Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier: 9YiUNV9tK5i/XBgXXx4mJzsweK137GAW+chRrFMWY2M=
Subject key identifier: D4:33:5A:9F:16:AE:50:CB:A5:67:9F:94:CA:89:88:D0:7C:2D:7F:63
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer: /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial: 0199FBEB4776A9EFF5C72983BA2C7D100292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number: 059C
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: EOAyFwkvcyZX6mq/+TPVbkJ2yw1T16xO6pSk2dAVXOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:47:76:a9:ef:f5:c7:29:83:ba:2c:7d:10:02:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=d4335a9f16ae50cba5679f94ca8988d07c2d7f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:46:c4:50:65:72:6f:86:96:5a:33:0f:e1:0a:
8f:d5:72:83:30:e3:f8:b7:c5:06:06:1c:01:64:08:
b2:4f:3f:fb:06:8d:df:5c:93:1a:7f:8d:96:8f:49:
6a:a4:64:c4:97:30:54:61:d4:d5:49:6d:1e:a3:ef:
25:87:56:b9:11:ed:be:72:08:f6:04:30:cc:85:5c:
07:b3:66:2d:92:1e:c2:89:9d:9f:1a:b6:c3:7f:f1:
9d:ef:f5:ed:81:13:32:f4:54:e2:80:cd:4b:1d:42:
b9:56:ad:37:8b:08:1b:26:90:f8:ca:7a:ad:04:90:
8e:de:f9:40:6f:fc:7f:15:82:34:16:98:c6:14:28:
27:8b:78:bf:6f:78:1a:b2:1b:51:e4:52:b6:04:81:
cf:5c:0b:b3:e5:86:4b:57:b9:d7:44:75:36:4b:e3:
64:c8:bf:75:c4:6e:2a:0b:41:7b:4a:1f:19:ba:ea:
fa:32:f5:fc:cc:9e:39:d8:38:0c:f1:da:c6:85:4f:
70:54:41:3d:b0:55:08:b7:0b:e8:22:d8:1d:ab:8a:
38:66:0b:2a:92:3b:eb:08:71:fe:6e:da:9b:37:e7:
ac:49:a4:f2:34:87:09:8d:34:8b:01:2e:fe:2d:df:
53:26:9b:3a:f6:6a:35:4c:d2:36:31:d1:c5:49:df:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:33:5A:9F:16:AE:50:CB:A5:67:9F:94:CA:89:88:D0:7C:2D:7F:63
X509v3 Authority Key Identifier:
keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d1:2b:a9:27:56:3d:28:01:3d:6f:39:ff:37:5d:4b:98:ff:
20:4d:cb:b1:1a:70:c9:9e:b6:58:d0:ab:44:4a:ba:43:0a:f0:
10:21:1b:52:98:e0:4d:c8:db:8f:d4:79:3a:b0:b6:1d:d9:56:
f6:2b:69:23:97:9e:f3:02:16:f6:85:30:a8:c9:20:0b:78:6f:
57:05:82:77:d3:45:95:22:44:ed:68:f9:8b:64:db:62:d0:e5:
10:03:1e:ba:93:1c:7a:bd:7e:cb:5c:65:92:61:f6:a4:65:cc:
a7:e1:4f:1f:de:01:00:d6:80:cc:db:65:d8:17:dc:cb:ef:b1:
b3:9c:9e:ac:67:10:e6:ec:60:cc:1e:10:fa:f2:18:22:77:02:
b1:21:7b:c6:42:34:f4:ed:28:79:e3:5c:8b:f0:cb:98:c2:c4:
a7:d7:a6:4f:a8:e7:f9:ac:99:03:73:91:f8:91:e7:94:e7:5c:
ec:63:26:0b:a8:a8:06:06:f2:7d:47:a4:85:df:fe:11:79:a6:
b0:4f:f4:2e:bc:04:0a:b2:7f:22:a0:6a:32:f6:6f:a8:00:0f:
02:eb:da:2b:a0:21:1a:19:cd:55:96:10:02:be:92:2a:90:f4:
7f:57:03:a6:60:93:62:7a:e4:6c:a4:57:53:02:e6:58:2b:b8:
2d:2d:0b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:56 2025 by rpki-client