Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File: CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier: HnooUY9VAeqNtc/hTRwaJThldNzPNS7pT63xUyYJqVA=
Subject key identifier: 6D:6A:CB:95:DA:0E:B0:5A:47:36:30:F6:86:F1:6F:A1:08:9E:F1:00
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer: /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial: 0199FE7D8ADECA5558254620ED65FF71A24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number: 0C81
Signing time: Sun 19 Oct 2025 22:01:04 +0000
Manifest this update: Sun 19 Oct 2025 22:01:04 +0000
Manifest next update: Mon 20 Oct 2025 22:01:04 +0000
Files and hashes: 1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: GEob5cK+HynQ5eAQD39tXWRmve/o9WQwrW4wTn/uwAo=)
2: LfJ8ODju367d2avuOQm5piH-KjI.roa (hash: o3ZK8YLnbi2AKR9dzokceRf3/tnSGkPPHYTuBxrwd0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:8a:de:ca:55:58:25:46:20:ed:65:ff:71:a2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Validity
Not Before: Oct 19 22:01:04 2025 GMT
Not After : Oct 20 22:01:04 2025 GMT
Subject: CN=6d6acb95da0eb05a473630f686f16fa1089ef100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:d9:5f:06:0e:75:66:7a:5a:7e:fd:a3:98:
72:c0:d9:d9:73:7e:13:92:bd:cf:01:9e:fa:72:5a:
10:18:36:73:96:ce:3a:04:93:48:44:f4:1f:da:c1:
13:c3:cf:19:0d:8e:e4:db:d3:b3:df:61:ec:2c:f3:
9f:1b:75:6c:0f:57:79:ec:14:09:cf:c9:85:e8:32:
0a:00:f4:31:fb:da:7d:ed:96:87:25:e1:39:38:fb:
79:9d:9e:76:42:7f:1d:e2:4d:ad:25:ac:0e:e2:70:
d0:aa:7a:f2:ab:2f:3f:d0:65:b2:a3:17:21:22:a0:
f0:d4:2e:f9:98:e5:c7:85:80:4e:b1:9d:18:1d:00:
dd:77:45:aa:4e:16:63:92:7f:f0:22:8b:1d:5e:02:
6c:18:e1:8a:76:2a:c5:36:fd:c5:f1:61:53:2d:2c:
36:83:ae:30:f1:30:c2:46:88:77:32:86:9b:2c:73:
d3:ba:b6:3a:45:fb:31:b9:31:e6:7c:85:2c:7c:92:
01:e3:c8:0f:3a:2d:56:89:6c:ce:51:d6:1b:9e:92:
ae:fd:ce:03:0c:9c:d7:a3:99:bf:c2:55:d4:23:3f:
7c:54:a3:a0:63:d8:c9:ef:69:f8:d1:25:d5:57:21:
68:cd:01:62:a6:8b:65:f1:14:05:9a:26:ab:e6:73:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6A:CB:95:DA:0E:B0:5A:47:36:30:F6:86:F1:6F:A1:08:9E:F1:00
X509v3 Authority Key Identifier:
keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:65:6f:5d:67:55:fe:14:54:57:2b:ac:1a:ec:63:15:c0:60:
5e:ae:f1:7c:42:35:ae:b1:a7:86:81:ce:4a:fa:06:30:27:85:
25:6f:54:a3:91:4f:6a:99:85:d1:d8:b0:3e:ae:c2:60:eb:ad:
87:17:29:9d:8b:90:e4:4b:a7:30:93:86:4f:36:3d:b2:8a:52:
82:00:a6:66:c0:95:85:ac:ae:5b:d6:39:41:08:62:7c:75:3d:
05:7f:77:fb:07:54:c5:dc:8a:69:d5:c4:bb:79:ac:29:00:65:
54:c5:6d:e1:2d:a9:ee:a4:53:62:5c:59:a2:7e:fe:99:16:68:
3c:d0:11:97:2c:02:2d:ea:f5:85:63:b5:9f:69:ce:88:d5:38:
c4:e9:2a:06:f5:b7:10:bc:40:8a:12:73:8a:6c:e6:ec:ed:01:
91:dc:a0:5d:a1:96:01:83:d7:da:bb:a2:64:f6:fa:f2:8b:ad:
d7:7a:60:57:a8:00:2f:03:a9:0e:a1:60:3c:50:1e:a1:7f:b4:
18:b5:81:aa:45:a5:6d:f4:ae:af:e7:ea:c1:10:42:bd:18:4d:
e6:b7:61:76:ab:66:49:53:45:83:de:34:11:bb:bd:62:ac:26:
82:0e:e1:96:fa:14:70:10:09:16:6f:fb:a6:9a:f2:04:47:9f:
bd:57:a7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:23 2025 by rpki-client