Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
File: cnOYybFuqY0iKkwpyvey68mE8oI.mft (raw, json)
Hash identifier: zJZ16Oa167Vd9TZ1rMypUMddKvCaQJOOoFNZuMTbbGo=
Subject key identifier: 27:6C:62:7F:4D:2B:CD:90:06:75:2C:F4:B9:C1:7F:CE:B2:D6:DC:13
Authority key identifier: 72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82
Certificate issuer: /CN=727398c9b16ea98d222a4c29caf7b2ebc984f282
Certificate serial: 0198D65F61F7135AFC2B161B85296785A848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
Manifest number: 01E2
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: cnOYybFuqY0iKkwpyvey68mE8oI.crl (hash: NBg/bCDJt9Q6PQRFnXdhAUQ/Vrmv++vPQYD0vpNZBWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:61:f7:13:5a:fc:2b:16:1b:85:29:67:85:a8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727398c9b16ea98d222a4c29caf7b2ebc984f282
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=276c627f4d2bcd9006752cf4b9c17fceb2d6dc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:44:8b:f1:99:dc:ee:20:43:64:bd:37:e4:
a7:16:a5:f4:14:fc:df:b6:35:bf:83:7f:76:3a:62:
c8:24:eb:75:34:c2:1a:49:5d:2b:df:cc:1e:23:4d:
20:d6:c8:fd:f9:ff:39:3a:80:2c:0e:1c:8d:b3:23:
8b:92:31:a3:f0:d5:f2:1d:18:b4:d8:b0:11:6d:a5:
83:b6:3a:91:72:3b:bd:81:32:4f:22:91:14:60:06:
6d:84:3c:cf:8c:ab:ac:62:a6:3b:b3:ad:a3:98:82:
be:22:ab:dc:bd:c5:4e:cc:1c:84:39:55:7a:23:9a:
a2:56:76:70:31:30:78:68:5d:04:f9:4b:64:94:10:
02:4d:69:9a:4a:8d:8c:db:66:13:d5:d6:c4:df:8d:
8f:59:07:3f:e8:8d:ee:90:6a:a2:cc:5a:7d:33:eb:
77:aa:5c:3f:1f:bd:61:a6:d4:5e:bc:87:71:32:02:
d7:96:8e:14:5b:52:dd:0d:bb:66:b9:83:08:36:d0:
7e:62:c5:f4:46:63:0d:74:6f:f3:1e:05:6f:9a:6c:
26:9a:39:ba:3f:95:3f:67:54:4f:10:b9:86:68:b2:
06:2f:74:36:a4:1c:a6:e2:8c:d6:ed:11:68:0a:43:
85:b7:17:a9:89:51:cc:4b:ec:d2:04:c6:33:9a:b1:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:62:7F:4D:2B:CD:90:06:75:2C:F4:B9:C1:7F:CE:B2:D6:DC:13
X509v3 Authority Key Identifier:
keyid:72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:be:94:b8:03:8d:0c:88:ab:09:19:20:5f:8b:6c:f5:97:bc:
de:cf:50:fe:95:12:27:0b:7f:8e:9a:e7:46:e5:5d:7b:91:b5:
39:d0:a2:80:f0:48:74:a8:51:f7:df:24:05:94:02:a4:0b:24:
35:e2:7b:18:56:43:e2:3a:0e:ea:90:29:99:1c:26:0b:17:25:
88:b7:0c:e2:00:a6:af:2c:e6:52:9c:42:01:a1:02:99:0a:3d:
d4:c4:17:c7:b1:b2:6e:e4:0b:93:9f:b8:1e:6d:39:54:b4:e3:
7a:2f:d7:cf:0a:2a:89:82:4b:27:1f:44:eb:63:0e:9c:00:cf:
d2:08:85:2a:95:03:72:17:81:dd:9e:cc:40:22:68:69:ab:15:
9d:56:32:04:b0:3b:c6:93:3d:94:dc:1d:95:5e:73:57:7b:40:
89:70:7b:4b:d8:87:6d:2b:1f:57:07:cc:69:23:1a:69:bf:83:
76:5a:21:41:f0:cd:61:a7:72:9c:7d:c6:ae:3a:e4:d5:31:f5:
cf:ba:a8:74:9b:76:b9:bf:b0:be:07:d9:16:be:c1:1a:73:93:
28:3f:40:06:ac:9c:2d:af:3d:a6:66:59:e8:5a:1a:44:05:d2:
12:62:c4:92:cf:b6:60:3d:17:9b:58:3b:b1:cd:38:c9:5c:45:
3b:9c:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:31 2025 by rpki-client