Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: PJSN8XnXvrAfpuxNsK4XjNACiZLUq8Ok31X9as7ZM40=
Subject key identifier: 22:13:7A:70:00:62:32:E5:4A:4C:BD:31:E1:59:5E:84:A9:23:08:AF
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 0199FB460C5429B9D132081BCBF3F12FBB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0D21
Signing time: Sun 19 Oct 2025 07:01:35 +0000
Manifest this update: Sun 19 Oct 2025 07:01:35 +0000
Manifest next update: Mon 20 Oct 2025 07:01:35 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: jRTf8hP1ejx2CcSDIL0C8NgLSNpbBeqpVZPm1CjjWYE=)
2: U0OBxV0NmzWdhOROB_4XE_nOuxo.roa (hash: R0oHniHcgRLjr+xP295YEa+yjJ7+h87sW92ahFuO7CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0c:54:29:b9:d1:32:08:1b:cb:f3:f1:2f:bb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Oct 19 07:01:35 2025 GMT
Not After : Oct 20 07:01:35 2025 GMT
Subject: CN=22137a70006232e54a4cbd31e1595e84a92308af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:18:fd:62:7b:c7:90:6b:01:c3:f7:8a:95:
62:2e:80:dc:96:53:f9:91:5c:04:5a:8e:ad:27:91:
c2:f9:79:57:f1:7c:95:a1:9d:df:26:79:9b:b1:22:
4c:5d:48:45:0e:d4:4d:30:68:80:68:e2:b7:42:9b:
54:2a:3e:50:09:0b:8e:76:ff:a1:8d:2e:f0:f5:f0:
af:a8:0a:32:4a:82:15:7c:22:0d:a5:d6:c1:8b:d4:
df:f3:f9:3d:bd:be:71:b6:b3:b4:db:7e:f5:d5:5d:
bb:6e:43:01:4c:c2:16:7d:82:a1:2b:7d:bd:03:94:
4e:c1:2d:37:38:df:f2:e0:8d:c5:50:68:d9:e1:ae:
d3:71:8c:cd:4a:d3:44:b8:55:bd:5e:cb:4c:b6:19:
0c:19:4a:24:ea:2f:12:8c:5d:1e:9d:18:4f:59:56:
e6:8d:da:40:de:3c:fd:67:f9:8a:13:28:0e:0c:26:
47:a8:87:e0:ea:5f:b4:33:1c:2f:16:e8:59:9a:d0:
07:81:db:ba:ee:ca:18:e0:c8:d6:9e:f1:4e:ed:0c:
51:3c:d1:c6:12:0e:bf:6d:91:51:89:52:b9:a1:f7:
8a:42:7e:8a:2f:a4:3e:3d:da:66:c3:55:7e:5e:ca:
7c:d6:f0:28:77:8e:c2:f2:9f:bd:7f:f3:1a:87:88:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:7A:70:00:62:32:E5:4A:4C:BD:31:E1:59:5E:84:A9:23:08:AF
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ba:57:46:55:aa:d9:21:14:ee:23:af:e1:d2:6b:ae:99:30:
03:19:b0:f3:d2:c1:39:2a:05:a0:8b:47:79:2d:ef:75:9a:ad:
35:a5:00:de:ab:6f:04:47:9c:78:11:e3:5b:5a:68:90:0d:79:
bb:c8:3e:0f:04:b6:85:78:04:37:32:19:0b:e0:92:1c:45:61:
52:28:55:d3:47:10:49:50:99:a0:7e:83:2b:df:18:30:e6:cf:
ae:1e:cf:ec:41:28:42:45:cf:8e:5a:1c:91:43:91:be:58:16:
51:1f:a5:67:9e:bb:79:c9:a2:04:4f:cf:cc:d9:74:b1:36:93:
63:d1:c7:67:fe:25:76:8e:e9:79:b0:f5:92:5c:22:53:19:51:
ef:07:55:8b:0b:6f:f7:43:d4:10:46:76:e4:33:34:a1:db:4d:
b6:87:41:d2:53:e9:49:74:64:39:c2:fb:61:1b:17:80:54:e7:
a6:01:b6:c3:4c:d1:d7:43:ed:a3:98:c1:50:c9:6b:69:46:fd:
de:ff:52:7c:1b:a6:98:6f:b3:33:c1:c8:5c:a2:b8:b0:24:e2:
e1:4d:4a:9c:aa:d6:d3:74:08:9e:5b:48:a3:80:b2:75:c7:a8:
54:52:48:5f:34:bf:a8:b4:bb:dd:3a:74:66:61:22:19:4e:a8:
af:06:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:46 2025 by rpki-client