
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier: +s5lsWnrFWpEDUEE6bcDGlSwrOX8CuWHbzqWsw1q0IQ=
Subject key identifier: A2:1A:69:B9:F4:87:AF:41:F1:7D:30:78:81:9B:B8:47:8C:38:99:E3
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial: 0199FB45C471EE1C454275FBF7D371147692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:17 +0000
Manifest this update: Sun 19 Oct 2025 07:01:17 +0000
Manifest next update: Mon 20 Oct 2025 07:01:17 +0000
Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: 4ApSnmv0Zg5VCngTYuygin0H0Lye5TCrzlEkg1yne0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c4:71:ee:1c:45:42:75:fb:f7:d3:71:14:76:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Validity
Not Before: Oct 19 07:01:17 2025 GMT
Not After : Oct 20 07:01:17 2025 GMT
Subject: CN=a21a69b9f487af41f17d3078819bb8478c3899e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:49:1a:cf:23:e9:42:e2:cc:af:a0:a9:27:cc:
a9:b3:bc:70:ab:fe:a5:24:57:2c:c9:46:79:6b:2a:
50:2f:7f:55:86:75:53:30:2f:36:f0:fb:0a:0b:89:
65:82:d2:81:b0:e7:61:23:e2:e7:b9:45:e6:cb:bc:
2f:69:05:eb:bd:70:f6:d4:e7:50:9f:a4:09:a8:58:
3b:6c:cd:8f:c3:63:f1:bb:0d:c3:5f:82:b5:13:2c:
a5:f3:41:fa:cf:5e:ed:84:ba:e2:db:03:45:10:09:
47:44:14:ad:fa:75:02:fe:d3:73:99:e0:4f:e5:9b:
69:b6:70:dd:00:19:66:dd:ac:39:30:66:a8:e8:61:
6e:cc:86:2f:bd:94:86:9c:31:72:55:13:59:f2:af:
b4:17:cc:0c:c1:54:98:99:ec:cd:ed:c1:81:30:0c:
62:75:12:2c:0d:af:5e:fb:ac:ec:ee:cc:84:93:63:
49:a6:b9:c4:f6:bd:4b:e9:99:8f:1b:01:8e:3f:45:
ad:b5:3b:b7:a6:3b:4b:6d:53:09:c5:db:24:7b:77:
42:75:46:49:ed:42:d5:a6:48:87:f6:d2:d3:7f:5d:
40:a2:52:75:68:dc:f2:30:ab:e7:8f:70:00:99:2e:
48:01:b5:79:5a:50:e8:bf:4a:e5:a7:aa:1b:34:59:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:69:B9:F4:87:AF:41:F1:7D:30:78:81:9B:B8:47:8C:38:99:E3
X509v3 Authority Key Identifier:
keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c5:fc:18:71:8a:7b:9c:18:7f:0d:db:26:6f:1c:07:4f:f6:
f9:18:38:e8:53:20:29:09:0d:06:b6:34:02:ae:f2:61:d8:26:
ca:d4:fd:46:d7:3b:7a:4d:53:24:ed:c4:4d:45:4d:49:56:3e:
47:2a:06:92:6b:c2:3b:d2:12:10:0a:3d:6e:50:3d:fb:20:3b:
e7:4f:2c:c6:0c:8d:b3:dd:29:7f:07:52:67:e8:e9:8c:e3:6c:
0b:22:70:e0:08:75:15:41:58:04:70:73:1c:f4:60:b5:72:33:
b8:42:27:41:5a:63:b9:83:1d:2f:4b:1a:34:42:45:f9:78:d6:
33:f5:d7:65:8a:ae:72:c8:63:0f:bd:eb:2c:53:6b:f9:32:2e:
ea:90:25:42:73:10:57:f3:1d:c3:28:c4:07:f2:ed:0d:e5:0a:
d8:12:4e:1c:ae:eb:03:21:ec:13:c1:58:71:fe:b4:48:4e:8d:
f7:3f:4e:69:1d:c4:17:10:bf:18:fe:3a:74:37:70:1e:89:7d:
78:98:a6:2a:71:25:8d:8d:43:d6:f4:77:77:ec:bb:4f:2e:c3:
ba:0c:51:70:62:2f:da:84:dd:9e:06:9b:04:85:d1:8c:24:73:
97:47:45:f3:7d:03:c9:d4:9c:a9:ba:02:68:3c:b4:9c:0f:8f:
61:f4:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:09 2025 by rpki-client