Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier: EuqTDahmdVUOD234nubzzR8CbP3lfL+QNxs98nZHFUU=
Subject key identifier: 45:30:2B:BD:2F:56:E9:2E:50:F2:58:BD:6C:5E:38:EA:0E:A9:9A:D8
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer: /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial: 0199FC58A43531B493238F61CEC354E46553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number: 03FA
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: luiQNIw2be3qBbdLqMK+mja86jZBI79P1POiDDsVp74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a4:35:31:b4:93:23:8f:61:ce:c3:54:e4:65:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=45302bbd2f56e92e50f258bd6c5e38ea0ea99ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:2b:88:ab:4b:29:71:87:40:8d:62:2e:d8:
e2:b4:10:e5:a1:0d:66:a1:35:4e:01:0d:0c:52:59:
6e:8d:fd:b4:76:2a:dc:e6:59:03:c8:b4:3d:03:59:
79:48:25:7d:bc:12:4b:71:32:8b:90:4d:8f:83:ab:
38:12:24:e7:94:96:7b:fc:0e:31:7c:3f:96:5e:e0:
f5:e1:06:5d:31:7a:b2:b7:6f:2c:a9:ea:4b:26:ac:
c5:73:cf:7b:34:87:3f:e0:4d:c8:4a:fd:b1:93:b9:
59:a4:09:87:91:26:1f:a2:db:6b:90:26:3f:a4:63:
6d:6f:6b:13:df:28:5c:88:ea:28:ef:7a:73:a6:43:
e6:b3:14:fc:5c:4c:40:96:da:90:b8:5d:d7:14:4f:
f9:39:8b:d7:3e:b1:46:53:68:0f:7f:da:df:7a:ca:
dc:44:77:ec:5f:8f:8e:47:b5:07:3e:9d:4d:b9:06:
51:2e:07:b8:e6:05:21:ae:1c:67:6a:05:44:eb:ab:
ec:05:0c:67:1c:0c:ed:07:6e:37:c9:de:de:01:0f:
39:61:f7:29:6f:f1:a6:ba:ee:7a:7a:4f:0e:9d:ad:
81:ef:64:0f:85:64:e0:ca:13:67:68:da:3e:c1:73:
28:c9:04:cb:c8:c2:dd:1f:9f:6c:67:b2:b1:c7:3f:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:30:2B:BD:2F:56:E9:2E:50:F2:58:BD:6C:5E:38:EA:0E:A9:9A:D8
X509v3 Authority Key Identifier:
keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:37:21:6d:28:b1:33:03:e5:47:ee:7b:79:c2:f8:00:bd:8f:
26:dd:c1:6c:e1:bd:4e:0f:58:1f:19:ab:fc:ba:87:e0:3b:55:
db:a9:10:b6:eb:43:2a:05:17:b8:0d:1e:fe:f1:44:4e:bd:23:
35:64:e4:d0:57:29:c0:31:e9:0a:0a:74:30:b0:6b:9c:c2:cc:
27:09:ee:fa:49:7b:5c:1f:63:dd:e9:b5:29:64:3c:03:2d:30:
d2:26:f8:72:1a:a6:4c:cc:2d:4e:45:ae:91:33:4b:2b:16:c7:
a4:8c:fa:10:df:fe:dc:81:ff:34:c7:31:e3:56:85:d5:bd:e5:
0c:22:d1:9d:58:34:32:ad:34:76:5c:62:be:04:2e:40:19:95:
3f:c7:2e:59:65:a3:7e:b2:ee:cf:40:3f:7a:e3:86:79:a6:ee:
7d:d7:8c:49:81:fb:ac:be:25:7b:64:58:27:77:ba:2a:ac:18:
21:a6:6f:a2:75:5f:dc:63:2d:4a:83:48:fb:a6:12:f7:04:64:
15:ca:97:26:ea:46:8e:f7:2c:6f:a2:0c:59:27:bc:b9:a3:30:
e6:7b:0f:45:67:3c:9e:5f:17:68:fd:a3:61:96:77:c8:32:1e:
29:af:31:c7:8c:b7:e9:4f:87:35:d7:b5:ec:01:df:96:4b:73:
84:b0:9a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:26 2025 by rpki-client