Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
File: cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft (raw, json)
Hash identifier: R+obZ4h6ZflGbQ7JwpzaRByIuHmujwWSqwx70G7zH3A=
Subject key identifier: 41:DC:27:92:FC:83:04:BE:A9:14:AA:61:B4:71:1A:2B:7F:B1:52:19
Authority key identifier: 72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
Certificate issuer: /CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Certificate serial: 0198D69838F8BF689A0DE3685909DF591DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
Manifest number: 10A9
Signing time: Sat 23 Aug 2025 11:02:36 +0000
Manifest this update: Sat 23 Aug 2025 11:02:36 +0000
Manifest next update: Sun 24 Aug 2025 11:02:36 +0000
Files and hashes: 1: cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl (hash: R39xyczgJf3KkXRJt4IfZ4xSy9NxVzIMyDyLsWI4JHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:38:f8:bf:68:9a:0d:e3:68:59:09:df:59:1d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Validity
Not Before: Aug 23 11:02:36 2025 GMT
Not After : Aug 24 11:02:36 2025 GMT
Subject: CN=41dc2792fc8304bea914aa61b4711a2b7fb15219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:40:f7:79:7e:7b:55:3a:7f:ee:fa:0d:b4:
af:e7:ad:06:b6:c7:c5:42:e1:b1:5f:16:d6:d1:08:
c4:b8:83:b1:ca:67:40:b0:0e:b5:40:37:fb:b1:ce:
fe:1b:9f:66:10:c1:67:37:0c:d6:06:0a:08:65:20:
bd:dd:f7:ed:4c:f9:03:11:6d:56:0b:c0:44:e2:bd:
1e:b3:9f:ad:37:8d:13:45:e7:08:91:46:d6:de:7d:
44:3d:13:84:8c:0d:e7:26:40:f6:23:e6:d7:bc:3a:
e3:a7:e2:53:bf:dd:f0:19:39:69:e0:82:32:2e:fc:
ad:94:33:06:fa:9b:59:2a:71:9b:91:d2:7e:3a:1b:
de:ce:8e:87:8f:c9:fd:f5:5d:36:74:8d:8e:8e:4d:
2e:73:10:8a:bf:74:89:31:26:97:dc:6b:6b:f6:b2:
68:c3:ea:5d:f5:f8:3f:c7:95:4a:21:dc:5c:23:49:
0a:83:c4:c2:57:d7:5b:6e:c3:4a:db:5d:e6:31:32:
52:db:27:fc:74:8d:b6:7c:7e:d3:9a:76:7f:89:58:
ec:82:03:e3:07:cc:18:fe:23:24:26:bd:66:2a:d1:
e2:af:fa:7d:b7:db:89:1d:1d:f3:31:09:88:8b:f4:
3f:d4:e5:83:dc:35:76:66:45:9a:8f:1b:fc:7a:41:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DC:27:92:FC:83:04:BE:A9:14:AA:61:B4:71:1A:2B:7F:B1:52:19
X509v3 Authority Key Identifier:
keyid:72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:37:7b:9f:01:37:ba:d8:f2:5f:db:39:cd:c2:24:22:a1:d0:
fa:c6:dd:05:88:c5:d4:63:29:0c:bb:97:11:46:8e:00:2d:80:
9b:01:67:28:36:7b:56:4c:2f:a7:4a:95:ab:af:fa:66:56:68:
a0:a2:88:48:73:bc:89:ab:98:11:dc:6d:94:fa:cc:bb:00:f1:
d6:6b:a5:fe:64:e5:63:3d:c3:b2:47:57:f8:2f:c2:68:16:92:
80:0f:63:d7:48:b5:9c:9c:09:b9:39:dd:f3:f1:ec:ad:be:3f:
6f:16:66:64:da:6d:71:6b:91:6d:36:ba:9e:88:9f:7b:7b:62:
30:d9:88:1c:94:ad:eb:4f:bf:00:87:f3:d1:06:76:67:8f:37:
61:7b:5d:f5:2d:69:05:23:09:7d:b5:c5:1c:91:a0:35:d3:20:
5a:6a:04:ff:f8:2f:c3:4c:1a:2a:8b:de:39:49:69:81:25:ec:
c3:0d:00:6a:6c:59:5a:bf:42:10:9f:27:33:ce:be:2f:d5:ca:
d5:70:eb:62:fc:43:47:1e:bf:b9:3c:40:7c:6d:61:1e:d4:ec:
2b:39:b4:4f:c5:d9:74:c2:3c:ec:50:fd:98:be:ce:da:19:9b:
d6:fe:df:e9:c0:de:66:36:70:f6:18:2a:a3:c9:4c:bd:a0:61:
53:bc:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:37 2025 by rpki-client