Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: TAIGo1Vf6rxjfzP8aLKKIsd7prcZfqphBkhLl2UhEW0=
Subject key identifier: 5E:2C:51:D2:92:B2:08:7B:C2:97:1F:C3:BC:AC:54:02:10:25:BF:05
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 0198D4E0785C2592BC0AC7527FAA14559BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: ZaQpcbGxoaD64WB8O0SA4S21HmKVfucWGgGcnn6gN2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:78:5c:25:92:bc:0a:c7:52:7f:aa:14:55:9b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=5e2c51d292b2087bc2971fc3bcac54021025bf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:7b:e7:34:bd:5c:8e:2d:cb:fd:2e:0b:0e:
bb:c8:90:a8:e9:fd:6e:f4:32:50:7c:e2:f0:cb:fc:
b4:18:dd:31:60:9f:a8:15:6b:83:71:de:24:36:7b:
5d:a7:b1:db:c2:80:af:ca:97:00:87:8c:ab:40:35:
39:47:82:5f:60:c0:16:2e:1d:77:91:50:8d:d9:5b:
ba:8e:1e:1e:51:15:9f:9e:69:1b:9d:02:3e:c2:12:
8d:1e:b4:fa:9b:f1:c1:cd:1b:be:48:db:57:7e:7b:
32:1b:dd:06:fb:87:7f:5d:7c:a7:d8:d6:a9:3a:dc:
2a:4b:62:fc:e7:82:04:4f:1b:96:5f:5f:0d:d9:27:
8a:f3:4f:61:1a:a0:49:94:f4:22:90:d5:4f:02:bc:
d8:f7:87:ce:dd:75:cb:d4:d0:70:16:4b:a4:b2:80:
da:31:c4:55:66:f6:d0:0a:8a:83:29:30:db:6d:ba:
e3:5b:59:c9:5a:6b:5f:03:c0:62:e3:08:96:cf:2e:
04:a7:a4:45:28:1b:ba:88:10:6e:45:12:f6:52:11:
04:7c:90:99:8a:a7:99:7c:e7:88:a8:4b:a5:a7:21:
71:18:ec:c4:d0:52:aa:fa:6a:fb:ec:cb:33:06:30:
d3:1d:91:b3:53:52:72:df:4c:c6:3e:04:af:2f:43:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:51:D2:92:B2:08:7B:C2:97:1F:C3:BC:AC:54:02:10:25:BF:05
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:79:b9:1a:c8:67:5b:e1:82:8f:dc:a6:17:ab:c3:46:4a:5f:
13:3e:73:d2:36:9d:50:cd:96:76:28:db:11:38:6c:18:01:ba:
67:c0:fe:ea:03:6d:b2:8d:ab:b8:cb:73:2d:81:73:9a:65:54:
22:f1:e4:df:50:42:f7:0d:f3:d2:04:1e:d1:87:42:60:49:ba:
c4:70:b0:fc:1c:ca:6d:d9:be:ac:78:e4:8c:e6:2b:f8:8c:c8:
93:52:09:86:15:0b:5e:19:cc:67:0a:11:cf:b5:f2:9c:39:06:
0c:5a:67:46:5e:f0:6f:d6:af:54:bf:29:53:9a:04:77:f4:1b:
2e:2f:74:af:87:0e:f7:8b:d7:c0:0c:65:86:26:e0:47:8e:49:
89:46:55:34:80:0d:db:80:ed:28:d1:8c:d0:8f:ac:8f:8f:e7:
07:40:65:33:d9:13:45:82:21:b0:ac:59:29:66:6c:f3:56:3a:
3e:30:a1:2c:aa:7e:8b:62:5f:89:db:df:be:b1:26:08:dd:51:
07:06:04:62:31:73:da:5b:e3:79:6d:f5:98:b0:58:07:94:11:
45:89:5a:28:c3:09:5d:de:a4:39:19:90:3d:2a:6a:a2:ac:86:
d4:2d:1d:03:32:72:6f:d7:29:d6:9f:94:1b:b3:22:d1:0e:7b:
36:99:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:00 2025 by rpki-client