Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: ah3bwwo3WaiI4quW9fEJ7GVEIE2JzwIAzOFlMEqpTG8=
Subject key identifier: 1A:1E:21:6D:E3:7A:9F:D1:6B:F3:2A:50:EE:BA:F8:F0:BE:FE:87:4A
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 0199FD34562BA9F952E5058A08C20C90EDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 0ACB
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: iHtU+jGn/EVWNQzzMGsYpzZHV57z5EGDsfYSNjZxTOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:56:2b:a9:f9:52:e5:05:8a:08:c2:0c:90:ed:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=1a1e216de37a9fd16bf32a50eebaf8f0befe874a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1c:12:50:12:a6:59:37:83:87:c3:1c:18:f8:
51:7c:1c:6f:9e:41:b6:81:4a:cb:ae:1a:da:f2:18:
79:20:5c:16:08:53:20:47:1a:f0:fc:6e:83:e2:b2:
5a:b0:7c:fd:98:c8:14:ee:de:e1:a5:74:b2:91:46:
15:48:80:ca:71:f4:6a:89:d2:c5:9f:b3:49:9d:83:
b7:75:ed:a1:60:4e:43:1c:1d:96:8a:d9:d8:eb:39:
ab:3f:ae:de:a1:53:ef:56:1d:3f:d1:4e:16:b5:cb:
ae:7d:87:58:43:98:ad:e4:bd:9f:bb:0d:b9:63:98:
f5:d7:b6:0e:27:f5:1a:e2:17:e4:08:ad:56:3f:cc:
1f:3c:24:99:03:f2:5c:c4:2d:a7:90:ac:62:c5:3c:
1a:d4:54:ca:2b:3d:76:21:b1:0b:09:8a:c7:1d:1b:
59:43:0a:59:ec:42:f9:fb:fb:3f:f4:2a:30:77:41:
c1:0f:52:0a:06:df:e1:f2:f7:5d:cb:af:ea:b9:95:
db:b5:d1:94:5a:52:4b:23:c7:0b:f9:72:e6:6d:f1:
ef:b2:d2:28:4c:57:5c:6b:a7:2d:68:7f:63:b6:f0:
5a:bc:73:cc:6e:8d:60:70:f5:cb:25:28:76:8e:51:
57:80:f3:6e:6d:7c:9b:e1:e0:08:31:cd:6c:bc:a1:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1E:21:6D:E3:7A:9F:D1:6B:F3:2A:50:EE:BA:F8:F0:BE:FE:87:4A
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:13:93:d2:1b:4e:5c:bc:bd:8e:ab:f9:ff:02:5f:f6:93:e5:
d2:59:7d:37:d7:e1:f6:a5:e9:2b:77:63:e9:89:33:7a:7c:87:
18:b0:53:14:0c:11:ef:5b:96:b0:ab:18:8a:de:01:60:cf:f5:
6a:79:bc:c0:57:d5:33:71:ea:d1:ff:77:7b:0c:6a:9f:38:f7:
bb:4b:26:dc:78:96:2b:f5:19:00:9c:25:93:1a:5b:e8:8c:6c:
f5:3c:25:ff:7f:9d:79:6d:87:e1:7b:42:10:a3:f9:ac:23:72:
8b:67:af:40:b3:4c:c5:8f:57:47:67:ca:13:39:a4:75:d7:0e:
4a:44:4a:ff:41:59:55:91:f6:17:66:dd:da:c9:82:03:78:05:
4e:f0:54:cb:40:20:e8:d0:be:73:a4:02:f8:3f:64:1b:c9:b7:
bf:58:e7:d3:36:90:38:5e:30:34:99:09:32:9c:f4:31:5a:2e:
a7:99:e3:b5:11:f4:d3:81:97:dc:fe:e3:e6:39:77:7a:8e:18:
5f:a4:9a:83:5c:91:7c:a9:77:21:98:a3:f0:83:e1:f2:c6:15:
29:a0:17:90:2f:6d:0c:9d:73:0a:09:4c:fc:e0:c3:18:da:d5:
0a:e3:36:78:6e:7e:a3:62:72:08:7b:7a:fe:9e:9f:25:5b:bb:
4a:46:e5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:25 2025 by rpki-client