Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: PPiQ0ZRVVyIEPLtLMrPZoGfOHEQ4Nv03iXSnh3y5QoE=
Subject key identifier: AD:73:DC:7D:53:11:DD:75:71:39:E6:56:5D:0A:B2:BC:EA:3C:1A:E5
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 0199FBEAF7A8AD2139DAF35B02DBBAFC2760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0B1F
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: dsKqCcCleWLQ3OZU4XPW6bvJl56rXJRgqekwUalknAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f7:a8:ad:21:39:da:f3:5b:02:db:ba:fc:27:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=ad73dc7d5311dd757139e6565d0ab2bcea3c1ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:80:4f:b7:eb:f7:b1:28:9e:f2:75:07:e1:db:
18:a5:6f:3a:af:a0:d9:4c:cb:60:4a:a2:75:b3:aa:
0f:fa:60:d7:4d:c2:da:3d:23:f9:67:72:dc:38:88:
55:29:c7:b4:b7:dd:68:8b:13:92:99:80:0d:0e:db:
e4:00:26:b0:7e:48:59:7d:56:84:12:df:4f:bb:ef:
df:0a:95:c2:c7:46:8e:9d:c2:74:94:a2:ac:d6:1e:
47:35:32:13:70:1d:17:75:dc:0f:74:19:96:b3:a0:
6f:e1:01:5c:12:9f:1e:cf:6f:5b:a5:a1:2e:e0:9f:
97:01:a2:d5:7f:c2:bc:87:d5:6b:8c:c4:37:9a:ee:
f2:4f:bd:d2:b9:03:61:e4:23:7f:81:5b:85:1f:1a:
11:18:2d:e1:cf:ff:8f:46:03:4a:0a:fd:97:48:ca:
bc:15:b8:d6:00:56:d3:ea:62:36:be:bc:5c:df:d1:
78:c0:6a:1a:f4:e7:e0:de:ae:48:3a:dc:52:f2:a4:
14:e2:f5:84:0f:83:01:75:5f:1d:4b:20:d1:2c:a6:
68:78:3a:5a:5d:2c:39:85:68:6a:38:16:38:66:fe:
74:9d:d7:2d:80:74:d2:3d:ce:b8:3e:b6:82:6a:c0:
0b:17:0c:fb:54:ab:4d:78:6f:a3:54:97:cc:90:91:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:73:DC:7D:53:11:DD:75:71:39:E6:56:5D:0A:B2:BC:EA:3C:1A:E5
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:fa:fd:16:47:6e:b3:4f:e4:74:c6:cf:ba:02:b0:1d:64:24:
0f:65:89:92:d6:3f:1c:32:09:fd:74:0d:d6:29:4f:d5:94:0a:
26:4e:d0:d7:58:ae:27:46:a6:37:83:c3:35:3a:a5:28:9a:f8:
c5:2d:6f:c7:b7:11:d2:97:24:92:b3:ff:a9:2e:fe:df:9c:17:
5f:0b:42:fc:9c:cf:52:8a:9c:74:3b:6b:4f:98:e0:d9:6e:f4:
c2:08:4c:f5:66:e8:9c:58:3e:a0:0f:72:b6:27:bd:38:f6:e6:
fa:b6:b8:b6:d1:a4:6f:94:41:10:a4:f2:bc:bc:48:7f:b3:61:
a0:b4:cd:e8:be:21:34:11:fb:a2:2f:0a:db:ac:01:07:7b:4b:
c0:3d:30:fc:7d:cb:53:e8:c5:ac:24:76:be:71:5b:fc:01:02:
4f:d8:77:56:04:6d:67:62:87:82:12:2f:6d:5d:55:56:7c:54:
90:67:43:df:c5:8e:56:69:3e:53:bd:45:67:3f:4a:a0:d1:f9:
2e:a6:d6:1e:88:be:b3:47:c7:ed:bf:ff:2d:7f:58:07:08:1c:
e3:f0:b8:1c:58:c4:52:21:c7:5b:39:66:3d:7e:f1:05:1d:a4:
db:13:b9:a7:3a:b4:d0:99:22:27:0c:a9:45:4e:5a:6d:47:2c:
81:f5:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:17 2025 by rpki-client