Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier: X0Zt42EFmTLgNGEBmFWO32HhRc4oiAtDyg8o9CAThkw=
Subject key identifier: 21:33:9B:50:F4:4D:71:7D:E5:62:22:C2:E1:48:76:AD:72:D6:01:25
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial: 0199FBEA96E9F53B819D080EBB63FBD83E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number: 0758
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: ta2D8af7FsU7ceAmuv1gP/TfkjQVK4HcoGFYhFlEMPY=)
2: PveX9WXxCJj9e18L9V5LXcSlf4I.roa (hash: Gc7ehRUF/Atprjxx4oQFsUeoQdkyLlSY7XL+/gL4J0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:96:e9:f5:3b:81:9d:08:0e:bb:63:fb:d8:3e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=21339b50f44d717de56222c2e14876ad72d60125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:e1:d3:98:64:c8:b8:60:5f:fc:95:56:e3:
99:fd:34:d6:73:f7:59:53:e7:92:85:e6:aa:4f:17:
82:e1:f7:df:44:a3:9c:30:b8:24:fa:40:32:ad:8b:
41:7d:3f:e2:3e:e9:61:46:4f:c2:2b:d7:9d:b1:fc:
34:d5:3d:a9:37:2f:81:c0:aa:9c:23:44:af:db:2e:
19:28:94:0c:cf:2e:6f:f0:1f:e4:39:26:fc:b7:7c:
fd:b9:99:7f:bc:02:6b:10:ee:7a:fb:85:36:02:8f:
d6:5b:50:93:a9:10:80:f9:8e:69:dc:8a:90:5c:7d:
03:3a:15:e0:7e:54:b8:b7:d3:17:f8:e2:e9:d2:b6:
ae:6e:0f:7a:5b:e6:75:8e:dc:71:2e:84:01:6e:52:
de:e1:44:1d:f5:71:26:5d:8b:c0:90:fc:23:7b:a0:
52:42:c6:d1:ec:32:83:9e:68:9f:91:bf:eb:45:34:
56:65:3a:6a:5c:43:5d:f6:c8:bf:13:e4:90:00:a4:
98:cf:e4:e8:17:9c:3b:79:d3:ad:8b:2b:2a:6f:9b:
76:71:d5:ba:7e:a3:ee:fa:03:2a:62:1a:db:e9:90:
2d:71:c2:16:41:d0:a7:6f:8e:3c:91:e1:a2:cc:dd:
ee:63:e9:ae:20:d5:7f:ab:b8:fb:83:eb:6d:5a:14:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:33:9B:50:F4:4D:71:7D:E5:62:22:C2:E1:48:76:AD:72:D6:01:25
X509v3 Authority Key Identifier:
keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ea:7d:49:1c:aa:96:2b:6b:62:59:87:e9:ad:5d:de:78:f3:
72:6f:b6:c8:4d:a1:ef:25:78:45:cf:6d:3b:cc:75:f1:3c:62:
57:87:98:73:44:93:12:a1:6d:8c:27:a3:27:32:7a:a1:86:97:
51:49:27:93:81:a2:ba:c1:5e:b8:ed:14:f2:25:b2:be:99:bc:
07:22:df:2f:31:43:f0:0a:6f:34:e0:3f:9d:30:b7:b3:3c:c4:
89:b1:91:ea:a2:f2:4c:ef:5a:4d:3e:63:a2:05:d2:94:92:db:
d9:da:a2:ef:77:bd:9c:02:75:d8:91:34:5a:99:44:60:49:18:
ca:73:5d:05:91:b8:a8:f2:1a:60:0b:d8:1a:9e:97:63:98:d1:
d2:b5:a9:bd:32:f7:c5:3e:af:46:95:c5:ab:e2:fb:ea:50:74:
42:41:0d:f0:0b:59:b1:a9:d2:62:ae:27:36:cb:eb:9e:4e:0f:
57:2a:19:2b:74:b1:94:c8:3b:e6:ee:cc:74:50:3e:2a:7f:02:
f8:54:98:dd:2f:41:99:24:d3:e8:fc:6c:f7:9b:25:2d:1c:c0:
91:25:82:9b:db:c9:ec:b9:4e:8a:ea:61:a4:dd:fa:06:d5:8a:
dd:1c:77:26:94:4b:32:68:45:e2:21:11:02:8f:a4:cf:18:0e:
c3:de:57:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:47 2025 by rpki-client