Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: DOLRJX5fy8LsFET2vjmGgAiu5C8RwXQfEfLAf/Zuqus=
Subject key identifier: F4:54:05:29:DB:BB:3A:C3:87:A2:11:E1:02:D4:E7:F2:C0:30:C0:1F
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 0198D65F75EF9E385BC1650CC9F9B0D0C31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 0910
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: hJk0hRnV7agM+7zTyyVw3jQ+0X0shk3GOSXuMiPjSPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:75:ef:9e:38:5b:c1:65:0c:c9:f9:b0:d0:c3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=f4540529dbbb3ac387a211e102d4e7f2c030c01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:6a:ed:71:08:0c:f6:e6:ca:52:25:ae:0f:
0e:49:c0:19:4c:66:6b:ef:db:1e:bc:aa:30:89:f9:
d4:f6:3e:b7:00:e8:18:89:7c:f3:f1:da:18:a6:ae:
28:73:b6:cf:c0:d2:5b:9a:66:af:49:39:0c:c6:aa:
48:2e:06:aa:7a:ee:cf:7b:27:ea:c8:ca:9b:69:45:
f0:d0:6e:2a:b4:b4:b8:8f:5e:1b:0e:43:7b:2c:90:
be:17:97:c8:af:48:4a:da:19:59:fc:f1:2a:39:89:
1f:dd:0e:51:25:c5:14:1c:43:3e:79:80:f6:14:f8:
7a:fa:65:b0:f4:94:d3:cb:9e:cd:a5:55:84:a0:32:
b4:49:ac:14:96:71:3a:6a:2a:6e:08:8c:b8:14:f3:
1e:d9:bb:a0:d2:51:77:00:80:6f:f9:ac:8e:ad:b0:
89:73:08:fb:15:b1:0d:39:87:0d:af:f4:8b:7a:55:
51:8e:c5:71:ba:fa:0f:a2:8d:7e:0c:64:30:2a:d7:
08:7c:60:30:bb:ae:f8:45:30:d6:d3:a1:72:a5:58:
60:bb:91:56:94:19:bc:23:85:da:d8:a8:44:ac:34:
08:f1:f6:ac:72:d3:f8:a4:a6:59:e5:2b:52:de:0c:
ef:de:c5:46:2f:70:bd:9c:4c:a3:22:29:27:48:80:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:54:05:29:DB:BB:3A:C3:87:A2:11:E1:02:D4:E7:F2:C0:30:C0:1F
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ba:55:83:c4:7c:4f:57:b1:19:a3:cb:c4:49:7c:0e:cd:a0:
22:4e:ca:62:ed:14:60:4a:a7:c2:cd:7d:cd:36:3d:e4:52:cc:
0e:75:75:78:da:7f:95:a8:c5:39:3e:76:5c:a2:8d:c6:15:76:
86:d7:51:0e:e3:13:df:eb:c5:2d:0f:8f:ed:35:23:c0:2a:c4:
28:27:30:05:84:7c:d8:1c:65:ca:eb:52:82:66:11:d8:22:ca:
8a:3f:0b:40:b0:f2:1d:4c:30:58:0e:69:09:44:0f:da:ae:36:
67:2f:31:bf:7d:46:88:1c:23:5f:76:ec:fd:a1:11:14:0e:14:
04:eb:a8:cc:d0:e3:9c:21:78:f9:c2:21:1f:b7:ff:f8:11:4b:
b8:18:62:a1:f7:d3:76:51:ac:6f:ee:ed:a0:23:81:35:a5:f7:
63:e4:e4:38:ed:26:bd:74:05:04:02:e9:c4:3b:e1:39:9c:08:
16:a3:f7:c3:af:0a:89:db:03:10:38:c0:2e:13:0d:17:26:8d:
28:27:33:38:66:b0:5b:f0:b8:27:17:0c:82:fa:91:e0:bc:52:
61:4a:53:9a:bd:9b:10:01:67:d0:55:e0:d8:96:4e:23:bc:63:
e4:c9:ee:f7:3f:63:21:9e:d0:1e:b4:42:6d:86:9f:04:15:3e:
17:9f:82:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:03 2025 by rpki-client