Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
File: CteC3XOwPU5NdCHikNY6rfdcFyg.mft (raw, json)
Hash identifier: QQ/Lz6LEmrtFdeUXRgfykCJ8bebV40GmabNsK8u3lNc=
Subject key identifier: 75:EA:02:9E:42:3E:45:AD:8E:20:A6:27:36:4C:A5:97:95:FC:EB:E1
Authority key identifier: 0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28
Certificate issuer: /CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
Certificate serial: 0199FAA12AC26DC9741EA6926CCA3FB8101A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
Manifest number: 56
Signing time: Sun 19 Oct 2025 04:01:30 +0000
Manifest this update: Sun 19 Oct 2025 04:01:30 +0000
Manifest next update: Mon 20 Oct 2025 04:01:30 +0000
Files and hashes: 1: CteC3XOwPU5NdCHikNY6rfdcFyg.crl (hash: TjwlXOpRYq2L8oZf9yGu9E171iXaCK7ipzPuVCF2aiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:2a:c2:6d:c9:74:1e:a6:92:6c:ca:3f:b8:10:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
Validity
Not Before: Oct 19 04:01:30 2025 GMT
Not After : Oct 20 04:01:30 2025 GMT
Subject: CN=75ea029e423e45ad8e20a627364ca59795fcebe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:d4:d4:ef:6d:90:c1:46:14:d2:53:3f:93:
3d:45:4c:64:a9:00:fa:a6:c9:fa:d2:23:48:c1:40:
2e:76:0e:17:7e:eb:53:69:82:96:97:1c:a3:0a:84:
c8:8c:9a:ed:d9:f8:f6:f0:da:e9:cf:b4:52:e5:fc:
05:23:69:ca:76:1b:74:1b:75:26:b4:5e:28:8e:37:
4e:25:fa:c5:40:26:d0:9f:14:b4:14:31:bf:0f:0f:
c6:fb:d8:fa:c3:49:e7:66:cc:33:7f:08:13:15:df:
04:a9:3d:c5:f5:b4:9f:8a:22:5e:ba:28:40:2c:95:
e1:e0:a0:e7:fd:8f:a4:a0:a3:8a:17:f0:eb:e3:b5:
ca:08:49:54:61:d1:e9:ec:3c:11:d6:08:73:4a:0e:
8b:a5:1e:d1:48:ac:e6:47:19:f8:a6:b4:1c:93:e5:
e1:9d:39:33:a5:fd:d3:60:48:1d:92:74:27:55:66:
06:dc:a1:8d:65:20:94:a2:d9:cd:2d:22:0a:d9:b1:
d1:6d:a9:e0:65:3f:d2:86:27:f0:37:bb:67:70:f3:
cf:2c:4a:a2:4c:88:91:91:08:bc:00:ed:80:43:5d:
d5:c3:31:3d:54:8a:8b:a5:a6:1b:2e:0a:d2:73:c5:
b2:ce:68:45:ec:56:23:e5:f0:48:4a:90:c1:65:1c:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EA:02:9E:42:3E:45:AD:8E:20:A6:27:36:4C:A5:97:95:FC:EB:E1
X509v3 Authority Key Identifier:
keyid:0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:aa:6e:fe:f2:f8:4d:f7:9a:59:b4:24:51:8b:ac:b7:b2:01:
55:d6:a2:ac:ae:21:90:f3:e3:e6:fa:df:db:c6:ed:53:5a:af:
da:1a:9f:e8:c6:ac:c1:4d:7d:46:23:ae:f6:f5:b3:49:99:e4:
ef:ad:9d:28:9f:3a:06:30:33:3d:86:fa:70:e2:5e:12:57:0f:
1a:56:ce:c6:2e:dc:db:53:5b:d0:68:88:dc:98:0f:20:26:8e:
7c:6f:ca:b9:ca:0f:84:e7:e1:3d:45:90:09:1b:00:3c:e3:59:
e9:f4:9f:94:f7:f7:61:49:ed:94:cb:06:75:a8:13:06:89:75:
bc:ea:1e:85:8e:a3:6a:df:f1:c0:8e:f9:fc:dc:3e:67:45:48:
5c:27:86:ce:35:b9:69:1a:6f:0b:20:54:da:46:59:ea:b2:19:
78:7d:bf:90:dc:87:16:88:d1:56:a7:82:81:e8:a4:97:c8:0e:
7c:ac:05:5f:b5:44:57:5c:14:bf:ab:7e:57:ad:64:48:20:fb:
03:04:69:4c:fe:91:9d:d8:6b:f8:20:11:d8:51:6a:cb:e6:b2:
96:cf:e2:b5:9e:29:f4:6f:3a:ef:97:1c:81:0d:94:33:ef:40:
6d:e2:83:ec:a9:ce:7b:d9:ab:6d:1d:09:48:c5:f3:72:de:34:
55:56:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:26 2025 by rpki-client