Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: /IGs7IcPXcszGJb6+0p+zoYEVTbsKN0vYeT+MXiYGig=
Subject key identifier: F9:02:4C:7D:EF:A2:8B:E9:2A:24:21:68:D8:80:F8:BF:D5:EC:41:10
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 0199FC21A2862E7CAB253B223E52392FF456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: OTqqlE5DQ0BgjXwdoVaU8ChP0PnAJ7oPm6h2aHvuX7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a2:86:2e:7c:ab:25:3b:22:3e:52:39:2f:f4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=f9024c7defa28be92a242168d880f8bfd5ec4110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:93:00:84:0f:f5:c0:30:f7:f6:df:34:50:
69:cf:2e:f2:81:ea:e4:a7:21:de:5d:41:af:1b:9f:
0e:95:76:4d:7b:63:9b:9e:d5:71:14:f0:4a:5d:69:
58:af:14:4c:64:99:39:55:8e:4e:bb:07:1e:f2:bd:
c3:59:fb:20:2c:c8:c2:c7:2f:4d:61:b9:ac:78:36:
33:f0:c2:8e:e1:5a:08:6c:e5:81:c1:b6:bf:1d:81:
bf:54:0f:64:24:90:8f:82:bd:14:a3:95:6a:fa:f8:
bd:a8:10:61:cb:7d:d6:3e:38:06:a8:ea:d7:34:c1:
6a:d3:5e:04:87:5a:37:d2:5b:79:50:3a:f6:67:6f:
bd:d4:d6:03:03:14:e2:45:cf:02:2d:06:bc:e0:8e:
da:0e:20:c5:e1:4c:7b:25:45:8a:00:06:55:f9:10:
2e:fb:79:19:d4:23:89:7b:e4:9b:23:47:80:1a:08:
03:f0:f4:70:a4:5a:a0:e3:be:05:08:bf:09:fd:0a:
c4:10:03:68:d9:23:e0:04:56:4a:8e:01:53:4d:1c:
d4:0d:14:aa:4f:a2:23:95:c1:6a:47:b5:e7:b2:e6:
ba:65:99:1a:b2:a2:27:89:a2:2a:26:40:ab:6a:6a:
cd:d9:88:cc:8c:e8:46:a1:23:30:03:5e:81:ca:d4:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:02:4C:7D:EF:A2:8B:E9:2A:24:21:68:D8:80:F8:BF:D5:EC:41:10
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:19:bb:cc:71:c5:36:02:50:d1:42:40:65:4b:2c:4c:32:d1:
50:9c:4d:4d:f7:f3:00:56:69:21:8f:21:16:02:0a:1f:c4:0d:
e4:9a:da:b7:97:15:90:d0:aa:48:1a:10:36:49:4b:e8:a8:82:
f5:85:b0:cd:57:41:1d:ba:f9:bf:b5:72:f2:69:ac:20:a0:ad:
76:e5:06:5a:cd:aa:75:7f:67:a2:24:00:ab:28:95:3f:c7:67:
ae:60:5f:3f:69:18:79:53:59:9c:a2:5c:a8:d8:9e:8d:4f:79:
cf:85:e3:a3:ca:8f:4d:af:c7:f3:82:14:2b:92:a5:9a:ea:9c:
df:05:7d:fb:41:94:a2:94:f9:cc:5a:e2:7d:b6:07:56:06:2a:
e1:c1:75:aa:65:a6:ab:ac:82:ef:a6:eb:94:8a:89:87:c6:ce:
70:23:6d:88:35:68:54:b0:1e:55:5b:cc:23:7b:79:75:25:08:
63:d8:ba:6b:48:25:98:e0:db:19:43:da:d6:8c:c7:76:be:8e:
8d:c0:14:c0:db:36:be:80:7c:c8:8d:c9:03:b6:e0:5a:5d:9d:
8a:ae:ed:91:a2:0d:5a:2c:8e:6a:ec:d0:c3:11:94:df:4d:d5:
a7:af:d7:e9:4c:d9:d5:8b:0d:92:76:78:d4:f1:bb:fe:a0:1d:
84:ac:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:16 2025 by rpki-client