Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier: eBeEKxEJwHkh0E3qCGpjCVST0WfbR83ObRQU3XU3F/w=
Subject key identifier: FE:D0:99:B4:2D:21:FE:F5:E4:A3:B0:02:8B:86:9E:17:1F:4E:44:9A
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial: 0199FB45A5B65DB028182E0884DD525067CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number: 11B6
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: 9NZz5jsTAVXTQOQUhZPzzwsaNN5pT21aH5mMQckbSK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a5:b6:5d:b0:28:18:2e:08:84:dd:52:50:67:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=fed099b42d21fef5e4a3b0028b869e171f4e449a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:bd:a2:01:9a:a0:01:22:8b:cf:92:3a:47:
93:83:11:4c:4c:c3:db:24:b3:ef:b6:9f:9e:50:6a:
ae:76:7b:7b:85:b9:7c:0b:01:0b:cd:6a:d5:a6:01:
0d:35:5e:a7:0f:06:7a:ad:43:6b:06:5b:1c:1d:d5:
f5:30:67:54:20:eb:3e:06:72:a6:f4:24:f2:27:1c:
3c:a2:e0:4b:eb:9c:61:0b:10:9a:6f:60:e1:60:b9:
42:ed:ae:27:7c:6f:72:b2:42:49:43:bd:7a:51:3c:
47:3c:02:6e:80:29:56:ce:7f:a2:dd:d5:d6:c0:18:
06:0d:55:3e:f0:17:45:4d:6a:f3:b7:ef:5e:ee:7e:
a7:33:5f:f8:75:88:b1:64:28:ab:17:7a:d3:2e:13:
a8:7f:0f:ad:b4:f6:fc:56:45:90:a0:ce:6c:44:cd:
4d:34:0a:fe:ef:a4:d6:73:b7:e4:ff:61:c6:90:82:
69:b3:db:73:35:81:65:d2:9d:35:9c:74:cf:8e:1d:
d9:8b:c0:bf:f6:5a:e7:73:81:3a:ff:38:20:28:9e:
79:8d:27:c8:9e:37:7f:66:22:62:6a:34:1c:59:7c:
e8:1e:e1:46:ab:66:c0:1c:88:10:fd:b1:ff:d9:5c:
9a:cd:3b:38:e0:96:8f:ec:f8:0f:5c:7a:1c:a2:3b:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D0:99:B4:2D:21:FE:F5:E4:A3:B0:02:8B:86:9E:17:1F:4E:44:9A
X509v3 Authority Key Identifier:
keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:47:6e:8b:81:9d:97:ea:8a:4c:e7:a6:46:f8:19:9b:9e:80:
df:fc:ca:13:11:48:3d:7f:11:b7:8f:24:74:c4:05:10:09:cf:
b4:ce:e7:6f:f4:94:6a:59:58:d7:a2:d7:96:8d:2b:38:87:ca:
41:fb:6b:6c:d3:1d:2b:96:2d:ab:3c:d2:22:a9:ac:4e:58:39:
44:e8:8b:bd:b7:b4:a5:9e:ae:e3:9a:1d:9b:1b:98:83:11:22:
da:51:ac:28:e1:c0:5e:9c:a4:19:47:f7:1c:a5:ec:3f:4e:d1:
8e:52:0d:ae:fd:a1:3d:a4:26:03:de:74:8a:ce:d3:12:fc:72:
d3:f5:ec:96:2c:fc:3b:86:64:2f:a7:3f:48:ef:a0:d6:4e:0e:
c7:d0:24:36:b2:41:4b:55:9b:3f:8f:a7:92:b6:4d:17:b3:9a:
2e:c0:7e:7b:6f:a1:eb:fd:88:25:93:9b:cc:f2:a8:d2:bd:a1:
89:fd:d2:3c:8d:39:bd:52:26:25:dc:0e:e2:3e:6c:d6:4a:3a:
c4:e4:9c:e2:28:06:da:a5:4e:44:06:43:45:86:0c:64:97:a9:
4d:7d:0a:49:0a:f1:f8:db:a5:34:16:28:14:c1:8b:02:e3:78:
9e:c9:70:07:1f:35:4d:2c:9b:b0:68:30:aa:12:5d:f3:50:87:
2b:ae:6b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:49 2025 by rpki-client