Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier: BThoIlIPrmAPbHZCHQSHS3Lq6ngym2bYVWuI6YZH29k=
Subject key identifier: 8B:12:26:04:FC:86:4D:9E:A6:07:6E:6A:8D:38:ED:C9:48:16:02:6F
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial: 0199FEB4A512A8FEB67AA6C3BAC5467AA560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 23:01:15 +0000
Manifest this update: Sun 19 Oct 2025 23:01:15 +0000
Manifest next update: Mon 20 Oct 2025 23:01:15 +0000
Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: CoDcoYoPE/kCJIQmWRq5r9m0y1Z45HwG2QCf+KkmEo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a5:12:a8:fe:b6:7a:a6:c3:ba:c5:46:7a:a5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Validity
Not Before: Oct 19 23:01:15 2025 GMT
Not After : Oct 20 23:01:15 2025 GMT
Subject: CN=8b122604fc864d9ea6076e6a8d38edc94816026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:e5:32:fa:bd:97:9e:85:15:b7:cf:79:51:
b3:26:8d:bf:df:7f:bf:aa:74:5c:e4:9e:b5:20:31:
4a:58:4b:35:ed:b2:46:7f:5c:9f:0b:8b:e2:d6:c4:
f3:6e:6d:73:89:cb:49:1e:70:88:c4:6e:d8:1c:39:
5c:67:c4:38:9c:7f:ad:01:f7:d1:1c:7a:4c:1d:ae:
8a:b9:0d:c2:c6:51:64:0a:92:3f:76:89:84:50:d9:
cd:13:32:4a:e3:c2:f9:7a:a6:94:7d:df:a5:b7:48:
94:77:f8:29:52:7f:d7:97:e4:85:27:f1:28:6c:72:
b8:51:66:0e:eb:88:97:b6:c9:1d:fa:2e:b4:bd:84:
18:d5:5a:f6:d3:69:ad:59:40:5e:b4:8d:5e:e2:d4:
6f:8d:e1:16:4e:ab:dd:6a:bf:91:d4:d7:b8:4b:d4:
c5:43:47:6c:ef:33:22:98:1d:05:e9:d2:27:71:1d:
c2:97:d2:de:9a:cc:66:23:95:9b:91:fc:74:d4:a5:
68:46:59:a5:bc:07:d0:61:32:39:50:a7:1f:f4:4f:
ab:a6:f5:73:ec:2c:aa:55:c9:d3:73:ed:12:0e:ab:
a9:f1:77:44:8b:23:34:97:4b:ec:77:c8:4b:bd:b6:
a0:e1:46:d5:76:af:88:57:17:be:74:7a:5e:da:8a:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:12:26:04:FC:86:4D:9E:A6:07:6E:6A:8D:38:ED:C9:48:16:02:6F
X509v3 Authority Key Identifier:
keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b4:c4:e2:9f:d1:0f:24:78:1f:28:9a:25:13:c8:a4:38:63:
68:66:04:db:6c:ff:c3:5d:69:d2:eb:cc:cb:6a:b8:ea:c0:15:
fa:fa:d0:57:1c:f7:f4:af:fa:b6:3a:87:5c:d2:7a:c7:52:be:
55:99:9d:c9:73:3e:56:7b:be:61:5d:47:fc:d2:7b:52:3f:35:
65:26:e3:a1:84:ed:01:51:57:56:ca:5d:7b:40:e9:a8:eb:f5:
c8:1d:cd:81:00:b9:69:2c:e1:4b:64:70:2f:42:4a:ed:96:79:
a8:fb:7e:0a:fc:71:4d:b7:df:11:90:80:5b:87:52:58:ac:a9:
22:cc:ce:23:24:a1:9e:b3:29:bf:9f:52:b9:2b:28:58:46:0d:
b6:c2:bf:d0:13:34:40:9b:93:1f:69:e7:5c:89:08:10:4d:85:
a4:9e:ed:1f:60:3c:39:b2:26:f5:11:7b:fc:b0:66:ec:e9:75:
2f:a9:ca:cc:bc:d4:cf:b5:3f:36:57:7e:1a:14:54:eb:e8:f7:
1c:e5:fc:38:3b:1d:3d:b0:b6:1b:84:d5:71:2d:e8:00:1b:d8:
ea:19:40:f8:5b:51:d4:ae:f3:27:cc:6f:6d:11:8a:9c:ca:cc:
ba:3c:bf:43:65:bd:1b:89:fd:80:6c:78:63:d8:02:00:66:33:
78:eb:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:06 2025 by rpki-client