:21:1f:86:99:97:18:a7:22:a4:9f:b0:5d:
da:2a:34:50:9e:a0:ec:a1:9b:f1:c2:c0:c4:54:44:86:c4:64:
67:db:f3:3c:de:af:b9:79:58:d3:43:7c:94:4d:ac:62:39:87:
46:f1:a1:38:1a:0e:d3:f9:4c:97:6f:50:fe:7c:2d:ac:77:1c:
4e:6c:8a:1a:a6:9f:ee:01:bb:91:31:ba:dd:56:7f:ea:90:52:
a2:e4:37:9a:eb:0d:fa:1d:d3:e3:d3:89:f7:35:30:ec:9c:2b:
da:da:e3:c9:a3:61:26:1c:ea:59:8e:6d:2c:a7:3f:a7:b0:d1:
e6:3b:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:38:49 2025 by rpki-client