Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
File: cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft (raw, json)
Hash identifier: ga6CKhyRcUKEJz2RHn2gdripb8SYnYtcbGMPi6+PdjE=
Subject key identifier: 25:F8:B9:CA:FC:E6:0D:77:63:35:A0:F0:D6:BE:5E:0D:08:7D:4C:FA
Authority key identifier: 70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
Certificate issuer: /CN=709a8efafa785401012c4590da63440a3456d0ce
Certificate serial: 0199FB7CAE337488AABBF11E7FB8EBFA9A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
Manifest number: 049A
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl (hash: Uj/B5+7nChrggy+Z+svixjluSsfI4J84WrwnWIzDAf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ae:33:74:88:aa:bb:f1:1e:7f:b8:eb:fa:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709a8efafa785401012c4590da63440a3456d0ce
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=25f8b9cafce60d776335a0f0d6be5e0d087d4cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:7a:ef:25:00:1d:20:7c:f3:c3:8c:5b:b9:
0b:54:f9:42:95:a9:5f:ca:2e:61:4b:7d:d9:eb:32:
78:0e:98:ac:ec:b9:a7:85:a1:d5:0a:ec:c8:ce:2c:
73:6d:e8:26:7c:a1:ad:52:f7:90:93:0c:91:06:a3:
8e:19:1a:f1:00:4d:05:72:44:1e:66:ed:10:24:bf:
62:c5:5b:93:1f:28:62:8c:b8:8b:f0:86:fb:2e:05:
b3:9b:2a:6f:41:a1:60:be:1b:52:58:1a:e2:68:43:
77:45:4e:f2:5b:9e:6b:92:62:78:b8:b3:28:c5:d9:
fb:81:88:6d:e2:7e:c1:8d:bc:dd:6a:01:9e:6b:72:
d0:a0:96:c1:8d:53:4b:fd:bd:93:26:1f:fa:43:56:
44:38:fc:b8:64:99:52:8b:ac:aa:d0:8e:4c:46:5d:
34:92:ca:b3:dd:fa:38:c5:0d:da:f2:2d:e3:ea:61:
2a:f9:ff:f9:98:db:60:8a:c7:2c:c4:1c:dd:22:a6:
12:fc:c1:d1:16:91:d0:c7:8a:50:b3:93:58:7b:20:
1c:7e:5b:b3:00:d0:09:81:bb:a1:17:32:34:4c:37:
2e:18:f3:fd:e5:f3:19:f1:2b:ff:9d:a0:c6:49:65:
2c:b0:08:cb:20:f6:d2:5b:cb:45:ad:f3:ab:09:7a:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F8:B9:CA:FC:E6:0D:77:63:35:A0:F0:D6:BE:5E:0D:08:7D:4C:FA
X509v3 Authority Key Identifier:
keyid:70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:95:a4:28:16:93:4d:3e:32:25:ac:e0:b4:92:fd:73:d4:b1:
86:f0:62:6b:cb:45:b7:cf:eb:0c:1b:09:e6:83:57:0f:49:5b:
03:f4:c0:b5:62:2b:79:90:fd:53:c7:b0:db:b9:97:77:c9:40:
aa:e2:b4:38:82:c1:e3:c0:cc:52:ff:83:87:12:95:e4:2d:e4:
ac:72:6c:d8:2c:33:40:0b:40:d3:1e:d2:89:d6:47:a4:34:a6:
cf:c1:89:89:b2:a8:41:f2:83:4c:9a:7c:a7:d0:48:a3:43:ff:
dc:fd:29:26:48:0f:5f:2c:03:64:f9:2d:e5:31:9e:33:0e:4f:
b9:53:1f:f1:e2:97:2b:4b:68:11:da:81:a0:c0:33:53:30:b4:
01:10:ed:5d:2a:f1:49:0b:2c:d2:c3:74:d2:71:87:0e:db:7b:
c7:34:d3:09:76:4f:b3:5d:d7:77:c8:43:24:ef:9b:33:b8:e9:
ae:08:e6:5e:6f:96:8d:57:a6:b5:cb:02:c6:92:43:0c:88:27:
63:32:50:31:24:29:6e:d1:90:0b:e8:55:3d:f2:c7:65:3f:c1:
f2:bf:33:29:eb:69:03:6d:cc:d5:03:ff:3e:0a:2b:e4:1f:3b:
c0:6c:d7:9a:84:f2:c4:c5:6f:f9:07:d0:29:ca:05:46:5f:b4:
7a:dd:e4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:11 2025 by rpki-client