Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json)
Hash identifier: PNnlJ2IvKfvv5bfmy79RHJzJHd9cz8TwWEGiAo8bZcc=
Subject key identifier: A9:93:F0:9F:59:A2:70:82:6E:28:84:13:A9:37:04:1E:D5:37:A2:A1
Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Certificate serial: 0199FCC60403207F80C8B18F98C40C148374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
Manifest number: 0331
Signing time: Sun 19 Oct 2025 14:00:59 +0000
Manifest this update: Sun 19 Oct 2025 14:00:59 +0000
Manifest next update: Mon 20 Oct 2025 14:00:59 +0000
Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: xhvC91zDi54ib1bt5Ebsu6e/G0uds+SD7rZwQhjaWRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:04:03:20:7f:80:c8:b1:8f:98:c4:0c:14:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Validity
Not Before: Oct 19 14:00:59 2025 GMT
Not After : Oct 20 14:00:59 2025 GMT
Subject: CN=a993f09f59a270826e288413a937041ed537a2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:26:c6:6b:a9:50:25:d3:ab:99:40:ca:aa:
fe:72:82:38:0a:25:e0:f5:97:11:6c:30:e5:c0:fb:
fd:f5:b9:cc:da:96:59:47:d0:f6:ff:74:92:e0:b1:
28:b4:80:af:21:47:5b:36:0d:d1:62:96:71:a4:69:
1a:b9:35:d6:67:01:ab:b8:57:a1:2e:98:fe:6f:90:
23:b2:50:6a:21:a8:c2:75:6a:37:55:0d:b3:d5:d1:
fd:98:e4:44:9b:1f:7e:bb:4b:ff:cc:7b:a7:d4:ad:
da:b3:d4:f4:23:4a:b7:74:91:09:a5:7a:8c:50:d0:
d6:57:3b:c5:b0:e6:ff:36:dd:db:33:55:1d:d3:b8:
a1:21:83:84:98:5f:9c:e1:b2:da:5d:58:e7:af:37:
ea:16:f3:27:37:d3:9f:79:07:d4:ac:45:d9:27:ef:
87:ea:07:7c:a2:cb:e5:2b:ef:1c:20:ae:08:28:0b:
66:89:bc:1b:f8:73:15:4c:ed:87:59:d5:2a:55:30:
6a:f1:45:cb:da:5d:5e:2e:95:cf:3a:60:b7:ad:f4:
3a:55:79:82:92:93:f5:4b:f4:30:49:3c:6a:20:2a:
97:97:f1:61:40:aa:ff:36:b9:1c:20:b2:3b:bd:df:
e5:a9:bb:c8:7c:2b:c5:19:47:21:85:24:61:f6:64:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:F0:9F:59:A2:70:82:6E:28:84:13:A9:37:04:1E:D5:37:A2:A1
X509v3 Authority Key Identifier:
keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:46:cd:f4:b3:76:da:8a:7e:b9:ab:e8:46:30:7b:51:1e:4d:
03:fc:ca:f8:3a:64:ce:31:94:9f:fc:f3:1f:b8:bc:24:6a:a3:
13:f8:eb:14:06:38:4d:6d:9f:56:10:62:8d:c1:bc:f8:09:8c:
58:84:61:c5:43:a1:72:a5:b4:a6:b3:08:60:40:7d:93:03:18:
8f:41:0d:81:32:2e:1b:50:c6:ac:50:24:17:b6:8c:0f:a4:2c:
94:19:e2:e1:45:53:bb:5e:82:17:b7:6b:74:bb:34:e3:ac:d0:
c4:24:0b:81:25:3c:5e:76:a3:1f:2c:53:52:51:bd:b8:b2:3d:
db:a8:03:5d:3d:cf:f9:09:e8:77:ee:99:cd:09:78:52:c2:2a:
5c:96:8f:fd:89:dc:ed:ae:09:7d:9f:89:27:f2:7f:0b:45:77:
1e:20:a8:3d:6d:d6:e8:40:d7:c4:0b:cf:ff:46:60:cd:a5:2d:
f5:6d:53:68:eb:0a:f2:24:60:1f:36:cf:6c:14:b6:02:1c:15:
1d:bb:43:de:e6:a9:e3:2b:5b:c1:bc:06:c4:c6:01:42:44:84:
3f:a6:29:e0:d0:ba:e9:c1:c7:91:b3:3f:35:6e:88:fa:8c:3e:
cf:12:a5:5f:18:fe:69:61:7a:be:3e:89:3d:08:df:99:3a:90:
84:34:c2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:14 2025 by rpki-client