Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json)
Hash identifier: +rd8EHAwj4wbkMalJ+mDJBOGdwYYlsY7Up+A+C5wNmI=
Subject key identifier: 0D:43:92:8D:6B:80:B8:C5:6F:BC:08:C0:A6:45:D7:F1:71:B1:61:9C
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 0199FD349DF3CD64191627414ADDD25C3405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
Manifest number: 148D
Signing time: Sun 19 Oct 2025 16:01:47 +0000
Manifest this update: Sun 19 Oct 2025 16:01:47 +0000
Manifest next update: Mon 20 Oct 2025 16:01:47 +0000
Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: 8Ekohf2Qx5WuOgcYdQQ0RK29j7SVjM1k193Jne41PFs=)
2: fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa (hash: qTbDhlkyoNs8mOWo2CnjkxjvNByWkkbKi24V6XgdMB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9d:f3:cd:64:19:16:27:41:4a:dd:d2:5c:34:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: Oct 19 16:01:47 2025 GMT
Not After : Oct 20 16:01:47 2025 GMT
Subject: CN=0d43928d6b80b8c56fbc08c0a645d7f171b1619c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:78:09:a9:22:94:24:29:9c:81:0a:d7:06:
a2:23:e3:6b:df:c0:71:5c:ac:28:2f:15:6c:a6:0b:
6b:ab:0f:c0:8c:14:c4:f6:09:ed:62:d8:dc:48:ed:
41:8f:5b:06:c1:cf:7d:a1:59:13:c8:4b:83:2d:be:
07:3b:3c:41:a0:fe:5f:db:95:a8:0b:41:c0:8d:af:
8e:8f:d4:a2:2c:f3:1d:4f:cc:a8:e9:db:87:f9:0d:
08:ea:09:14:a3:de:53:7e:8a:ee:80:dc:57:24:78:
f3:be:2f:c0:ba:a7:58:c6:eb:10:8c:9e:57:a5:13:
73:e8:ea:2d:37:e9:bf:01:50:db:0f:9a:b4:62:2a:
42:47:8c:d8:b3:7e:fd:80:30:6f:d0:96:f9:17:2d:
7f:61:6b:50:18:be:ff:92:d6:38:eb:f2:1a:f1:50:
2e:31:51:29:6c:1b:c4:36:e5:13:30:14:34:99:a5:
f3:73:53:8d:98:90:ed:21:de:47:d2:84:be:08:ab:
9f:74:60:f3:84:de:cb:bd:6d:f9:99:75:c8:ef:23:
f9:e1:8f:16:f0:d3:18:8a:ad:f6:b3:7c:7e:19:a6:
c6:84:ad:a8:fa:c7:46:75:6e:fa:33:08:ac:77:d7:
3a:f7:be:bd:53:85:87:dc:0e:22:63:50:95:90:ae:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:43:92:8D:6B:80:B8:C5:6F:BC:08:C0:A6:45:D7:F1:71:B1:61:9C
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:46:2a:31:02:52:4c:47:66:d8:17:9b:5a:c4:b5:3c:33:ac:
dc:37:39:1b:ea:e1:40:97:7f:a8:ad:53:87:07:49:18:af:a1:
45:37:d1:00:33:fc:69:c7:ad:4f:1d:92:9c:93:40:75:ee:a3:
83:20:11:25:7d:ae:d3:a2:d6:f9:d4:36:cb:33:d8:45:f5:c7:
b3:b2:bf:b4:d8:9b:98:b9:88:e7:5b:68:01:f4:ad:f8:82:5a:
5a:94:a0:0c:82:d7:7f:ec:b4:d2:3f:06:d2:7f:c6:b6:c0:46:
3c:3d:62:59:bc:8a:ee:1c:82:09:8d:e0:9d:d0:fb:a7:16:6e:
e4:6f:6f:90:05:83:cb:cc:99:40:c7:ac:7c:7e:e0:83:19:54:
d9:57:ad:76:5b:c6:ca:b4:d2:2e:0b:a5:1c:ae:b5:47:6a:0e:
9d:c0:87:10:29:b0:7c:a2:50:29:40:51:39:32:6a:e3:d9:a9:
e2:e3:6f:fc:db:a3:d5:d0:75:ca:b2:10:75:7c:89:35:16:8f:
6e:a1:a2:47:ae:7a:b0:1d:8b:b3:42:ac:ef:e5:f3:eb:d1:1b:
d7:62:f5:38:d8:43:80:ff:f1:10:51:32:45:38:36:01:0d:e4:
2a:3b:81:f8:00:bd:39:17:58:fd:f2:cf:12:c4:ef:00:34:83:
9d:54:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:08 2025 by rpki-client