Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: /KQvFEIrYxqIVJ+V8sk2+hwgwGgeSHuDHTDrU1QpFR8=
Subject key identifier: 3D:7E:09:72:4B:5B:09:98:32:B6:7A:9E:A0:07:9C:B6:C2:6D:90:0A
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 0197B6D78D2D3B3A7AF160C3D6C76B4E6883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 0C87
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: YjCdHORWwgLfB0iDWchk5IDZZkF+jQ1l6+KxonkP9Ds=)
2: YFKVeEBJZW1VH1lMf1z8k2XR2dw.roa (hash: ktDo2PZ71KEenNsxjiVRbbwqRhzDhrH0f5p3Dle1h/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8d:2d:3b:3a:7a:f1:60:c3:d6:c7:6b:4e:68:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=3d7e09724b5b099832b67a9ea0079cb6c26d900a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:9b:0e:cd:b5:fc:2d:97:04:28:84:01:16:
dd:ae:d9:67:e0:da:f9:aa:26:59:84:a1:9b:14:31:
5b:57:6e:ce:fb:ed:3d:90:32:32:a6:b3:b0:e0:5e:
88:51:91:1f:94:be:8c:84:ad:62:2e:9e:fe:d4:ad:
0b:89:45:25:e3:80:15:84:38:f1:6f:05:14:41:4d:
85:b1:e1:f8:0b:cc:43:ee:79:99:a2:03:29:36:e8:
bd:be:3b:b8:ba:c5:89:c9:6b:81:74:29:b9:29:9d:
86:eb:e8:8c:27:cf:55:2f:db:d0:15:e0:b6:71:46:
35:30:07:04:1b:1c:13:38:e1:97:6e:b1:38:9d:9c:
01:f5:20:91:fa:82:e7:cd:82:22:d1:86:0e:27:e1:
37:3d:2f:54:49:29:18:f3:d8:0c:17:87:79:02:2d:
a9:5f:4a:4d:fc:5b:2d:9b:1d:6b:0a:cf:e8:61:c8:
ce:56:c2:7d:87:b2:3b:af:d9:d1:81:ea:6a:29:9f:
06:0f:ab:be:39:87:fe:e4:17:bf:8c:56:cc:e0:83:
00:dc:fb:9c:44:97:20:fc:bb:f1:b4:65:35:23:8b:
22:7c:4c:ca:8e:39:7e:a9:49:20:8a:ad:d1:f5:9e:
91:2c:05:9e:6e:4d:72:58:49:c1:89:c9:b0:ea:e5:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7E:09:72:4B:5B:09:98:32:B6:7A:9E:A0:07:9C:B6:C2:6D:90:0A
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:32:87:1f:3b:54:f0:0e:44:45:30:04:f5:c4:4e:06:7b:b4:
21:d7:4b:f2:cc:a9:3c:f4:b7:24:e5:a1:fc:ac:4c:18:23:c6:
7c:50:34:aa:4d:e5:ee:5a:f1:3f:ae:a8:0a:f8:15:0c:0d:a7:
89:72:64:75:26:fc:d9:1c:3f:d7:07:b8:e3:a4:7c:7e:09:4a:
11:c1:57:e1:6a:68:a3:d1:cf:1a:6f:e0:4f:f9:cc:a4:8c:d6:
83:f5:73:d1:2d:2c:e2:22:7b:43:52:41:51:53:03:27:54:0c:
8a:1f:f5:4c:aa:9e:d9:18:ac:c8:25:52:8d:15:18:92:93:96:
c4:4e:64:d4:9c:0b:4d:23:ef:ca:76:59:18:9f:64:d4:c5:e0:
4e:ce:7c:5f:ff:b5:aa:12:ec:03:ec:df:8d:af:6b:03:d4:9d:
7c:81:9e:0a:97:0f:91:57:ff:97:72:8b:5e:5d:0f:d9:bc:51:
71:d7:fc:d3:c4:91:09:3c:5b:03:2f:e0:49:2c:84:1b:63:94:
be:67:7f:34:fe:b0:85:a2:c1:d8:d0:bc:d3:50:2c:18:94:ed:
23:e1:90:02:ec:95:c3:fd:67:81:7c:77:2a:37:78:cd:65:c9:
dc:8b:58:f7:8c:65:d5:2d:a6:30:f4:bd:84:63:44:57:fb:22:
42:e3:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:36 2025 by rpki-client