Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: hvcvH71XRaEhg0gLCM4K85lWFF7thAb3U3Pm3br7vEQ=
Subject key identifier: E5:0B:97:DC:4A:FA:C1:78:6A:51:65:83:CA:53:AC:5B:96:51:31:D7
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 0199FCC6A96DF06FABD636BB049B6C9354FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 13E2
Signing time: Sun 19 Oct 2025 14:01:41 +0000
Manifest this update: Sun 19 Oct 2025 14:01:41 +0000
Manifest next update: Mon 20 Oct 2025 14:01:41 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: RV9Tg2Dx2yAYsgjdmyEIDPdTBigZaqGopE/3fdukVIg=)
2: pEayhHqE2LsS2JqNOu8wTigFXWQ.roa (hash: xO5IfYrXWQX7NXGLAWvUM5o4fMaOdr7urJcP0f6HOKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a9:6d:f0:6f:ab:d6:36:bb:04:9b:6c:93:54:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: Oct 19 14:01:41 2025 GMT
Not After : Oct 20 14:01:41 2025 GMT
Subject: CN=e50b97dc4afac1786a516583ca53ac5b965131d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:32:f2:ca:91:ed:50:4f:ad:d5:38:85:0d:
56:cf:bf:03:d8:95:1b:63:79:f1:77:2e:9d:21:7e:
a1:fd:cd:33:98:03:bf:6b:ac:9e:f7:c9:9b:56:26:
55:b3:1a:23:28:53:e9:e0:67:65:83:bb:89:fe:49:
e9:9c:4a:94:16:ec:de:ff:0f:49:c9:32:b9:68:c0:
0b:21:fd:06:a0:24:de:a1:0a:b1:73:66:89:75:65:
52:3f:d9:94:73:b4:6d:5e:05:ab:39:91:2c:dd:36:
1d:a1:20:3e:07:93:4a:f3:a3:f7:54:2c:4c:a1:d2:
2d:39:aa:10:6f:23:ce:90:4c:e3:bf:fd:d6:ca:77:
aa:82:e1:b0:84:d9:ba:9c:d5:72:f8:1f:b5:16:11:
da:f3:5f:ae:e2:ed:de:1b:60:e0:c1:3f:5a:4d:cb:
5d:b2:96:2e:37:13:02:a3:3c:5e:71:be:a4:e6:df:
6d:38:03:55:f1:c5:35:b1:60:40:57:a2:8a:8b:dd:
6a:db:bd:5c:b9:e4:c6:a3:5d:3e:f9:94:8c:04:74:
74:89:ef:b1:93:4d:93:55:f9:f3:2f:7b:76:ed:7a:
4d:95:f5:c4:36:05:7d:51:42:a2:d5:d7:20:4e:e0:
66:26:93:4d:4b:49:d1:bb:19:d9:f7:f3:e5:b4:b9:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0B:97:DC:4A:FA:C1:78:6A:51:65:83:CA:53:AC:5B:96:51:31:D7
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1f:b4:48:cc:90:04:9a:c0:83:33:3f:04:61:8f:9b:48:ae:
ef:9d:8f:62:6a:22:41:85:bb:9e:a8:64:19:ca:3d:31:1b:d2:
ec:9e:86:29:01:6a:eb:1d:98:73:04:aa:93:93:6e:c3:ba:15:
c0:40:11:04:6a:05:da:cc:b6:03:0e:da:d4:71:dc:17:20:7a:
b1:6f:42:6c:7d:9c:49:e9:ca:85:2c:77:88:02:55:1e:71:8e:
72:94:e9:56:96:47:db:63:53:c7:b6:9a:5b:62:62:3f:19:c2:
f2:ed:9d:f9:b8:f8:5e:f7:04:94:53:0d:27:d6:a4:c2:53:df:
a3:c3:1f:88:9f:44:e0:3d:bf:60:a1:1a:c8:07:e7:0d:a3:aa:
ef:ac:a7:1c:42:c7:b9:45:1c:6b:76:b8:ee:ca:00:9b:ec:8a:
7c:7c:fc:d2:92:17:3f:e7:78:9c:e5:64:bf:75:e7:a2:d4:be:
02:00:3c:11:25:dc:3b:19:09:89:ee:73:57:a1:6b:18:c2:3e:
53:8a:7a:1c:4e:58:d5:c0:40:00:a3:be:1c:1e:c7:15:db:a5:
40:3c:b2:2a:c0:2d:34:84:ef:c7:56:f7:b9:ef:35:88:90:1d:
66:64:7e:d6:d7:43:5c:23:ed:72:94:aa:d1:fb:04:92:3b:db:
2b:d4:e1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:07 2025 by rpki-client