Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json)
Hash identifier: ppT9A+sekx9p6agxqrR/xXKd1ruxrUD45FvG3PljrTw=
Subject key identifier: FA:05:F5:3D:7D:61:1E:5A:7D:47:AE:10:16:90:F4:CF:E6:6F:56:01
Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
Certificate issuer: /CN=726f9448a910d2574157a30403f46c1172aeedb6
Certificate serial: 0199FD3485D552F436F3723715AAD4A96A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 16:01:41 +0000
Manifest this update: Sun 19 Oct 2025 16:01:41 +0000
Manifest next update: Mon 20 Oct 2025 16:01:41 +0000
Files and hashes: 1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: rucqYT6CjBxYlPW267OCQmMQ8AhLl48I692WxJ5Bizo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:85:d5:52:f4:36:f3:72:37:15:aa:d4:a9:6a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6
Validity
Not Before: Oct 19 16:01:41 2025 GMT
Not After : Oct 20 16:01:41 2025 GMT
Subject: CN=fa05f53d7d611e5a7d47ae101690f4cfe66f5601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:88:c7:e0:f9:68:c8:e6:61:6b:ea:fe:4f:76:
46:89:64:14:ad:aa:95:b8:24:3d:e1:fd:1e:cd:ac:
52:ed:48:76:7c:5a:18:ee:c8:96:e5:2b:a1:03:a5:
10:76:e9:51:f7:49:ba:ca:ea:5c:0f:94:d2:fd:8a:
19:47:a4:58:14:52:f8:a9:06:e7:83:b6:9d:5c:0e:
4e:fd:dd:e1:e0:c4:15:36:6f:cd:d8:cb:1f:f1:a6:
d2:9a:48:95:eb:55:66:64:d4:73:67:19:52:32:76:
8a:36:a1:47:bb:b0:7b:9d:79:b0:71:58:dc:2a:ed:
66:9a:5c:ab:33:51:86:9b:cb:88:04:23:43:ba:66:
bc:16:de:5e:d3:26:d2:c6:90:5d:d3:28:f1:ef:58:
b2:6a:11:01:61:e1:09:18:7d:4d:80:f8:34:f7:6d:
9a:4d:46:e2:77:1c:bb:75:b2:95:80:19:26:44:81:
03:3c:85:1b:2c:40:9f:6d:aa:10:e5:b7:e6:bd:cb:
20:18:ae:97:f2:f8:32:e4:2f:74:1c:72:c0:6a:d4:
f0:22:4c:c8:ba:dd:3d:72:bb:28:71:c7:ab:d1:90:
d1:8f:2b:e3:1e:13:9d:cf:86:15:79:e8:68:a9:eb:
d9:eb:92:eb:14:3f:b4:b0:41:67:1e:3e:d6:34:46:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:F5:3D:7D:61:1E:5A:7D:47:AE:10:16:90:F4:CF:E6:6F:56:01
X509v3 Authority Key Identifier:
keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:35:7f:03:db:d8:41:48:29:d7:a9:93:c2:a8:91:a9:b8:54:
0c:ca:67:fd:f8:3b:bb:8e:25:72:61:e4:59:2c:c4:4a:9a:3a:
94:57:80:4d:4c:d6:13:61:6e:1b:2f:98:22:a2:98:72:33:17:
f3:2c:1e:5e:b1:f7:7c:bc:93:ff:04:fb:57:ef:7a:d2:4f:b7:
a6:29:0f:0c:45:6e:b9:91:69:2e:14:de:38:ca:be:ea:91:1e:
05:1f:ba:db:82:c8:bf:3c:53:97:20:a5:e2:65:b0:d4:83:fe:
fe:9b:d4:0f:5a:ef:3a:81:d3:4d:78:8d:4e:3f:c8:8e:e7:18:
c1:9f:f2:13:ca:8b:a2:96:19:09:c2:09:6a:52:4d:4d:24:42:
ce:d1:78:b2:8f:2d:c8:ee:ff:56:55:3e:5c:d5:53:a1:48:39:
59:a7:d0:0b:85:02:d0:94:d2:3b:79:a3:b5:b6:bc:fb:d1:62:
60:35:9b:6a:50:6b:20:0c:e2:33:a6:76:83:0d:55:c6:05:f4:
22:6b:f6:cc:a1:ce:a2:31:44:b5:3d:33:a5:ba:92:7c:57:50:
65:81:aa:4c:29:51:6c:6d:51:b2:e8:36:21:87:d1:f8:f4:4f:
22:77:f4:56:b8:36:3f:09:b5:e5:8c:2f:46:49:f8:18:ea:d6:
82:97:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:19 2025 by rpki-client