Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: CD6TyCXlL8XCYPpuJzzEAlQKdlJEx2MbjDeOHRT0DP4=
Subject key identifier: 20:71:BC:69:08:DE:2D:B7:17:88:40:F9:DD:97:0F:32:36:ED:BA:4B
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 0199FBEAF739E27527B37D9544C05687BE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 0870
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: hZ7qKwomYBBh0FRFjeyUcflhzT62fOmP3QLjF2DivJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f7:39:e2:75:27:b3:7d:95:44:c0:56:87:be:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=2071bc6908de2db7178840f9dd970f3236edba4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:ef:58:fb:ba:21:bf:9f:f7:48:fd:69:b6:
ec:bf:91:b1:66:d3:1b:41:c0:ee:14:da:2d:0a:20:
53:3a:77:54:ad:ec:c4:97:fb:2a:94:7c:81:b3:2b:
38:02:9d:7b:cf:00:6d:c1:e2:ba:7d:09:54:7e:0d:
d2:59:4a:71:a0:2a:53:6c:de:d5:ad:13:0e:4c:89:
e4:a0:36:9d:5e:a5:33:08:c5:d4:ac:24:af:fa:27:
e8:23:8f:d1:4d:61:a7:f7:4e:c7:c6:1a:79:d9:83:
8d:97:a0:44:0c:92:36:87:e3:47:41:04:4c:7c:1e:
37:1c:f6:c8:c4:92:97:cf:05:95:b2:0e:1e:2e:c7:
7c:60:32:4a:96:fc:7f:7a:11:5d:48:87:15:a5:8b:
eb:40:95:10:39:7e:94:2b:2b:8e:c9:3f:c4:0d:cb:
73:61:ef:2b:95:0f:d3:3e:34:67:cd:88:4f:ac:2c:
fa:6e:8a:f9:f2:d8:86:2c:80:95:fa:59:55:94:f0:
b5:df:6d:63:17:5a:50:f1:1b:10:33:ce:ae:38:5a:
30:1e:77:a5:50:03:ea:49:ad:59:30:66:9a:54:66:
7c:3d:a3:01:2c:02:ed:bc:f2:7c:9a:b1:ca:ba:5c:
dd:22:1f:73:47:97:15:f0:a1:d0:e7:a1:df:47:c5:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:BC:69:08:DE:2D:B7:17:88:40:F9:DD:97:0F:32:36:ED:BA:4B
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dd:28:b7:4a:3a:80:88:38:f2:77:dd:ce:c5:44:f4:3d:69:
a9:dd:16:ad:a6:a2:fe:25:d9:8b:03:32:e1:14:af:4b:c9:60:
be:e6:11:6a:bf:fd:c2:d4:2c:8b:37:ec:1c:47:f9:42:af:d6:
52:98:9f:ad:47:83:2b:a0:82:93:15:81:2f:3a:89:69:42:59:
6e:30:b6:7f:8a:de:97:ef:6d:24:f8:05:96:7c:7a:6d:f4:7f:
e4:2e:b5:32:ad:be:6f:82:95:d9:eb:3e:47:4b:a9:bf:ed:47:
29:b6:d0:04:1d:3b:22:0e:68:4a:8c:63:95:d2:0b:9c:ef:98:
e4:8c:a6:68:72:9e:b0:e5:87:be:8b:6b:bd:46:11:88:c1:0d:
ab:85:5e:5a:44:bf:1c:68:73:41:bc:83:f3:56:5b:c4:d3:1a:
b7:62:ba:31:0d:33:58:5f:60:ea:2b:dd:f4:7f:55:c5:38:e3:
d1:2e:e6:9d:64:60:bd:58:0d:2f:ed:13:29:44:ff:23:09:cf:
58:94:66:d4:eb:d8:bb:94:b7:5d:91:f9:5c:33:e8:3a:e2:34:
ab:2e:67:23:d4:c3:36:90:0c:f7:62:6e:02:ae:2c:03:43:6c:
79:d8:d0:53:47:5d:55:3f:c1:b3:4b:5f:eb:27:bb:c3:98:57:
79:d3:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:20 2025 by rpki-client