Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: GImvmVpOBWF70jL12KgQttUTofPquCGQ9WFdWKDKVUg=
Subject key identifier: 57:C2:49:AC:48:46:12:CD:32:2E:4F:33:1E:D1:37:7B:9B:4A:3E:0C
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 0199FBEBED399D0C3A94F5762813A78E8021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 060C
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: E7ZWTu28/3uebgvQnMS4gWbHt7fNNdURGyUvzdTpCWQ=)
2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ed:39:9d:0c:3a:94:f5:76:28:13:a7:8e:80:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=57c249ac484612cd322e4f331ed1377b9b4a3e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:92:6d:7f:bb:dc:c6:0c:eb:f3:3e:3f:1f:
da:11:f2:61:e9:a8:a9:5e:63:67:a7:1e:2d:3f:14:
92:57:08:c8:c8:9f:6d:bd:e7:81:0c:34:02:d7:50:
b5:ed:08:6a:01:bf:24:c0:e2:f2:ea:93:14:21:74:
d8:f8:b2:bc:3e:f0:ef:55:ea:6f:e5:72:f3:93:f9:
56:94:1c:b8:e2:99:f3:fc:46:c8:0e:50:4e:da:dd:
aa:36:0a:86:bb:3d:92:5a:c5:aa:11:86:2b:c4:72:
fb:bb:31:71:c6:73:64:fc:ad:dd:19:ce:d8:bf:8b:
18:25:1c:c5:64:02:03:30:b0:92:a0:77:d5:cd:4e:
cf:66:39:b9:e5:6a:5d:71:62:f9:d7:b4:4b:79:3e:
e0:83:af:24:2e:83:4b:26:74:a5:10:6c:b4:b9:48:
15:1c:11:d2:f8:82:1f:61:cf:54:e4:51:66:23:bd:
59:de:07:96:c4:67:7e:1a:75:10:0b:61:68:2c:2f:
c2:e8:f3:43:14:67:91:a7:04:10:ac:54:14:13:8e:
97:58:f7:c6:c1:f2:45:0e:15:bf:d5:96:a6:d1:53:
17:79:a4:51:ce:26:c6:c0:6a:01:b0:ff:ce:fa:18:
e9:89:c2:3b:a6:47:7f:8d:0c:f0:88:71:0b:ea:a5:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:49:AC:48:46:12:CD:32:2E:4F:33:1E:D1:37:7B:9B:4A:3E:0C
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d3:fe:1c:fc:8b:28:e0:2a:04:f6:9b:8b:79:48:e6:8a:e5:
71:3c:16:2f:71:4b:93:90:d3:33:f6:c7:6b:c0:ad:fb:28:88:
f3:4c:ae:16:3c:04:52:5c:1d:23:bd:b1:c4:d9:7f:b5:8a:15:
d7:8b:6d:d9:55:c0:77:92:97:3c:d4:93:71:34:1b:cd:0b:e0:
02:c3:83:2d:d0:e9:92:db:b4:4c:17:e0:e8:fe:38:f3:c9:bd:
6e:18:ae:37:35:5b:dd:97:5f:de:84:63:75:16:b9:21:eb:bf:
9b:16:e8:25:bd:9a:01:31:17:74:d3:22:87:01:0b:dd:c4:ed:
79:9a:e6:32:a5:69:c3:e9:1f:10:20:73:ff:f2:9c:0d:d7:9e:
7a:0b:34:6a:00:e9:bf:dd:b1:c3:1d:eb:2d:af:19:c7:e1:a6:
1a:f5:a7:bb:25:c0:e6:53:ba:d6:6a:4e:af:1c:79:01:89:a0:
91:18:7e:3f:02:d4:7d:e3:63:3a:81:d7:be:e7:67:ae:36:36:
19:5b:d6:a2:61:17:2d:68:9b:66:ca:af:aa:ef:40:34:1b:b4:
5b:fb:de:30:f4:f7:70:cb:b2:91:c8:a7:af:a2:6f:74:60:e4:
bf:d3:cf:cb:27:4b:c7:94:59:48:a9:fd:a5:8a:48:7d:56:22:
21:2d:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:08 2025 by rpki-client