Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: Ixgrd84cA5VCdv4p5wUx7rnrujF8sV4cur1JTk8L/6U=
Subject key identifier: 89:C6:F5:DF:A0:FA:97:9D:79:70:AB:37:A4:56:06:67:D3:BB:91:86
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 0199FBEA8E10129A75372F03B32F0D07806A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 09A8
Signing time: Sun 19 Oct 2025 10:01:16 +0000
Manifest this update: Sun 19 Oct 2025 10:01:16 +0000
Manifest next update: Mon 20 Oct 2025 10:01:16 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: rXQBavEtKDdCoPTsgH04aK6plNmsCXql06sS0hb9xPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8e:10:12:9a:75:37:2f:03:b3:2f:0d:07:80:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: Oct 19 10:01:16 2025 GMT
Not After : Oct 20 10:01:16 2025 GMT
Subject: CN=89c6f5dfa0fa979d7970ab37a4560667d3bb9186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:96:43:ce:5c:66:53:30:ab:d2:27:0b:59:
ac:97:e9:a0:df:66:96:b6:06:04:f7:9c:4a:77:d6:
f2:32:1a:96:cd:da:e1:a6:5f:56:6f:e8:b3:03:e6:
04:4f:5c:91:6d:ab:01:d0:7a:1d:d5:00:8d:e3:66:
8b:52:cc:4c:c5:18:95:f4:fe:f1:a2:83:73:14:f8:
a0:2f:ed:cc:82:8f:7e:6c:2b:35:95:67:a1:65:63:
0e:5d:4f:29:d1:33:da:57:34:c4:2d:fe:48:44:92:
85:1a:16:df:58:c1:83:83:9b:64:00:47:c8:f6:08:
df:da:34:37:3d:b7:83:dd:1b:bb:d6:bc:e9:c7:c0:
28:13:c8:76:0a:cb:94:7c:8f:34:99:53:de:3d:20:
80:b0:88:2f:42:1a:55:a1:62:23:4c:c7:0b:23:26:
1e:cd:bb:6c:ae:d6:47:9a:7b:1c:04:52:30:f1:bb:
a8:a1:dc:0a:06:9c:11:69:54:fc:e8:d7:d9:13:a5:
06:24:d0:a2:e6:68:0c:fc:67:9b:24:79:9c:f2:24:
26:27:b3:ab:f3:5a:7a:15:8d:ff:6d:b2:3d:2c:a3:
37:5d:b6:3e:da:06:58:1b:08:84:5e:9e:0c:38:29:
a4:0b:8d:9c:8d:b3:57:25:d5:af:df:44:b5:cc:ee:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:F5:DF:A0:FA:97:9D:79:70:AB:37:A4:56:06:67:D3:BB:91:86
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:11:95:26:92:e3:f6:41:cb:36:23:cf:23:40:ef:54:c0:d2:
d7:9f:39:94:82:d6:2f:91:3a:28:6e:da:a1:82:37:02:fe:60:
92:72:13:59:27:12:95:57:35:9f:0b:2f:d6:bf:49:58:b9:f0:
27:84:a4:b7:8b:07:ad:fb:d5:b1:2a:ad:2f:01:85:c5:2a:90:
f7:ea:89:98:d6:e6:7a:1c:d1:6e:7c:e8:6a:a6:68:f9:ae:09:
91:0c:18:38:0f:76:d4:82:fe:82:c7:50:63:6e:30:5b:ab:b7:
c5:13:ba:a7:1e:cc:e7:aa:b9:2a:b2:d3:4d:b9:0e:68:2b:3f:
a9:ef:2e:4e:a7:1f:83:bc:84:f3:b7:82:e6:8a:15:d3:c1:8c:
b7:0a:7c:23:4d:28:0a:f1:c4:0b:35:f0:6f:e2:f5:63:6c:a6:
9a:53:fa:4f:f6:a8:42:9b:ca:6d:a8:ea:e6:99:39:c0:e8:ec:
2c:14:13:6c:0e:b0:ea:74:43:92:07:f6:e1:ca:d0:61:dc:16:
b0:e3:03:10:db:c4:12:49:ea:39:c2:56:34:41:a3:1a:52:92:
34:82:0d:34:a5:52:e7:07:ff:52:2e:85:dd:ec:a0:2c:1a:04:
8f:15:d6:de:a9:dc:01:aa:5a:af:e1:f5:96:fb:92:b3:d4:3e:
72:27:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:28 2025 by rpki-client