Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
File: Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json)
Hash identifier: njz/izHqHaXPTRptPGPcNuJMDRyTq4F2rue8G1jbxSo=
Subject key identifier: C0:F1:87:79:2E:4E:EA:AE:9A:A9:53:8E:83:FC:69:E8:45:A9:A2:BC
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial: 019A299EB2D7C1360DC4ECB17DF0053F1BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
Manifest number: 16F7
Signing time: Tue 28 Oct 2025 07:00:57 +0000
Manifest this update: Tue 28 Oct 2025 07:00:57 +0000
Manifest next update: Wed 29 Oct 2025 07:00:57 +0000
Files and hashes: 1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: FmcOP+HFOPfLlHnV9fbUs794vvzB+ls9M19THgeaJOk=)
2: EX1eqOI5AsdzNwXJw_T2K67SKuY.roa (hash: zTp74P0kNRRvfGdIA3tW3Yag+dPiX+7QsxAnkmFBj8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:b2:d7:c1:36:0d:c4:ec:b1:7d:f0:05:3f:1b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
Validity
Not Before: Oct 28 07:00:57 2025 GMT
Not After : Oct 29 07:00:57 2025 GMT
Subject: CN=c0f187792e4eeaae9aa9538e83fc69e845a9a2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:71:d5:2d:15:67:14:3e:2d:55:a7:92:e4:
db:36:5d:8a:64:cb:41:79:ca:f2:22:5f:3c:f6:65:
8e:5b:72:d0:61:7f:62:9e:5b:9b:ec:56:d9:73:f2:
01:4b:29:19:05:ce:d8:72:5e:16:d2:c8:3d:b5:bc:
98:f0:14:76:1c:95:da:36:35:6d:a0:81:28:9c:7e:
e3:65:a3:02:fe:08:46:6f:aa:d7:8d:b0:ac:22:53:
7b:7e:22:7d:29:e8:1c:57:58:70:91:ca:84:81:20:
77:5c:fc:fc:08:23:bb:ea:94:e7:50:33:44:9b:5e:
e3:aa:63:9d:66:27:32:08:03:7e:18:d0:46:79:a1:
bc:83:0f:9f:a2:de:76:4c:93:a7:49:d7:9c:c9:d4:
bd:23:a5:5a:a4:24:09:ad:29:18:93:c2:15:98:c7:
70:db:d1:e7:e4:09:a1:e3:d6:b5:e2:b1:dc:8e:45:
18:94:26:77:aa:b0:a9:8e:25:47:d8:82:9a:1f:be:
2f:90:d4:91:91:53:e7:09:23:6c:48:a2:71:69:96:
9e:bc:81:7a:4e:30:70:71:c4:48:ab:76:7a:06:86:
96:13:cc:f7:34:9f:eb:24:c2:91:db:91:9b:3a:42:
61:ca:cd:a1:ad:c8:37:e6:23:85:e7:f8:47:3b:bf:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F1:87:79:2E:4E:EA:AE:9A:A9:53:8E:83:FC:69:E8:45:A9:A2:BC
X509v3 Authority Key Identifier:
keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a0:57:9e:a5:ab:71:04:68:cc:af:87:6b:1f:c8:18:40:90:
7c:7b:9e:61:77:68:18:62:bc:1d:5f:32:7c:3b:68:01:f9:51:
9e:21:29:68:55:7d:dc:fd:4c:4c:6f:a6:2f:a1:4f:b0:ce:78:
4c:d5:9f:e0:eb:82:ee:34:4d:32:86:1b:3e:61:c3:68:d5:cc:
db:2f:82:a3:b0:4b:12:21:c8:69:e1:05:2e:6e:68:cd:37:f5:
52:ca:8f:11:d5:c2:27:f6:56:e2:83:0b:4f:b5:52:e1:b0:37:
44:51:93:76:43:8e:55:a0:4f:19:76:c1:3e:07:ab:77:bf:19:
43:a0:7c:7d:f0:3e:79:81:e0:c0:f2:79:07:10:d5:cc:25:8b:
81:bb:a8:67:75:e9:28:6e:8c:ea:8c:5d:48:ac:8b:a6:26:9e:
b1:db:eb:44:08:2a:bb:e9:d6:5c:dc:a7:f1:ba:d4:4a:f5:0f:
a1:02:5c:3f:5c:24:66:52:62:db:12:92:d0:af:c1:d6:90:0f:
fd:0d:32:d4:db:6e:79:e4:ab:1b:ce:5b:ba:02:fc:d2:2b:6e:
70:2c:2c:12:c0:8c:44:d0:3b:9b:e3:81:de:16:2d:af:49:1e:
ae:c4:86:85:65:5a:ff:e4:f2:c1:10:b4:52:d9:84:c8:e5:61:
6e:4a:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:37:03 2025 by rpki-client