Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: w8o6XPdNMug+0yHZAQVfbJ0aCKOWKQ4adwC/TmgXHWM=
Subject key identifier: A0:26:72:F1:40:E9:C7:A4:DD:48:A5:25:7A:90:77:F0:0B:32:9D:3C
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 0199FEEBF396C6A28222F0D75705928F6FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 1376
Signing time: Mon 20 Oct 2025 00:01:39 +0000
Manifest this update: Mon 20 Oct 2025 00:01:39 +0000
Manifest next update: Tue 21 Oct 2025 00:01:39 +0000
Files and hashes: 1: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: oXdiSzmmXzdZA8MgTJtTbUmhMHnF0N8IYRvAZOQCiuY=)
2: QEhnuw8ud1j9n62qQluLx43WHjQ.roa (hash: 1M0hr4yzSJjpoSUF2lAkNTs362XypkDSGbasmLEH2gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f3:96:c6:a2:82:22:f0:d7:57:05:92:8f:6f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Oct 20 00:01:39 2025 GMT
Not After : Oct 21 00:01:39 2025 GMT
Subject: CN=a02672f140e9c7a4dd48a5257a9077f00b329d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:8f:fa:7f:5a:9f:6f:57:68:b4:1b:a0:ee:
70:83:0f:2e:46:db:4b:8f:14:90:52:b5:ff:46:30:
60:49:21:0c:f4:4c:1b:a9:65:85:3a:8e:a2:e4:a3:
32:4c:17:a9:e9:69:cd:b5:70:82:96:ac:08:f0:74:
ea:e2:46:53:08:b8:84:e3:a7:cd:47:21:aa:31:d7:
59:fb:4e:4f:c5:33:82:84:72:b2:23:73:28:9b:91:
ef:f2:ea:bd:c6:e9:e8:ff:b6:cc:8f:87:e9:93:a9:
b3:17:ed:98:52:05:f8:e0:34:05:5c:e1:2e:65:c6:
0e:47:16:5c:5f:25:70:5f:1f:97:4e:f5:4a:f1:45:
05:40:d9:d6:43:e7:9d:a2:bd:93:18:7b:4c:17:f0:
28:53:a8:85:87:8a:84:86:3c:40:c8:19:42:f1:6c:
37:b0:d5:e5:8b:18:3e:8f:ce:fb:70:91:8b:6c:f9:
d1:5d:87:73:d2:18:8a:a0:e9:82:59:2b:69:7f:51:
e5:ae:cf:81:d6:e8:19:a5:25:d3:2e:8e:5b:68:93:
78:87:3f:31:e7:f5:bd:1f:ab:52:c2:85:31:35:41:
b0:5f:19:ff:cc:d7:cd:eb:7f:bf:30:14:e9:45:8e:
4e:8d:e3:b7:e2:ee:45:8a:6d:b7:a8:3a:fb:2f:f2:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:26:72:F1:40:E9:C7:A4:DD:48:A5:25:7A:90:77:F0:0B:32:9D:3C
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b1:29:dc:6b:af:e8:3a:60:1f:7e:a5:5b:85:ae:55:83:36:
dc:1e:8b:0a:83:61:b9:f9:14:17:b7:e3:5e:87:1a:2e:37:bb:
5d:38:98:bf:c7:0a:73:31:10:fb:af:02:ea:2a:d4:4a:8c:17:
0f:e2:21:48:1f:fe:9a:89:06:32:be:6d:40:ac:92:a9:3a:75:
74:23:6f:25:7e:3f:4f:27:bb:58:00:5f:10:47:fa:c3:6a:c9:
97:37:d5:09:76:97:d4:32:a5:4d:c1:75:f7:48:66:bc:86:37:
74:6b:dc:1a:c9:68:03:e4:19:e2:a6:64:0f:f6:e0:37:d5:60:
a9:ff:a9:6c:74:9e:d3:77:56:f0:06:c0:d7:46:f4:d4:79:3b:
e4:1f:35:04:84:dc:8f:eb:95:cc:79:63:b0:c8:f8:7a:09:12:
b0:5d:33:0d:df:df:28:ab:07:db:6a:dc:dd:72:a0:c7:2a:a9:
7d:c5:78:9c:66:0f:00:ce:f1:d8:98:0c:28:47:5a:18:9c:f2:
cd:d8:84:5a:7c:23:48:1f:1c:6b:5a:6a:ac:a3:ac:3f:76:8f:
00:46:61:80:f6:da:89:b3:36:1b:01:c8:db:29:05:28:e7:b9:
03:18:9d:9b:dd:bd:60:36:b0:78:0f:52:94:fd:07:01:d7:b6:
99:36:dc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:15:42 2025 by rpki-client