Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier: iBQZapOoTlyHNoYc1CBXsJmEGLQgPmvcM+ktpoP/Wx4=
Subject key identifier: 65:E6:4F:FE:45:57:35:A4:95:4C:24:37:A3:B0:9B:5C:D4:13:EF:53
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 0198D705CC9EB9E3F08E3206522B2E17A0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number: 0DFD
Signing time: Sat 23 Aug 2025 13:02:18 +0000
Manifest this update: Sat 23 Aug 2025 13:02:18 +0000
Manifest next update: Sun 24 Aug 2025 13:02:18 +0000
Files and hashes: 1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: Fx005U2aTwlcF1H2ZFdyHT/s2/qntTiIdrOLkbBV6Io=)
2: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (hash: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=)
3: INWe7JHY3LSZtRLCNKJA9CyWVj4.roa (hash: Yo4nt69BrN4AQ4hoMVSQ6OOsFPB4EPZWgV8+aVYUE7U=)
4: nGmNNcPYPqUlkXgs_RQgBIHWHdU.roa (hash: qd/h+GWajfOX6OMR5HYNSJZTt3Etfb5C3Mcx9RhNRgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:cc:9e:b9:e3:f0:8e:32:06:52:2b:2e:17:a0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Aug 23 13:02:18 2025 GMT
Not After : Aug 24 13:02:18 2025 GMT
Subject: CN=65e64ffe455735a4954c2437a3b09b5cd413ef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:61:fe:f8:a7:51:1f:39:ad:9e:d3:94:20:
b6:fb:2f:dc:0c:6b:c3:a1:0f:40:0e:1a:4f:2d:f8:
75:0e:6e:96:59:54:d2:38:f5:e4:0e:1b:ae:b2:48:
06:0a:da:47:b0:61:db:61:33:40:8a:95:94:f4:5c:
7e:3b:2a:4d:9a:71:c5:ca:d5:71:b9:36:ad:8c:db:
88:cb:36:9a:58:3c:a6:3a:33:52:32:02:b0:23:6b:
a0:3d:28:0a:51:ff:0c:a1:bc:75:98:a2:0a:e5:8f:
b7:42:f4:59:62:36:98:12:40:67:69:7c:47:fc:5e:
02:8d:6a:36:55:89:82:5c:d7:7c:aa:05:00:c4:52:
84:b3:8f:43:37:03:c4:84:11:ce:7a:d1:6c:33:b9:
86:3e:9d:ea:b4:23:fe:8a:0a:d6:68:9f:b1:70:0b:
0e:39:59:69:3a:1e:3a:78:5d:40:73:dc:59:40:90:
c6:3e:3c:16:f7:52:3c:94:d1:19:95:25:27:86:86:
be:9a:ff:32:61:72:e6:91:4a:3e:d3:b1:16:00:b1:
79:26:64:73:48:8a:02:64:61:e7:78:38:40:27:4b:
5a:2a:6f:04:17:c7:32:9f:41:c0:df:69:93:38:ca:
d8:dd:f7:3e:52:8d:68:ae:6c:02:64:d1:b2:65:db:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:4F:FE:45:57:35:A4:95:4C:24:37:A3:B0:9B:5C:D4:13:EF:53
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9b:7f:5c:d1:2c:f2:5b:99:7d:45:c3:86:bc:af:44:0a:68:
df:db:fd:bf:9b:8b:0c:1c:0e:32:5d:fd:82:a9:1f:62:74:06:
5f:fc:41:66:33:3e:e5:f0:ff:0f:4d:ca:03:c5:78:f2:b5:a7:
77:99:67:c9:d7:1d:16:9e:43:05:2f:5f:08:de:e0:5e:ab:e2:
40:5c:ab:5d:60:db:12:2c:ab:57:02:da:6a:57:a6:ea:3a:f8:
03:26:ca:67:a0:47:32:33:06:ee:78:52:b9:20:54:bb:77:0a:
e3:ed:2b:d3:25:ce:87:0f:ed:59:06:85:58:e1:67:0b:98:e0:
ec:ac:78:21:e0:fb:35:9f:ab:7d:29:be:27:56:43:24:49:cc:
27:3c:d1:9c:79:df:8e:e8:ae:9c:c4:20:2d:f4:90:05:33:a6:
80:3a:2f:19:f6:4d:0e:07:25:bc:ec:fd:54:13:1c:ce:dc:dc:
1c:ce:55:ae:38:72:ab:9a:6c:d8:6b:02:b7:af:11:d6:ac:94:
40:7e:1f:03:ab:d6:84:f8:a7:1b:c7:01:4a:74:15:cd:2f:07:
65:a2:56:e4:48:57:97:b7:3f:f9:68:cb:bd:15:f7:99:20:4d:
20:4e:eb:30:a2:c1:ef:32:18:7e:be:9a:1c:2e:ad:55:e7:9b:
81:6e:01:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:33 2025 by rpki-client