Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
File: Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json)
Hash identifier: vAo2WXbYi9urzMaO+ApuLr3cmqfYVMUPijZfUukp4FY=
Subject key identifier: 8C:2B:C7:86:59:EE:96:F0:F2:6A:C8:E8:ED:5C:2A:AF:62:39:43:03
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial: 019A01114E8E5E87B3A9DEBFD0F5AA06179D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 10:01:42 +0000
Manifest this update: Mon 20 Oct 2025 10:01:42 +0000
Manifest next update: Tue 21 Oct 2025 10:01:42 +0000
Files and hashes: 1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: DMmx+jmoTGRNw4OSjtvGJ1HJW0o7dq3vyNX+VrmopAM=)
2: EX1eqOI5AsdzNwXJw_T2K67SKuY.roa (hash: zTp74P0kNRRvfGdIA3tW3Yag+dPiX+7QsxAnkmFBj8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:4e:8e:5e:87:b3:a9:de:bf:d0:f5:aa:06:17:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
Validity
Not Before: Oct 20 10:01:42 2025 GMT
Not After : Oct 21 10:01:42 2025 GMT
Subject: CN=8c2bc78659ee96f0f26ac8e8ed5c2aaf62394303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:66:85:55:3e:88:5b:c9:bd:21:70:b4:78:
c6:4e:a2:40:04:7c:af:e0:eb:90:c1:d2:93:fd:19:
b6:ce:e8:53:73:e4:94:38:fb:bb:a6:c4:2d:fc:7a:
3a:bd:42:79:85:10:ba:9a:ca:7e:a6:e3:9f:34:f4:
0e:c4:65:6d:84:71:97:a4:be:7d:e5:c9:fd:2b:47:
c1:bd:cc:d3:62:40:4c:db:9d:ac:32:6b:50:86:08:
a6:59:26:0c:78:c6:84:fc:99:59:61:11:dc:b3:98:
19:58:57:c6:ce:96:ab:ba:6a:e9:81:77:bf:2a:ab:
1a:17:d1:85:ff:b4:1f:9c:09:af:8f:61:85:65:af:
54:fd:cd:b4:3e:fd:98:c1:2c:da:22:b8:a6:e8:37:
8d:93:d4:86:ab:35:3d:fd:fa:41:d9:d9:da:ec:d8:
17:99:4a:22:5b:8b:ad:cf:e5:da:16:95:89:b4:1e:
a8:55:a9:90:8d:c7:26:e5:8c:65:81:92:47:68:53:
f0:c6:b4:eb:49:03:8d:53:f1:8e:a6:bb:8e:34:89:
f9:32:45:00:ce:20:a0:1f:a5:e7:3e:00:7d:80:2c:
24:8e:24:f4:25:77:2e:0f:7a:2b:a9:26:21:6f:1a:
f9:99:9d:a5:c2:d7:59:83:f0:c6:68:93:bb:0b:15:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2B:C7:86:59:EE:96:F0:F2:6A:C8:E8:ED:5C:2A:AF:62:39:43:03
X509v3 Authority Key Identifier:
keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c1:08:a0:63:a2:5f:77:dc:dc:a2:81:5b:10:9c:4c:e4:fc:
d7:53:44:4e:ab:7a:f2:a3:b8:3e:f6:37:00:8a:14:85:f7:22:
c9:bb:79:46:3b:03:bf:16:e0:8e:b5:ce:81:fb:5a:69:10:04:
ae:2e:ae:9c:a9:9d:14:cf:60:31:8c:56:cf:e7:fe:0e:c3:11:
5b:2b:2a:d0:b8:fc:10:15:d3:ad:f6:97:3e:2a:93:cf:5b:0b:
6a:ee:a8:72:08:bc:97:f9:0b:3c:81:c8:4e:dc:a9:37:3e:b9:
2f:55:b6:80:79:9e:24:d8:e5:fd:fb:89:bd:43:81:53:5e:79:
20:c7:b6:6f:80:8e:bf:2c:f0:ef:91:5f:e1:c3:0d:72:76:bb:
18:61:56:c4:85:16:b5:64:f9:70:06:7b:c3:3b:b2:9b:bd:09:
74:db:fe:47:b3:3a:9a:15:15:0e:b6:9f:14:df:a8:c2:b4:cd:
67:5c:56:11:9f:e5:96:f1:e3:4d:2f:cc:9c:f7:e3:13:81:35:
f1:6d:37:4c:97:34:22:dd:b7:57:46:ca:5c:51:c9:f9:2a:cc:
87:5e:d7:0c:bd:9c:56:71:b8:bc:90:33:9d:92:68:33:96:00:
7c:cf:b4:65:88:b7:26:35:1d:cc:0a:b4:2c:24:ca:f8:82:41:
04:65:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:49 2025 by rpki-client