Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
File: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json)
Hash identifier: eu4osrwEoFXI31hWttc8UCbf1blcRRLLC83QFZGDuyY=
Subject key identifier: ED:86:E8:B8:11:02:EC:9C:9D:15:DB:33:02:B1:96:28:3C:92:5F:43
Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Certificate issuer: /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Certificate serial: 019A029134CF489C696AB22A74AA9DD11C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
Manifest number: 0B9A
Signing time: Mon 20 Oct 2025 17:01:01 +0000
Manifest this update: Mon 20 Oct 2025 17:01:01 +0000
Manifest next update: Tue 21 Oct 2025 17:01:01 +0000
Files and hashes: 1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: XXK+sUiTs9bqOoayy13gPzaBt3U94PN4ocpnPsJrmoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:34:cf:48:9c:69:6a:b2:2a:74:aa:9d:d1:1c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Validity
Not Before: Oct 20 17:01:01 2025 GMT
Not After : Oct 21 17:01:01 2025 GMT
Subject: CN=ed86e8b81102ec9c9d15db3302b196283c925f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fd:35:ed:8b:57:f5:f5:63:61:8d:7e:e8:0c:
aa:ca:5d:25:11:40:7c:2a:62:6e:ff:66:b6:a9:42:
2c:0a:13:9f:7e:2a:28:33:dc:7c:8d:f0:56:56:72:
47:d2:13:50:51:ca:70:3c:a8:3e:65:63:aa:62:83:
4a:d3:a5:d8:94:ad:17:d3:97:d7:27:a3:53:90:33:
2a:a3:57:06:57:b4:20:3a:9d:23:39:10:ae:dc:c6:
54:7d:36:dc:0f:9e:23:bf:22:b9:a4:5e:e2:cc:64:
21:48:3a:1b:ea:a7:f4:65:ea:2f:4b:12:6f:7b:24:
be:52:4c:f7:60:aa:e2:f4:07:09:25:f2:59:2f:54:
66:63:60:53:d5:65:8b:d2:0a:95:29:60:4c:95:bd:
0a:f7:35:d8:59:8c:1e:47:53:9a:92:a2:43:d8:fa:
6f:fe:0c:3c:e9:5c:8d:e6:c9:3a:03:77:21:ef:b4:
50:f3:05:d2:72:cc:25:dc:e5:c6:d9:c2:1c:13:f9:
53:8b:6b:49:9d:9f:9e:e0:8b:63:ef:5b:e9:c2:c8:
96:a5:cf:9a:06:25:5f:61:c2:70:39:fa:f2:0d:96:
0d:25:c0:01:14:80:9d:38:b9:cb:5c:fd:94:7d:57:
a4:18:e7:c8:c3:88:15:64:f3:a5:e7:70:a2:95:9b:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:86:E8:B8:11:02:EC:9C:9D:15:DB:33:02:B1:96:28:3C:92:5F:43
X509v3 Authority Key Identifier:
keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:01:74:6a:d1:f1:af:29:ee:48:b2:9e:51:64:3c:ba:88:59:
5b:d5:b3:d1:85:24:90:3b:5f:97:d1:d3:b4:f3:f8:a3:bf:f5:
80:bd:11:b6:b7:a4:4c:33:34:97:5e:eb:1a:7d:fd:34:2f:eb:
a2:39:22:e5:93:8f:5b:f3:a6:21:81:5f:39:39:3d:ac:ec:c1:
50:10:84:ff:c4:3a:f0:d5:cb:9f:54:66:8e:aa:38:a4:47:53:
57:8d:88:1f:9a:f8:e0:29:be:03:02:4f:6a:79:fc:25:5b:02:
a3:67:7c:e5:2d:0b:38:46:b1:ad:ce:00:7b:cc:9b:e0:a5:c0:
e4:27:28:e7:92:08:60:4b:7e:2a:61:d5:2d:a0:8c:45:f1:a8:
ee:13:51:44:b5:2f:6b:38:b6:a6:47:3d:ea:8a:5e:ea:80:f7:
63:eb:88:20:23:75:c8:bc:da:37:97:57:0a:2d:66:87:11:2a:
33:bf:1d:39:74:7c:25:51:c6:58:0f:f2:2a:62:c9:85:bc:4a:
a3:3c:3a:b2:29:8b:04:9c:8d:32:c4:07:2e:89:e0:cd:4b:c5:
65:ca:96:04:7e:e1:72:77:1c:6c:9e:c7:ce:88:5f:00:2d:03:
1b:45:d5:ac:d7:3f:96:10:35:f2:4c:1a:f7:62:a7:da:c7:89:
67:99:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:24 2025 by rpki-client