Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json)
Hash identifier: q46dQMuiehO3YPm1lcfNHrN60s78A2k0YlKOBeWvfe4=
Subject key identifier: 67:02:4A:4F:6A:50:6E:31:7C:D1:2F:26:BD:46:A2:31:23:96:92:D9
Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Certificate serial: 0199FDD9C58ECBB0AB63EB0B469F3D5BA009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:02:11 +0000
Manifest this update: Sun 19 Oct 2025 19:02:11 +0000
Manifest next update: Mon 20 Oct 2025 19:02:11 +0000
Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: K/nThOcZICgiopQe0dIewC6k6mg82G1UIzrrwM+jKrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:c5:8e:cb:b0:ab:63:eb:0b:46:9f:3d:5b:a0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Validity
Not Before: Oct 19 19:02:11 2025 GMT
Not After : Oct 20 19:02:11 2025 GMT
Subject: CN=67024a4f6a506e317cd12f26bd46a231239692d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:52:3f:3a:13:70:19:2b:e7:d1:a9:30:bc:
e7:7a:9d:08:71:9b:8b:aa:e1:de:1d:ca:c7:ef:f0:
68:32:6c:1d:49:9b:0d:e2:e1:58:0b:6a:8f:c9:9a:
a7:2d:8c:0f:c2:ff:f4:d9:32:31:9b:25:43:00:fa:
12:9a:7c:71:c1:f4:ff:59:c1:d3:89:79:f8:dd:c3:
77:05:ef:57:3b:d3:17:09:6e:88:0d:03:a4:f5:95:
1c:6f:91:9e:d2:00:b5:45:4a:e4:79:77:09:64:c3:
91:a6:c2:b2:3b:4a:9a:83:ff:b3:37:b4:e8:7b:ea:
f6:05:cc:d7:13:51:f5:c8:f7:bf:41:a8:c4:6c:6b:
a2:90:9b:9e:d0:bd:56:e9:8f:85:a2:14:a2:6a:c6:
94:cb:d9:a5:8c:f2:c4:7c:2e:e6:b7:d7:3c:7e:1d:
be:62:36:5a:60:13:6f:6d:f1:b5:5a:e2:e0:68:d1:
8e:61:c1:b1:5b:0c:d8:88:1a:d1:a8:6d:a9:2c:06:
54:3a:92:7b:16:92:2a:32:64:38:bf:3b:bf:e0:4c:
58:dc:a3:27:c1:ef:c0:7c:b1:83:d9:b8:ed:f6:52:
56:2b:2b:dd:ef:aa:42:fd:57:43:74:6e:f8:66:b8:
b8:0d:fd:b2:d2:9b:b2:30:89:76:d1:c3:7a:32:03:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:02:4A:4F:6A:50:6E:31:7C:D1:2F:26:BD:46:A2:31:23:96:92:D9
X509v3 Authority Key Identifier:
keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:93:f4:3e:8b:29:44:d4:69:a7:d5:30:82:34:5a:19:51:3f:
13:55:b5:de:c7:e1:fc:b4:b4:6c:54:c3:46:9f:e9:bd:32:9b:
30:9d:d2:c2:02:b5:51:fe:71:8c:ef:a8:0e:42:90:0e:0c:4d:
9b:a7:97:a2:19:97:d3:be:49:5e:40:ff:0e:e7:7e:4d:13:5d:
3d:17:ef:4f:77:85:3f:f0:49:ea:4f:94:2e:a7:7e:0c:1b:ad:
da:db:b9:b7:77:57:88:88:e0:57:e9:86:16:56:e0:bc:b6:3d:
a7:d1:fa:26:68:26:84:a2:d3:fe:18:2c:fd:c1:ea:db:47:23:
27:69:23:af:69:32:39:32:89:55:26:7b:60:17:63:68:8e:ab:
6e:aa:86:ae:b4:bd:e5:cd:f2:ef:af:82:cd:07:3a:bf:e2:cd:
2e:2f:7e:94:69:ca:1a:de:85:4f:b8:ac:f5:91:40:3c:d2:90:
4e:17:b1:8f:e4:1a:af:27:76:81:9f:c2:93:0f:1f:d2:62:fd:
71:ba:b7:4c:ff:9c:5d:72:46:97:82:5f:8c:8b:63:f9:71:db:
67:63:71:ec:40:31:3c:c1:ff:20:de:db:b5:42:da:cc:f4:8a:
94:4f:92:cc:69:76:c2:be:ae:70:85:14:12:ca:a3:3b:a3:20:
b2:5d:8c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:39:01 2025 by rpki-client