Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: H9HIZijgKZaZE3hRC38yWNXmk1J0vh6koAEBv7pUgMM=
Subject key identifier: B8:E3:BF:6E:C6:9E:0D:8A:BE:26:2D:26:74:55:A5:2C:28:1F:82:A3
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 0199FBEB892ACFA27BD64BB03CACF032154E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 1224
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: zcj95LWHqoxHlNZcBilgt7b9/dkgvk2bnfQKq790Is8=)
2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:89:2a:cf:a2:7b:d6:4b:b0:3c:ac:f0:32:15:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=b8e3bf6ec69e0d8abe262d267455a52c281f82a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:55:3a:ab:fd:56:6b:88:45:0b:0b:16:0a:24:
f1:58:b4:16:ba:e4:56:ec:d8:df:ce:4e:14:3a:32:
ee:35:fb:34:02:df:be:c0:81:58:42:81:0b:be:6d:
c5:6b:1e:7e:c2:29:43:fe:4a:34:42:09:d7:78:f4:
66:79:26:1b:f0:4b:38:cd:d9:d9:43:05:08:57:16:
35:ed:92:a2:df:18:76:08:5f:db:b2:f4:76:60:df:
2d:97:ae:f9:44:16:2d:36:02:88:23:5c:92:2f:45:
9a:bf:d0:fa:57:0f:81:0f:c5:56:32:a6:11:f8:95:
2c:c7:4a:dc:83:34:f6:96:b2:c9:5c:27:7f:44:e4:
36:24:3b:1a:44:32:35:c0:86:9f:2d:50:5d:3e:5b:
5c:d0:01:0e:4e:f9:f1:98:f3:13:4e:8d:b7:7d:4e:
fa:99:85:ec:f6:7c:be:6e:56:59:e7:b1:98:f8:e4:
2d:3a:d9:4a:5e:4d:45:36:14:38:79:64:c5:7b:dc:
d5:db:a5:0d:75:df:28:6f:35:09:ad:2a:d8:52:48:
6b:e8:87:ec:b1:b9:c3:d1:73:43:ee:13:5f:8a:c7:
80:29:71:a7:54:16:f6:42:48:86:df:a3:ec:44:f6:
4f:78:d1:de:56:0d:74:33:91:65:df:ef:d1:ec:d2:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:BF:6E:C6:9E:0D:8A:BE:26:2D:26:74:55:A5:2C:28:1F:82:A3
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d8:5c:8c:1f:18:9c:d8:71:84:8b:d8:08:05:97:d5:b4:9a:
86:c5:d5:63:9f:8c:d7:21:73:35:a4:1b:60:40:ab:9f:98:24:
dc:f7:53:3a:f4:d2:45:fb:80:34:b6:2e:0b:5b:c6:0c:80:2c:
fe:c5:89:90:ca:6f:58:08:b7:76:37:0a:10:58:22:ba:9f:22:
51:2b:74:c7:81:91:e7:ae:dd:f6:1f:5b:fe:7f:57:02:b8:5d:
c4:ee:a8:59:f0:8b:17:ce:75:90:ac:e0:4c:41:92:a5:25:3a:
c2:fb:67:61:02:74:2e:f5:b2:5e:38:8f:6f:4f:e1:28:c9:1d:
da:63:68:29:9e:71:eb:90:f2:29:fa:ba:7e:d3:3f:4f:89:89:
e7:b2:29:c2:c4:00:8d:9a:6b:91:e7:b5:54:35:1d:d6:8e:ae:
45:db:f5:7b:d3:14:2f:07:ae:f7:34:4e:c2:b6:9c:db:6d:6d:
0e:9b:ea:0d:e9:92:c2:bd:ae:02:af:33:cd:14:95:a1:af:a5:
c1:89:b6:52:b4:4b:29:88:e1:96:78:a4:73:bc:ce:f7:b5:15:
a9:67:51:81:cc:4e:a7:ef:5a:61:dc:4e:b5:79:3b:3c:e2:9d:
3f:a3:39:e3:cb:a6:3c:f7:98:ba:32:e7:3d:e8:b8:0d:f7:64:
66:02:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:36 2025 by rpki-client