Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier: CmUUIcSsboYeR3MM1XwDrOcrJPf1yNh+ipl5jlj6uPY=
Subject key identifier: 0C:28:72:18:B9:45:4B:40:5F:7A:2D:35:19:B3:F5:5C:69:97:82:4E
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial: 0198D65F2883EB8856A1C6059F8E48481AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number: 15D7
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: czDRD7fA/DkZzv3xjn4M7cqfTDznyKZAB73u0zSIxKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:28:83:eb:88:56:a1:c6:05:9f:8e:48:48:1a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=0c287218b9454b405f7a2d3519b3f55c6997824e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:24:6e:f6:0e:df:db:d1:cf:8e:13:1c:52:
96:77:17:14:c4:9d:f2:c5:e5:81:ca:6d:0e:ac:3c:
10:3b:bb:03:f2:7b:42:77:a5:5d:6f:95:88:af:e4:
de:54:e5:d2:a2:b2:f7:1f:14:cf:3b:4d:31:5e:51:
dc:68:fd:db:6c:69:d6:5c:51:cc:b9:3d:db:47:06:
7e:69:84:4e:27:4f:24:a9:46:dd:ba:4c:72:9e:b6:
3c:0f:34:fb:43:05:ff:4f:bf:7a:58:51:9e:83:18:
a7:19:af:e7:a8:5f:48:03:06:5e:d1:34:3c:b0:50:
ab:2a:0a:ea:0b:1e:b9:3b:27:2b:c0:b8:b4:1f:e0:
dc:6c:c7:20:60:fa:bc:90:b8:35:ec:06:97:ed:95:
6a:9d:ca:ee:00:7b:1a:48:8d:c5:29:91:7c:cd:25:
24:53:3d:5c:62:47:92:25:fc:45:2d:0c:15:69:29:
63:eb:5f:bb:fe:4c:69:32:70:05:44:00:5a:30:d7:
7a:e5:bb:2d:5d:30:c2:23:2b:62:87:42:09:a9:cb:
67:51:51:e7:ec:c2:fb:da:8d:b1:12:ba:f7:77:c8:
f7:2e:a1:6b:79:86:24:76:33:86:a2:85:bf:e8:8b:
8b:19:9e:e0:45:54:f7:49:03:7f:90:80:ac:79:73:
06:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:28:72:18:B9:45:4B:40:5F:7A:2D:35:19:B3:F5:5C:69:97:82:4E
X509v3 Authority Key Identifier:
keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a2:18:ff:b6:3f:0e:f9:fd:41:d7:1e:e4:01:04:a2:dc:70:
1e:a7:6e:e4:b9:5d:12:6e:49:8a:ef:53:87:a8:64:48:96:5c:
34:aa:c7:0d:93:64:80:32:63:6c:fe:3d:1b:3b:fa:ce:18:4a:
45:49:f8:ea:21:f0:ea:e6:9d:8b:41:53:0a:cc:70:8d:07:4e:
1a:73:65:58:61:5d:69:31:6a:3e:16:e4:bb:e2:cf:e4:5e:22:
6a:0b:02:e9:82:bb:22:3b:a8:f1:02:8c:4a:d7:d9:87:e6:ae:
66:00:1f:85:1b:1a:28:94:f7:80:fa:d6:74:b5:0b:40:60:9a:
f8:db:56:fe:3e:02:58:bb:75:c4:8f:23:75:89:e5:29:e5:ef:
0d:e0:8a:8c:a6:f3:36:74:85:46:e4:24:57:ba:84:d7:9b:33:
56:ce:8c:ed:8b:22:49:e8:e5:67:74:eb:e9:75:d6:a4:c0:24:
db:f7:9b:45:cb:18:10:d9:f0:ff:c0:4b:b3:1e:d0:e2:90:c5:
55:67:45:db:0f:35:d9:3a:42:6d:b3:1a:2a:df:ec:96:78:4c:
3e:27:25:af:3b:89:7f:51:0a:e2:3f:4a:78:81:31:3a:52:73:
29:96:f5:dc:c7:13:c5:12:6a:c0:21:e7:68:1d:a7:63:44:54:
5e:36:57:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:46 2025 by rpki-client