Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: Ea8awbVxKtZxPwTAvYz0AjJ45OHjmFpnf75n7x6mMSs=
Subject key identifier: 4E:9E:0D:14:92:D4:35:29:11:2D:62:A1:54:02:B5:81:A7:A2:C2:2C
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 019A006C79696A90E253718B7EA38792C44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 07:01:40 +0000
Manifest this update: Mon 20 Oct 2025 07:01:40 +0000
Manifest next update: Tue 21 Oct 2025 07:01:40 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: vZ/6IzyUdSPs/7WThT+u0a/7wnYhjn+xCHV0+h+a3EM=)
2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:79:69:6a:90:e2:53:71:8b:7e:a3:87:92:c4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Oct 20 07:01:40 2025 GMT
Not After : Oct 21 07:01:40 2025 GMT
Subject: CN=4e9e0d1492d43529112d62a15402b581a7a2c22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:0b:ce:a1:fc:03:61:3a:ef:1b:4b:93:fb:
8f:84:ae:d8:21:a1:e4:51:5b:43:65:9f:2f:b1:31:
31:94:56:a5:9d:2d:c3:11:2f:8d:c6:80:03:64:40:
d4:12:73:fe:aa:fa:a9:20:74:cd:84:f8:b9:3a:18:
c7:fe:37:fd:79:70:98:07:b7:31:23:6a:f6:fc:43:
78:22:3f:1d:f2:0e:75:bb:4d:33:51:29:b2:e4:8c:
94:6d:d1:27:de:e4:01:99:8e:87:87:9b:12:1f:75:
1f:2f:1e:f7:db:9f:fe:d3:4e:7b:8b:0c:5c:f5:8e:
39:1e:19:5b:3b:43:49:08:94:d2:ec:c4:ba:6b:6e:
6d:43:df:64:77:21:0c:6d:e3:69:a9:4d:a6:8f:c5:
3e:c2:0b:ff:46:b9:98:82:1e:5d:3c:7b:5e:48:1a:
cd:b3:d0:ed:45:69:93:10:66:ff:84:46:91:3b:a4:
2f:2a:c0:a4:eb:7d:c3:9e:74:0c:81:af:8a:a6:74:
08:db:e0:1a:64:c9:98:22:de:9b:01:f6:f6:2e:00:
66:0b:eb:59:a6:57:06:ad:cc:4a:f3:c8:e7:ae:33:
ad:8e:0a:82:a7:90:63:fe:96:e0:15:e8:b6:b6:94:
1a:80:da:96:54:86:e0:18:d8:9d:24:4d:25:e4:55:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9E:0D:14:92:D4:35:29:11:2D:62:A1:54:02:B5:81:A7:A2:C2:2C
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2a:71:22:dc:48:c4:be:6e:34:87:76:32:88:d6:63:d3:1d:
29:27:2b:09:ce:e2:db:1b:2f:bf:df:66:70:ff:ef:27:c9:92:
57:7d:31:bc:0d:ca:4e:11:60:fa:4f:ae:65:9c:34:29:b5:43:
db:8d:69:43:69:f8:d0:03:ed:de:1a:9c:07:5e:97:2e:91:2b:
ec:00:9e:fd:07:38:2c:5c:17:b8:05:4c:01:9a:b7:6a:b6:73:
6b:e2:aa:8b:2b:63:e0:16:95:a3:34:37:96:2b:57:39:2d:89:
5d:cf:bb:d9:e3:16:49:37:7a:6a:5f:1d:75:a3:d6:52:b9:b5:
d4:8c:71:6d:e2:d5:c7:6c:b9:ec:48:62:08:c6:be:09:a4:87:
ef:ed:06:bd:84:84:c6:0c:5a:95:d5:09:d4:cd:53:af:69:55:
ac:bb:a6:f7:6e:92:cc:6c:be:c0:44:21:75:9d:4c:6d:1d:8a:
77:ee:66:44:00:7e:45:40:a3:a2:3d:cf:8b:bd:4b:76:f3:5b:
9f:65:7e:40:ed:a6:56:b3:f6:91:1e:b3:66:3a:89:a9:bf:7e:
c1:34:55:18:98:79:6c:e5:02:a5:35:58:c8:76:d9:6d:e2:f5:
93:d0:18:bd:a0:f5:90:76:58:ed:9e:54:bf:65:60:d4:0e:23:
a8:ed:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:10:49 2025 by rpki-client