Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: EfPLeO65F7wQVN/bXYAUDHAcj0NNdlEVd7l8z4MdDyE=
Subject key identifier: CB:30:13:C6:EB:48:A7:9F:E5:82:89:8B:55:A1:92:A0:F6:7A:53:A2
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 0199FD3467A5B429916ED1876F2E09544860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 1007
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: k4ptrO2OqhBujxUxyem3y/dKEtdiotTpTYPy9xwny1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:67:a5:b4:29:91:6e:d1:87:6f:2e:09:54:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=cb3013c6eb48a79fe582898b55a192a0f67a53a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5f:c6:e6:b8:54:9b:66:e1:dc:3b:1f:a1:f1:
49:9d:51:26:15:75:d3:91:82:11:07:9b:8f:2b:7c:
17:13:d3:2a:d6:da:20:c0:22:63:0d:60:39:49:a4:
c1:1f:4a:76:22:ae:63:2b:b1:68:0e:69:28:5d:c9:
34:1a:c2:e7:51:39:36:0e:f4:6e:02:38:6d:b7:13:
0c:29:56:33:dc:60:db:79:de:99:99:25:00:60:77:
18:1e:a6:8c:a1:1c:8d:d3:b3:30:f6:50:19:f6:71:
51:8d:93:3b:41:76:31:4d:73:c7:d0:1a:2a:51:00:
ae:61:23:f2:c2:bc:3e:e4:bf:86:63:eb:33:d5:27:
ce:55:80:c5:86:0a:13:09:f3:80:62:6e:0f:bd:bd:
7e:a9:7e:4b:28:86:0a:eb:4c:fd:30:93:09:d1:ed:
71:a5:2c:5b:64:bf:47:b0:c4:da:b4:55:d7:94:89:
c1:2b:05:bd:26:aa:17:28:0f:e3:aa:9a:36:18:d9:
25:59:31:b8:ce:8b:d9:a2:fd:31:a5:6c:a3:42:bc:
df:30:69:81:c3:a6:ad:6c:02:3a:c6:4a:b6:cc:e1:
fd:ba:44:2f:bc:43:1d:55:3d:d4:e2:3d:28:16:ee:
62:55:bb:23:d6:00:ad:d3:ef:47:5c:db:8c:c9:f2:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:30:13:C6:EB:48:A7:9F:E5:82:89:8B:55:A1:92:A0:F6:7A:53:A2
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1f:67:01:a4:90:9d:ad:ed:ac:41:c7:42:17:8c:fc:3f:ae:
65:4d:10:44:4a:aa:ef:58:3b:f6:86:e0:53:51:2b:12:71:5d:
9a:11:80:99:ff:9b:7c:aa:5a:14:04:c4:bf:d4:07:c1:87:b4:
e1:37:1c:e7:8b:91:ea:55:f4:f3:c4:32:0b:cc:af:db:58:4a:
dd:bb:c2:e1:3a:1c:6f:ec:6a:66:28:28:10:f7:53:29:a6:6f:
79:85:85:f7:1e:d9:bc:cf:4f:57:a2:5c:26:19:97:89:e2:9b:
55:ef:1d:eb:ad:e5:24:2f:bb:37:e3:af:e0:33:7e:23:aa:9a:
88:7c:58:cf:cf:8f:b2:f1:db:8e:98:f3:12:f1:bb:7a:39:95:
aa:33:13:dc:26:08:58:91:ed:cb:53:c1:25:f5:aa:2d:bf:74:
9e:30:58:bb:78:6e:fd:13:5a:d0:a5:b1:f0:0c:27:68:a6:6a:
dd:5f:b1:59:06:ee:60:f9:65:3e:71:9a:c4:a6:82:66:c3:5f:
3b:18:ae:10:05:30:00:41:6e:94:af:37:46:13:bf:72:02:b3:
3e:b5:e1:a8:15:98:02:8b:ba:29:6c:37:f7:91:ca:77:60:79:
d9:9d:37:95:f3:19:b3:d3:54:bd:d6:d8:19:14:f8:f6:e4:51:
78:a1:57:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:47 2025 by rpki-client