
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier: OYioyEwAnfUdffHouLxnAkIlhBKcIs2qa4n1SgbT4YE=
Subject key identifier: 0C:31:45:8D:57:69:AB:6B:A6:C4:3A:67:14:FE:D1:B4:61:CE:96:16
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial: 0198D7063B9245A8F8B003EBA3D573D18E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number: 071B
Signing time: Sat 23 Aug 2025 13:02:46 +0000
Manifest this update: Sat 23 Aug 2025 13:02:46 +0000
Manifest next update: Sun 24 Aug 2025 13:02:46 +0000
Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: K+EcuNhrxGfohS70AIwm9xo2je9DbdVgnVBbpo9DDyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:3b:92:45:a8:f8:b0:03:eb:a3:d5:73:d1:8e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Validity
Not Before: Aug 23 13:02:46 2025 GMT
Not After : Aug 24 13:02:46 2025 GMT
Subject: CN=0c31458d5769ab6ba6c43a6714fed1b461ce9616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:6b:1a:ae:9e:7b:b7:a1:1c:52:56:6d:ba:
dd:32:2d:ad:56:f3:38:86:d9:41:4b:ab:63:b3:f2:
38:46:e1:1c:b0:b0:6b:2d:a7:e1:9c:67:f8:73:04:
b9:23:d8:a8:d9:d7:e5:0c:27:97:f4:06:08:6e:4a:
98:ad:4d:6b:d7:af:2c:e5:45:8c:de:67:ab:68:bd:
20:8d:79:c4:a9:5d:3f:15:9b:de:c0:89:c9:48:ba:
55:79:5d:6e:02:db:d5:0d:86:fb:36:1d:36:fd:8e:
20:75:37:8c:35:9e:f5:24:4f:f2:de:61:02:73:dc:
ae:d0:8c:06:9c:d1:59:98:df:e6:8a:10:fb:f2:13:
62:9b:29:64:0a:a5:d6:69:73:c2:cf:d1:fe:59:ce:
a2:b2:da:91:84:54:8d:79:70:23:e0:38:5a:6b:a6:
a1:9a:18:8e:8b:69:e7:2a:07:e5:2b:9b:a6:b0:e0:
96:fc:ba:ca:c0:81:22:4c:97:50:7d:94:a0:23:1b:
30:06:70:a9:a0:8f:96:5a:f8:0b:1b:4e:85:55:59:
37:6a:05:ba:f5:fe:d2:0a:82:f8:5b:d6:96:7a:07:
78:d8:7a:d9:62:91:3b:7e:33:ec:71:8f:61:51:0a:
71:f9:8a:d2:db:99:e2:b7:c4:fe:4d:00:78:95:bb:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:31:45:8D:57:69:AB:6B:A6:C4:3A:67:14:FE:D1:B4:61:CE:96:16
X509v3 Authority Key Identifier:
keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:3e:29:da:73:dc:78:11:66:17:14:fb:3e:fe:fe:ee:c3:9f:
76:78:95:54:7a:20:32:31:57:70:d6:a8:c9:bd:03:02:bd:d1:
ae:b0:a4:52:4b:39:50:90:61:d6:72:57:42:4a:1b:9d:87:d0:
51:a6:b6:32:88:43:37:ea:62:a2:ee:bc:c8:2e:5f:07:c5:96:
fc:af:43:5e:3d:ec:2c:c1:43:24:a4:af:d9:6a:47:bd:ae:f2:
ff:1f:62:bb:62:3c:c6:3c:d1:42:c9:3b:f8:c1:8f:0c:ce:78:
a2:78:3f:d7:6d:7a:fc:59:bf:e0:fd:e2:68:ec:5a:2a:b6:68:
66:ba:01:fc:87:b7:19:85:fd:d6:63:f0:13:ac:39:64:9d:6d:
c1:4b:5f:52:86:b7:d7:61:52:2c:f4:34:f7:de:a3:5d:0a:8a:
20:dd:8d:d2:8a:67:eb:35:ab:d2:42:1c:18:41:be:dc:92:34:
46:33:cf:c6:82:f7:9d:cb:f8:65:76:b9:69:76:d2:d7:b2:ff:
b3:9a:c2:42:77:1e:20:76:be:fa:40:5c:89:8c:eb:27:fb:43:
e0:04:5d:ed:58:57:93:18:75:40:9d:65:ec:fc:dc:45:2d:fd:
95:a7:a0:79:c4:a7:48:d6:3c:22:0a:e7:ee:a4:c6:23:1a:15:
d2:58:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:16:05 2025 by rpki-client