Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: Z5Q1rrFIjUFQ/tuK13HMpUPS/WJRAGpbu9jD7+AaqNk=
Subject key identifier: D1:D5:FC:13:AA:32:7F:FB:A3:73:28:95:7A:2C:DF:60:40:8D:9D:82
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 0199FC21CA32AE6A405E0BBC8CF0D40D5E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 0100
Signing time: Sun 19 Oct 2025 11:01:36 +0000
Manifest this update: Sun 19 Oct 2025 11:01:36 +0000
Manifest next update: Mon 20 Oct 2025 11:01:36 +0000
Files and hashes: 1: B6o2wE6gWawQ2uIluRfTifNoqUE.roa (hash: lR7hCY7gYNPQXdb9GPeTgExNM9M4E71Exsz4LaS2qQc=)
2: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: S4xq+ZUfHQNVFx0e8mv0O+QNM6ojNUqDw0JPXsI03TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ca:32:ae:6a:40:5e:0b:bc:8c:f0:d4:0d:5e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Oct 19 11:01:36 2025 GMT
Not After : Oct 20 11:01:36 2025 GMT
Subject: CN=d1d5fc13aa327ffba37328957a2cdf60408d9d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:75:bf:73:f9:d6:c2:c1:d2:26:ce:07:5d:
f3:74:2c:b4:4e:b1:88:58:cc:78:27:dc:5d:ba:81:
3b:d8:3f:79:09:8e:96:fd:be:ed:9f:c9:93:cc:df:
2f:e0:a1:87:4e:a5:45:b4:cd:85:dc:ed:ee:68:e3:
e5:10:ea:fe:a7:c9:2f:f0:92:e4:ec:ef:af:fb:69:
0c:61:d3:33:0d:ae:aa:00:4a:cb:b3:88:35:54:93:
99:d8:c1:e7:00:14:07:25:70:72:db:db:17:7a:2a:
58:f4:b1:cf:10:b4:eb:fc:54:25:ea:86:de:b4:a7:
ea:13:b4:eb:8a:24:84:c2:c3:f4:7b:b7:a7:95:ce:
12:e4:d1:26:cf:6a:0f:b3:ae:97:fd:71:a5:48:4c:
43:e2:27:fc:b6:e0:f5:e1:ad:f0:15:e7:31:c0:ff:
7d:0a:04:0a:a0:0d:49:94:f4:28:04:16:ad:a3:25:
9e:95:3e:50:9d:cb:cd:b0:35:8d:2c:fa:4d:0e:a5:
2e:47:18:3e:b2:53:17:26:a4:6a:e4:d9:17:c6:49:
4a:e2:fb:c4:c2:97:94:34:cc:65:d4:83:d0:23:d0:
1a:cb:38:0b:be:69:be:9b:20:1d:d4:ff:11:00:70:
5d:c4:65:1d:c3:0b:d8:46:f1:9b:96:4f:c2:19:a6:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D5:FC:13:AA:32:7F:FB:A3:73:28:95:7A:2C:DF:60:40:8D:9D:82
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1e:71:d3:2f:1a:f7:8e:9f:46:27:76:20:a6:9e:7d:6a:e1:
78:1d:98:0c:6a:fd:84:01:3f:24:a2:b2:64:f1:cd:2a:7d:17:
2a:34:75:6b:dd:3d:9d:c3:73:de:a7:d2:bc:bb:a0:9d:a3:ab:
19:db:41:f5:63:46:aa:68:27:92:28:ab:36:9f:86:99:65:49:
0f:ca:0e:47:ac:40:cb:03:cb:07:6a:99:67:e3:78:d2:72:d0:
44:57:33:a5:8b:26:af:4d:bd:93:b6:78:08:9c:a7:25:11:7a:
67:28:b5:af:bb:1d:5b:65:d4:6f:f9:1f:a3:78:d4:59:8d:b4:
cf:87:41:df:c4:04:e4:a3:62:5c:15:1e:6a:51:83:ca:9d:a5:
60:c1:0f:3c:f1:07:c4:b6:b4:94:ee:db:6b:18:06:ed:15:cf:
27:fd:d6:c6:fe:06:48:67:ee:d1:85:14:7c:9a:e9:59:ca:af:
95:95:fb:bd:52:3f:7e:b5:95:16:00:d5:4c:e3:cc:20:d9:6c:
0d:64:f5:9c:fa:66:2b:24:8d:9a:f8:81:e9:07:96:d4:0c:32:
9e:77:9c:f2:82:82:ef:15:ae:a4:15:d2:ea:16:fc:7e:33:09:
ab:e8:a6:98:4b:28:4c:9c:c5:fe:5a:6c:aa:15:14:54:dc:8c:
4f:ca:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:21 2025 by rpki-client