Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: NqIK6aGMDw9vWj4OUEN1zVBbJKRjaI429fLbitVRfq4=
Subject key identifier: AB:BC:87:87:F6:14:4E:A0:34:D4:35:8B:C3:80:84:38:CC:A3:9E:E9
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 0199FEB4E19975DF494BB870C912E1B7D6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 137D
Signing time: Sun 19 Oct 2025 23:01:31 +0000
Manifest this update: Sun 19 Oct 2025 23:01:31 +0000
Manifest next update: Mon 20 Oct 2025 23:01:31 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: hCx6T1uTRn+vJ2aSb5e2OPfKtHCZKWYQtTR93bmpYpA=)
2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:e1:99:75:df:49:4b:b8:70:c9:12:e1:b7:d6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Oct 19 23:01:31 2025 GMT
Not After : Oct 20 23:01:31 2025 GMT
Subject: CN=abbc8787f6144ea034d4358bc3808438cca39ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:76:8a:52:6a:74:72:b7:3c:d3:e8:48:30:
b7:6b:a9:06:6a:56:d6:12:39:25:88:56:5a:67:2c:
c6:d4:bc:48:d9:32:2c:87:4d:91:45:18:d1:85:84:
c4:f4:c7:17:01:6b:d1:8e:85:db:23:5a:d5:5f:4e:
f8:83:72:29:97:d1:b2:55:68:91:8f:84:04:db:20:
53:b4:4f:e1:09:3b:5e:aa:1f:03:09:6c:74:a6:8c:
87:b8:03:a5:b1:6e:cb:b1:05:f3:5b:da:34:e7:bf:
d6:74:b7:e2:3e:54:4c:cf:68:4b:d1:d5:6b:4d:a9:
5a:51:d4:1d:84:cd:10:a2:5f:e4:9a:df:f1:31:f7:
33:5b:bc:31:b4:cc:cf:33:94:ec:9d:79:95:b0:41:
a4:53:27:8e:73:c6:26:df:44:df:a2:a3:0a:84:82:
a3:3e:e5:56:2e:e3:b9:d3:f8:27:b0:03:4e:e7:ae:
e3:68:37:48:ed:48:30:b3:1b:d5:ac:5b:b7:e9:60:
b3:db:9f:6e:4f:8b:72:1a:87:92:63:d6:e5:17:b3:
36:ab:01:49:df:04:ff:1c:6e:fa:40:aa:8f:7c:fa:
c4:f9:cd:ca:b5:bd:74:0e:d3:0d:cd:72:bb:af:2e:
a9:b4:2c:5c:ce:11:a6:97:e5:99:b7:6d:33:d9:bd:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BC:87:87:F6:14:4E:A0:34:D4:35:8B:C3:80:84:38:CC:A3:9E:E9
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:99:74:ca:a2:75:0a:92:91:b2:2c:f8:c6:06:4e:a6:54:1b:
cb:9d:9f:d4:78:64:83:94:eb:28:08:39:02:43:a0:4c:39:79:
ba:91:d8:74:87:d9:ea:d2:54:0a:73:38:d9:25:c5:a8:84:98:
82:2e:9c:9d:8a:78:2c:07:8b:eb:d4:52:c5:a9:4d:8a:1c:44:
2a:b7:e4:04:cb:12:ad:3a:d7:23:bc:86:b5:bc:3d:99:1f:40:
76:f9:78:c3:bd:53:af:1f:7a:42:38:4f:1f:d0:ab:f8:42:83:
35:db:e7:79:88:7f:1c:67:64:8b:2c:7d:e4:e4:2d:70:ab:de:
f0:d3:b2:56:2f:18:cd:0b:3a:98:88:ac:41:ac:6c:49:6b:db:
e3:14:b0:ab:41:50:e4:3d:db:4e:7d:de:93:10:6a:f5:0d:68:
44:97:13:c7:20:3f:61:ca:d6:3b:44:d5:44:ff:cb:b1:1e:b3:
28:a5:0d:00:c7:95:36:93:be:d8:61:02:48:ac:e6:e8:f8:58:
71:33:8b:4b:a2:d0:1c:14:f0:fb:d6:ba:8f:5f:51:75:6a:c9:
03:93:73:87:50:a7:51:ca:35:6a:f2:da:79:27:c4:eb:b9:a3:
d0:1d:7a:bf:64:47:43:35:43:9c:fc:17:39:bc:f8:2a:04:fe:
54:ca:02:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:37 2025 by rpki-client