Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: OD/U1r7iP1QaMrYSYXc6WQhhMtfh0AAqrM7FqgHuny0=
Subject key identifier: 5B:22:9C:F6:05:91:4E:F3:AC:7D:D8:BD:5E:42:FB:A8:A5:9C:D3:57
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 0199FBEC0839B3DC27CCE71D011E5B9DAAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 0323
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: Y5M8c3kAapOVrMxLmE42620PlDkYTq7vSRVXwRzP9iQ=)
2: Dx843zJfB2RQ1tXw_6blL8VsbDw.roa (hash: Wk3Kg6R2i9DDoDfgR64ME8g+dDPZ0Euba0eJlCA1nOk=)
3: Eqq1hxnObNRaQRziaWuuBD1-O8o.roa (hash: jq17ziTa438haUw4I3TgAJRiuoEa3mnBNSNTDtlyTb8=)
4: baeYMpQTf1prfSgvYpiSJyiA86o.roa (hash: K1aC88mjEbBLbQ7U4e/CSJaIjpQ51Z65KxdLka02ark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:08:39:b3:dc:27:cc:e7:1d:01:1e:5b:9d:aa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=5b229cf605914ef3ac7dd8bd5e42fba8a59cd357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:74:6b:4c:a5:1d:a7:a6:5c:17:0c:df:13:
74:58:21:66:51:4e:02:0b:98:6d:57:d3:72:16:f0:
63:a5:35:42:a3:99:7d:f9:c6:2d:94:e3:aa:a7:a3:
76:45:57:d4:bf:38:4d:80:3b:1f:f3:c4:9d:ff:d0:
7e:d4:91:8b:01:62:a4:d7:d1:8a:a3:31:4b:99:b4:
7d:a6:0f:a4:0d:0d:83:9a:6e:44:7d:50:83:74:77:
9f:72:64:e1:11:2f:29:14:40:03:7b:48:67:e5:bd:
33:d3:36:e1:d6:93:7c:f6:9b:88:d1:32:7f:3e:4c:
c2:cb:c2:f6:9e:34:ba:03:f9:13:9a:49:dd:9d:78:
b6:ea:24:ec:f4:3b:c2:94:5c:12:40:ee:30:1f:8b:
1d:64:5b:f0:c2:26:c1:a7:87:c0:fe:97:d6:cc:5a:
14:5b:d9:fc:a7:68:0b:77:83:dd:f4:1f:c8:e5:83:
c6:33:b8:7f:30:27:89:e9:10:af:79:22:9c:e4:2b:
c7:c5:e9:9e:a2:df:8d:62:6c:f9:a6:2d:7c:54:02:
79:ac:94:f7:ea:4a:d2:1c:0d:b9:27:2a:63:05:83:
ae:c1:d9:ad:08:49:bc:03:6d:49:d4:15:dd:49:c0:
1e:66:16:08:54:93:85:13:75:61:d4:c2:05:74:da:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:9C:F6:05:91:4E:F3:AC:7D:D8:BD:5E:42:FB:A8:A5:9C:D3:57
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a4:97:0b:f4:96:52:2f:01:79:f3:aa:09:59:16:b5:04:96:
e2:68:95:5c:5c:e9:8a:02:43:19:3e:6f:ac:51:1b:e3:97:67:
75:36:fd:d0:9b:a3:a5:31:97:62:71:0d:9f:0c:a1:4e:fa:1b:
69:e6:f3:07:77:c0:22:53:c6:1f:19:cb:90:a6:82:27:dc:86:
a9:21:a3:ce:9d:55:4a:f5:9b:94:5a:6a:ab:25:0d:f8:4f:54:
62:3a:93:0e:e5:4b:8b:ca:23:9b:ea:d2:60:b6:9c:92:2c:e2:
39:16:f9:20:f2:cb:0f:6a:ff:b2:51:75:b9:c7:0a:28:67:9a:
6d:7e:f9:96:b7:62:77:05:2d:7c:b9:f9:b4:25:fb:fa:b0:41:
08:71:2d:4f:45:a1:46:5e:92:cc:6c:f4:1f:ad:84:1c:c7:ce:
e8:50:81:8b:77:63:bc:96:a4:4b:6b:02:45:c9:d7:33:0c:c2:
90:a7:2d:b8:e3:c6:e0:be:2c:a6:3a:11:19:bb:33:ed:ca:91:
68:3e:98:36:48:88:1a:29:51:c5:00:a3:83:ee:70:30:18:d4:
4e:09:2e:17:eb:00:5c:b5:12:c0:bc:78:41:16:2e:9f:09:dd:
a7:34:0f:fb:90:7a:f5:74:98:81:45:1d:55:2f:cd:8f:9d:e2:
1e:62:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:20 2025 by rpki-client