Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json)
Hash identifier: D9Yb3kXJj11mKa7LGX1e3tVnCsNvXuhYAjpixcpRjUc=
Subject key identifier: CF:C3:C4:D1:54:C6:DB:8D:85:65:88:91:1F:41:0A:0A:73:77:D1:F7
Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Certificate serial: 0198D65FBACD6FFA935730F65DB86B8B3D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
Manifest number: 0A4B
Signing time: Sat 23 Aug 2025 10:00:54 +0000
Manifest this update: Sat 23 Aug 2025 10:00:54 +0000
Manifest next update: Sun 24 Aug 2025 10:00:54 +0000
Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: omdA5jvmjlz7hQOvjWDnF10hF7dkTYoaU24Ygx1LxCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ba:cd:6f:fa:93:57:30:f6:5d:b8:6b:8b:3d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Validity
Not Before: Aug 23 10:00:54 2025 GMT
Not After : Aug 24 10:00:54 2025 GMT
Subject: CN=cfc3c4d154c6db8d856588911f410a0a7377d1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:8b:fd:93:f8:06:8b:63:d4:27:bf:7b:3b:
76:d8:24:9f:26:c1:0d:5c:cd:86:ff:5e:b1:81:8b:
44:05:95:d4:e2:65:f7:09:70:24:e1:fc:c6:c9:26:
09:b1:a2:da:3e:2c:a1:f0:f9:de:d2:03:8e:eb:8e:
11:9b:1f:24:ba:d9:87:46:be:94:50:1c:73:1a:6d:
1a:ab:00:3f:e4:fa:70:ea:d4:48:d7:20:7b:74:b8:
fd:ce:e5:f3:a6:8a:4f:21:1c:2e:25:52:31:ec:7f:
64:4a:e4:ad:7c:2e:b9:79:28:44:e1:db:bd:3d:bb:
09:6c:1a:9f:3a:31:de:d0:ca:07:89:eb:3c:ad:de:
2e:3e:bd:0e:2f:e6:cd:54:d5:32:ad:3a:89:97:78:
01:a0:e4:8e:47:87:0c:52:5c:2a:40:de:e0:09:31:
3b:08:c9:84:eb:54:d5:4a:c2:f4:ea:ae:fc:39:49:
ad:30:e7:d4:ad:60:18:b6:f1:95:b0:db:36:95:23:
60:0f:af:c8:4c:96:9a:df:7e:ec:27:51:01:fc:53:
f5:a0:b1:69:a5:c7:13:f5:ec:c3:24:63:fd:48:5f:
b6:82:b6:fe:2e:47:11:99:1e:0a:ca:6c:67:4f:4b:
93:ee:b3:77:29:11:cc:dd:30:e6:c3:cc:a3:55:c1:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:C4:D1:54:C6:DB:8D:85:65:88:91:1F:41:0A:0A:73:77:D1:F7
X509v3 Authority Key Identifier:
keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d6:20:46:c1:11:df:31:6c:ad:dd:47:ee:cd:53:fc:7a:d3:
6d:b4:29:ed:20:7e:c3:08:a9:15:d1:6c:51:74:12:13:96:85:
f9:0f:25:da:37:a8:a3:1f:d8:7d:c4:ae:2b:c3:40:6e:19:a4:
0a:c0:27:11:bf:58:72:9c:31:f8:ad:bf:14:a8:31:f4:df:fa:
26:b3:73:d7:22:e1:4d:04:d3:e6:e4:46:a1:d1:2f:3e:97:ab:
29:58:af:fc:78:a6:69:31:33:57:c6:2d:d5:c6:ae:91:e3:03:
70:f7:b1:b1:13:50:5e:19:ba:7c:fd:2a:24:7a:6c:55:af:7f:
46:05:ec:7b:58:30:14:ba:c0:c0:92:23:21:4d:8e:cb:79:6f:
65:8f:a2:d1:d2:07:62:84:aa:d2:a9:92:2e:35:6f:c6:7a:74:
e1:d2:96:0f:27:36:4b:93:bd:0f:68:d6:42:52:fe:f3:8b:fd:
59:7e:3e:e1:d8:d5:3a:11:f9:d3:4c:f3:ef:74:a6:bd:20:f4:
93:0c:b2:c3:84:e3:06:a4:68:61:8e:5e:2d:33:d6:aa:40:e9:
d0:87:66:3c:92:66:e3:b0:1a:17:91:cf:25:2c:df:67:57:3a:
33:cb:21:70:b5:c9:7b:7f:e5:c6:e4:83:1c:e7:c8:ea:48:f3:
ba:0f:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:50 2025 by rpki-client