Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
File: CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft (raw, json)
Hash identifier: +mpHkZmZvCvywGKTNBfawBql0wuWBH87qtID5i5c81c=
Subject key identifier: 9B:36:2F:A3:7F:F5:C9:A5:6B:EF:E3:D9:AC:6B:47:A8:E6:5E:AA:FB
Authority key identifier: 08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
Certificate issuer: /CN=08f234563be959822df42f8d7274fe547c0b2f05
Certificate serial: 0199FA6AA2A5FD1455CA8DBBBE7FC53ACBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
Manifest number: 7A
Signing time: Sun 19 Oct 2025 03:01:56 +0000
Manifest this update: Sun 19 Oct 2025 03:01:56 +0000
Manifest next update: Mon 20 Oct 2025 03:01:56 +0000
Files and hashes: 1: CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl (hash: MFxFTEbok+hMq2339Fxilwj+fJsp3HuiGurKYQhKutQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:a2:a5:fd:14:55:ca:8d:bb:be:7f:c5:3a:cb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f234563be959822df42f8d7274fe547c0b2f05
Validity
Not Before: Oct 19 03:01:56 2025 GMT
Not After : Oct 20 03:01:56 2025 GMT
Subject: CN=9b362fa37ff5c9a56befe3d9ac6b47a8e65eaafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:1e:d3:22:68:47:6b:0f:f4:bd:f9:6c:93:
04:7c:9f:f0:17:d8:57:0c:20:5a:ad:b8:3f:16:fd:
ce:27:73:92:d0:83:7f:e2:bc:ac:9d:76:0e:1b:41:
49:35:cb:0f:1e:ea:e3:eb:64:8f:01:4f:12:6a:eb:
ba:e0:44:8c:31:94:b8:d6:62:fb:2c:c7:28:81:e2:
db:1b:a7:8c:91:6a:86:d7:69:b5:2d:7d:04:c4:11:
be:a1:f4:c0:48:51:f6:61:5f:da:0b:8c:c7:1e:43:
05:0f:75:89:20:f2:6a:cb:bc:2d:1e:7b:d3:c9:f2:
c3:e3:68:2b:00:02:8f:16:e7:61:29:44:87:8a:e1:
e1:27:5a:b3:74:18:86:67:c9:b2:1f:0c:73:3b:ee:
b5:55:0e:cd:d2:36:45:41:f8:51:93:8c:81:a3:0a:
f9:9b:4f:58:31:50:17:d6:4d:c4:41:6e:f2:fa:d6:
78:16:e5:5b:39:17:73:76:7c:79:12:37:27:60:33:
6d:dd:59:e8:7d:14:3a:b7:07:7e:ab:fd:2a:47:1a:
7d:7f:5a:58:d0:4e:1c:da:21:ad:bc:ec:75:bd:a0:
fd:d6:bb:1e:43:9d:63:8c:d5:e8:f0:22:c2:d8:fa:
5e:05:3e:51:2f:df:bf:19:a1:47:95:cc:9e:e7:75:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:36:2F:A3:7F:F5:C9:A5:6B:EF:E3:D9:AC:6B:47:A8:E6:5E:AA:FB
X509v3 Authority Key Identifier:
keyid:08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ad:59:1b:3c:2a:c1:a5:45:73:6c:15:9e:bd:19:00:75:10:
e0:c5:b2:ca:be:59:aa:51:c7:5e:b0:87:fb:ce:ad:5e:1f:23:
3b:fa:4d:7f:10:e4:8a:f0:ea:7c:b1:59:a7:98:f5:75:1e:9e:
39:05:40:69:ab:06:7c:21:52:23:db:78:82:97:7c:fa:b6:f5:
29:91:e2:7e:4d:fd:70:2f:0e:95:79:c5:a3:71:a8:7b:39:20:
18:3f:c3:fd:03:64:6a:31:b3:6c:bd:b6:3e:6f:e4:b4:38:66:
49:b0:dd:4d:a2:f1:15:c2:f1:35:87:12:30:8f:9d:de:ed:f3:
d6:27:10:37:0b:18:83:eb:a3:54:ae:08:c3:8e:c2:11:bd:83:
7a:69:b4:e8:18:10:d5:c6:98:60:fa:0c:69:7b:0f:bd:41:ae:
7c:e0:1c:cc:3b:5a:10:14:9d:b2:2f:4c:0f:33:cc:4e:ee:36:
6a:4c:df:2f:7b:57:a2:b8:a2:ff:7c:44:49:c8:9f:e6:43:be:
1f:2d:51:dd:7d:d0:42:60:7b:1a:9d:ed:8f:e6:d1:b1:56:a9:
ba:17:05:a7:07:f7:3b:c6:a9:d3:62:14:f0:e3:e0:31:b5:96:
47:49:42:53:97:5b:fe:d3:47:2d:2e:0c:ee:7c:44:43:2b:26:
9c:8a:f9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:49 2025 by rpki-client