Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: wpLfLZhKaleiXmLM4En+R5RiVvdUvJY3DAhX8HkpvGg=
Subject key identifier: D9:45:1E:F6:55:98:A1:F2:52:13:BE:56:0F:2B:E3:11:62:E0:36:34
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 0199FDDA218BD045EECA7139725B80ACC534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 05C1
Signing time: Sun 19 Oct 2025 19:02:34 +0000
Manifest this update: Sun 19 Oct 2025 19:02:34 +0000
Manifest next update: Mon 20 Oct 2025 19:02:34 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: 8UkpxZZF9FqiOlON0znh0LyYVb1dcegjLZuFOKYweG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:21:8b:d0:45:ee:ca:71:39:72:5b:80:ac:c5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: Oct 19 19:02:34 2025 GMT
Not After : Oct 20 19:02:34 2025 GMT
Subject: CN=d9451ef65598a1f25213be560f2be31162e03634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:24:cf:e0:2d:e5:86:06:fa:1f:be:97:a5:
74:9b:b9:da:ac:8c:1b:66:12:13:e0:50:31:70:56:
45:7a:ed:ca:a8:e4:96:1d:50:7c:e1:69:8f:27:c3:
5f:9b:dc:8b:c0:82:34:00:6c:7e:0d:05:40:82:7c:
45:3f:0b:15:f5:18:2d:0a:66:04:57:dc:77:a5:f2:
37:4c:e0:cf:2e:2a:87:44:f5:ba:b9:e1:b2:58:1e:
72:0d:47:e5:95:bc:c7:a2:f7:5c:25:ef:2c:e2:c6:
c5:ac:d2:d7:d4:64:58:98:1f:7d:91:df:13:89:5f:
89:20:44:85:a2:74:cf:86:5e:4f:08:b1:da:c2:21:
09:7d:ed:51:93:7c:77:f3:a8:37:24:13:47:3f:9a:
b4:60:bc:14:a8:55:80:ff:be:87:d4:f2:56:5a:02:
e4:63:aa:fd:4f:48:69:a5:86:ed:41:06:46:31:5f:
d5:c8:d3:f4:9d:1c:ba:de:56:28:8c:1c:4e:10:a8:
93:4c:35:cc:dd:11:65:84:e7:12:04:d2:39:39:03:
bd:8c:e0:72:50:55:0c:4e:cf:a4:26:81:30:da:20:
1a:b9:86:5e:5c:24:83:d6:aa:ce:d2:b4:b8:83:1c:
08:b3:e5:11:d2:58:ae:71:a3:eb:46:48:94:4b:ec:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:1E:F6:55:98:A1:F2:52:13:BE:56:0F:2B:E3:11:62:E0:36:34
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c2:63:f4:50:90:24:23:f7:41:15:ff:f7:b6:53:74:1e:ff:
83:30:b1:75:cf:45:52:76:52:0b:02:25:7e:54:cb:93:1f:22:
63:d2:71:03:c2:fa:4e:1c:b9:4b:e5:01:33:e7:91:1f:9f:a1:
5e:58:a6:1d:32:90:40:a5:30:4e:d6:8c:21:08:0f:6a:4a:47:
4c:a8:ab:57:a9:07:6a:af:37:13:55:dd:96:7c:a8:aa:62:f0:
89:71:d9:64:d2:e6:74:e0:4a:8a:cc:06:89:a7:d2:6d:78:f0:
db:90:dc:cc:78:e7:0f:d1:c7:e6:50:1a:78:7d:ad:f4:76:f7:
ca:8b:c7:6d:2c:75:d1:03:7b:ad:ed:17:1f:7c:87:8f:e5:89:
86:1a:5d:c7:dd:c0:57:cb:c6:e3:7d:f7:bf:ee:21:38:46:d7:
1b:ea:6c:51:ef:44:0e:e5:41:6a:06:39:2b:42:88:e9:ad:83:
6e:99:9b:c8:c3:a1:69:ef:92:db:5a:e0:3c:70:f8:b2:31:0d:
58:46:c5:8b:42:c4:6b:4b:1f:f3:8f:7e:77:32:b3:89:1e:ad:
98:13:bd:29:f0:f3:e1:67:f1:01:f2:e7:86:10:3a:35:27:86:
e1:39:66:fc:29:22:58:ca:1d:87:ef:81:e4:b5:17:80:fe:15:
67:86:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:07 2025 by rpki-client