Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
File: Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json)
Hash identifier: pU/OLfMbX7IhE27kfCSn4Y7ST4QAOgHCWGFebpNHdog=
Subject key identifier: F4:20:73:92:AA:29:C0:64:20:5B:4C:B0:DE:F3:AC:3D:F7:4C:D8:D7
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial: 0199FF22BB40C8A485EB5519AE92401D0E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 01:01:30 +0000
Manifest this update: Mon 20 Oct 2025 01:01:30 +0000
Manifest next update: Tue 21 Oct 2025 01:01:30 +0000
Files and hashes: 1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: /4K7N4ChkpnO21panVy3nHcJEuZAMMVpD4FFjuDHlWI=)
2: EX1eqOI5AsdzNwXJw_T2K67SKuY.roa (hash: zTp74P0kNRRvfGdIA3tW3Yag+dPiX+7QsxAnkmFBj8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:bb:40:c8:a4:85:eb:55:19:ae:92:40:1d:0e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
Validity
Not Before: Oct 20 01:01:30 2025 GMT
Not After : Oct 21 01:01:30 2025 GMT
Subject: CN=f4207392aa29c064205b4cb0def3ac3df74cd8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:59:03:4d:bc:e9:c4:97:0a:d8:e9:89:63:
0b:23:4b:b2:b8:fd:46:f8:10:e9:d5:58:76:8f:92:
c9:b2:ca:3d:6e:0a:3d:c0:79:47:00:c2:14:29:88:
52:bb:6e:1d:8d:b9:dc:9e:00:00:45:53:a1:24:5f:
6f:42:8b:61:6f:ad:0f:84:b6:0e:4e:ec:cc:f8:e9:
3e:6d:30:2b:12:2b:c3:85:8d:1b:0a:66:f5:9c:55:
cb:71:43:61:30:2e:77:4b:cb:e0:9d:14:26:1d:de:
11:ec:da:f4:cd:52:81:8e:58:85:fe:32:28:8f:64:
32:e5:80:1e:8c:93:18:d7:3d:1d:86:d2:43:a4:65:
70:b8:08:40:c1:d3:87:8f:74:29:9a:ac:e0:81:22:
21:3f:c9:14:c1:24:29:e0:92:9d:ee:63:6f:e4:f3:
76:b5:5b:fd:7b:0b:e5:e1:3e:36:b1:b3:61:20:70:
d7:81:28:26:c1:02:05:6f:a9:2e:b5:b2:ca:b4:da:
f2:1e:c5:20:08:35:41:cb:21:53:97:a4:f2:51:b8:
8d:da:78:f4:cd:82:cf:8e:9a:fe:b2:ee:97:f7:0b:
89:49:58:a2:4e:81:d0:db:09:29:c4:9d:8b:11:d7:
b2:6f:8b:34:92:93:2f:28:73:bf:ce:98:5a:e4:7f:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:20:73:92:AA:29:C0:64:20:5B:4C:B0:DE:F3:AC:3D:F7:4C:D8:D7
X509v3 Authority Key Identifier:
keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:26:f8:46:4d:50:62:ca:c4:ad:61:e8:cf:28:60:eb:e7:8c:
c9:03:68:ad:c2:11:05:99:9b:4c:cc:38:2d:0f:2b:4d:dd:a1:
32:f8:53:6b:27:fb:d7:f5:28:d8:63:fb:87:d7:78:e4:02:a1:
4b:64:74:b9:5a:6b:11:b5:63:57:74:c3:7a:f7:47:41:28:55:
b2:77:0c:e9:57:f7:23:a5:6b:16:b7:c1:18:36:f0:bd:d6:37:
7e:c4:e6:51:67:70:d0:01:fa:3a:72:04:d4:5c:f0:57:fb:f8:
55:55:d1:bb:39:99:b1:b4:57:2d:90:78:65:4f:31:11:2e:91:
11:03:37:91:f0:9f:6e:c5:01:98:bc:ef:ff:2a:c5:88:b7:89:
84:f5:d3:7e:d3:59:b9:5d:c4:0a:21:c4:b4:73:5c:5d:d8:d9:
fa:15:19:0e:ff:e4:ac:cd:2a:6f:2d:09:3a:7e:15:cc:ae:17:
7f:dc:87:66:cd:57:00:13:05:9c:66:78:42:c6:74:4e:63:bd:
d6:80:d7:91:0d:1e:30:26:03:ef:8f:8e:9a:cc:0d:6d:11:69:
92:10:20:96:5e:7b:f2:b2:0b:c6:a4:80:b5:b9:c3:d3:4f:71:
78:62:15:51:7b:40:f0:dd:6d:20:99:79:98:92:d9:70:aa:03:
52:7b:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:31 2025 by rpki-client