Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
File: CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json)
Hash identifier: exgGS1WxuWt8b8F3b6UCAKJql8Z6jJktqJ+RMt6hHAk=
Subject key identifier: 2B:EF:57:07:3C:3A:CD:05:41:B3:D6:D6:57:3D:3A:C5:98:A9:55:98
Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
Certificate issuer: /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Certificate serial: 0199FC58ED558962A3748C6E2FC392F53F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
Manifest number: 0867
Signing time: Sun 19 Oct 2025 12:01:50 +0000
Manifest this update: Sun 19 Oct 2025 12:01:50 +0000
Manifest next update: Mon 20 Oct 2025 12:01:50 +0000
Files and hashes: 1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: QQzMroCEHpKb3Ie04WM5+G5zcIHG/ZbMajdgp3cScfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ed:55:89:62:a3:74:8c:6e:2f:c3:92:f5:3f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Validity
Not Before: Oct 19 12:01:50 2025 GMT
Not After : Oct 20 12:01:50 2025 GMT
Subject: CN=2bef57073c3acd0541b3d6d6573d3ac598a95598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e9:87:e6:ab:14:94:c9:e8:ec:23:52:0a:e2:
27:7b:2d:0d:4e:e7:ec:aa:6f:fa:8a:c0:6b:69:cd:
19:7f:d6:cc:5f:d3:55:df:d6:19:85:02:d8:83:5d:
db:a7:b0:f5:e0:10:28:c9:79:fd:eb:2a:01:55:23:
0f:50:d5:bb:58:74:fe:79:d6:80:e4:ef:53:77:ca:
fd:e0:56:a6:19:17:aa:50:36:7a:56:97:a1:6f:c5:
7d:95:00:7a:bf:02:a5:cf:46:0a:29:d2:61:d9:05:
80:0f:b4:5e:fe:20:d9:8a:c4:ba:a4:59:22:fd:f1:
33:81:d9:21:9b:d7:dd:66:12:e2:6a:6b:cd:16:53:
48:97:10:eb:ac:15:11:6a:45:fa:a3:df:2d:48:c6:
f0:02:0c:bf:e9:e6:24:07:cd:3a:31:c9:ff:a0:01:
ae:87:51:3c:1c:39:7d:5b:ce:47:76:4e:14:2d:cd:
61:d0:46:96:df:65:bb:5c:37:7b:7e:53:82:f5:a0:
52:16:e7:28:8b:e0:c0:de:cc:7a:c6:93:03:80:c5:
45:00:81:87:9e:18:1f:b8:83:5f:c4:71:23:c9:3f:
29:7e:05:da:11:49:ab:6c:97:86:b2:17:68:48:88:
e9:43:eb:e0:ce:d7:d9:3b:bd:68:9d:7b:0d:b2:d2:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EF:57:07:3C:3A:CD:05:41:B3:D6:D6:57:3D:3A:C5:98:A9:55:98
X509v3 Authority Key Identifier:
keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ec:4a:67:35:8e:af:52:cc:7d:ac:35:92:9a:22:80:34:10:
b9:fe:1e:73:09:d3:b0:c0:25:b7:a7:c0:d9:7b:63:a4:28:17:
00:f1:a6:5a:0b:4e:62:81:f7:64:31:76:6c:12:7f:5c:49:57:
43:e2:84:01:bb:b6:76:19:1f:00:d4:91:2e:48:e0:c8:38:c6:
f7:dc:dc:c2:24:26:1a:2e:62:07:01:3a:20:63:ea:ea:ec:75:
ff:02:c8:ff:00:da:ef:de:26:c7:8c:fa:a5:c7:45:3d:7c:5f:
46:20:7a:c2:bf:57:81:77:2a:4b:15:ed:41:09:f9:c4:62:56:
3c:79:75:89:da:54:78:53:21:ed:ae:7a:85:92:90:58:c5:2d:
6f:3f:cd:d8:d2:be:15:76:3d:39:ca:27:3d:84:2f:3d:e4:7e:
b2:89:12:51:fb:60:91:92:49:ae:19:93:1a:94:1d:b3:31:7a:
f6:44:78:30:d6:47:16:11:ef:2a:92:75:11:25:b2:0a:5e:fa:
0e:56:f4:96:55:e1:c9:5d:69:fd:cd:ed:8f:22:ff:eb:6c:ba:
0e:51:33:41:33:fa:dd:e2:de:4a:b4:06:07:96:1d:2f:37:1a:
84:47:67:82:ad:f5:eb:31:53:01:3e:10:c8:5f:c6:fb:ca:9d:
6f:21:3b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:36:16 2025 by rpki-client