Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: 99J0c5KV5U0Q6gZ8KKL1aXhr+1Pq3rllrGKe8J5qU0Q=
Subject key identifier: CE:5E:63:B9:9C:CB:B5:42:08:53:AF:01:A1:7C:BB:0C:8C:9C:E0:32
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 0198D54DD6753E9B83578B75B6F7C365B6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 04C8
Signing time: Sat 23 Aug 2025 05:01:44 +0000
Manifest this update: Sat 23 Aug 2025 05:01:44 +0000
Manifest next update: Sun 24 Aug 2025 05:01:44 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: sonK8WHu7r3dHapOo3thLjbG8BasqRuu+KjrGPGPusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d6:75:3e:9b:83:57:8b:75:b6:f7:c3:65:b6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Aug 23 05:01:44 2025 GMT
Not After : Aug 24 05:01:44 2025 GMT
Subject: CN=ce5e63b99ccbb5420853af01a17cbb0c8c9ce032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:61:63:c8:f8:1c:2a:f5:5e:79:5f:7e:17:
1c:36:1e:81:45:83:ca:01:a3:f6:16:08:be:20:22:
17:78:a0:97:ba:a4:9a:4d:1a:62:9b:1b:69:c5:8c:
b6:8d:1f:4d:48:63:d5:62:1e:e6:cf:43:fa:53:95:
63:f8:cb:b6:ca:b2:c5:37:b4:1a:c0:97:59:c2:4f:
c5:50:1c:e0:7f:40:1b:f5:7f:fa:a0:4d:ec:60:05:
91:16:16:18:7e:3a:f0:36:77:39:36:be:37:93:c0:
d1:b7:a5:28:7c:ed:cc:3a:17:e9:07:38:17:25:1d:
4b:97:98:62:aa:60:30:2c:1d:df:9b:bd:0f:9b:25:
53:31:8f:50:e2:91:68:97:82:b9:a4:6c:86:ab:0f:
35:a8:42:b0:89:23:fc:0a:09:d3:4b:43:ec:3f:ab:
2e:c0:6b:da:8c:49:77:f6:74:34:32:0c:7c:0e:a3:
e4:e4:7d:fd:8e:28:0b:f9:31:9c:f6:2f:ce:cd:c5:
5e:63:8e:3e:45:bf:e4:80:60:9f:f2:4f:a3:26:e6:
0c:38:f3:28:2a:f1:36:ae:fd:31:7d:e6:a9:2b:cd:
8a:05:cb:5b:68:36:d2:d2:3c:df:1a:97:12:a1:ea:
fc:25:08:29:3e:3e:9f:7e:bd:aa:fb:02:7d:b6:00:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5E:63:B9:9C:CB:B5:42:08:53:AF:01:A1:7C:BB:0C:8C:9C:E0:32
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b0:8b:0f:94:70:33:52:da:34:03:4b:da:02:bd:2c:ab:a5:
5c:ec:95:3a:ad:1b:05:a2:13:44:cc:6c:c8:87:2a:5a:27:37:
4c:b6:bf:34:cf:54:dd:fa:4f:da:fa:b9:aa:8d:a1:4d:29:c6:
50:f5:f5:2c:81:ff:0e:b2:c3:f8:0c:c6:af:32:b4:98:fb:6b:
19:87:ea:ec:35:19:21:b1:06:14:b9:d6:80:2d:ff:32:49:ad:
42:a7:5c:b6:17:67:d0:20:cb:20:45:c6:cd:27:c5:d1:d2:25:
97:6b:1f:6e:d3:1e:f4:e6:e6:c7:2d:8d:0c:65:81:75:77:41:
f5:2c:21:92:4e:c9:1d:f2:1f:43:c4:1f:50:ac:e5:49:56:43:
39:8c:2d:b2:50:d0:ef:46:a7:79:42:cf:f8:ff:1b:ba:7d:08:
5f:ab:24:78:81:bc:22:a4:ee:d8:bf:59:6f:d4:58:3b:78:d0:
bc:dd:f1:66:35:a5:84:fd:4b:a9:eb:82:01:c2:39:4c:70:77:
e6:a4:dc:0c:9f:a1:c2:63:97:66:73:14:02:87:99:7d:bd:50:
db:04:b5:a1:70:f0:ad:1f:f6:77:f8:ca:18:7a:d5:a1:7b:d4:
0d:96:d1:40:a9:96:b8:5c:52:af:72:49:b7:f8:32:fd:b5:b2:
a6:45:ec:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:23 2025 by rpki-client