Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: lKqMm3FUBvtqY6U1S2MGmleHg7ez+v8mGiC0fkxsTEk=
Subject key identifier: 0C:73:B1:F6:BB:85:19:1C:5F:5A:1D:72:AB:67:E4:10:20:D9:13:6C
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 019A7112B626397E38BBBF3101CE1AA7DA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 0B07
Signing time: Tue 11 Nov 2025 04:00:42 +0000
Manifest this update: Tue 11 Nov 2025 04:00:42 +0000
Manifest next update: Wed 12 Nov 2025 04:00:42 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: Jq1A8nR4u4nCN04sXQesw2Kh4nKBbMB+p3pG5/3zUm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b6:26:39:7e:38:bb:bf:31:01:ce:1a:a7:da:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: Nov 11 04:00:42 2025 GMT
Not After : Nov 12 04:00:42 2025 GMT
Subject: CN=0c73b1f6bb85191c5f5a1d72ab67e41020d9136c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:3c:69:f5:c7:4f:4a:56:41:6b:c5:12:1d:
84:84:ad:ce:25:11:cf:e0:07:20:41:da:7c:ac:c0:
63:66:74:7e:f6:2d:8e:0a:4f:92:60:d5:dc:3e:7f:
2d:09:8e:e7:dd:1a:f8:b2:d2:69:20:f2:46:75:08:
b8:d3:a6:58:ef:9b:7c:40:38:56:12:3b:a3:cb:3f:
f9:b8:84:96:fb:35:26:65:18:db:f7:03:ee:64:d3:
08:c0:8d:4e:cc:0b:a5:a7:39:a4:a4:38:0f:1c:83:
71:32:4d:c8:4f:bd:e5:2c:82:0b:85:2f:ed:69:76:
93:5b:eb:99:a3:1e:d4:69:bb:18:64:a2:11:2d:b0:
97:05:05:a2:c0:01:97:1b:cc:93:32:f8:3a:d4:dd:
50:c2:9b:bb:78:78:ed:ad:78:26:f7:d0:26:26:19:
70:ef:48:e6:8d:24:91:80:06:60:60:74:d3:ec:50:
62:dc:ce:3b:e1:0e:e2:56:d3:08:d5:b5:ab:32:7c:
e5:b6:a5:a4:5e:83:f1:c3:c9:cf:e6:f7:d3:eb:87:
53:0e:e2:24:95:af:c8:fd:9e:7d:5b:dc:0d:3b:7a:
c4:19:4d:25:58:88:33:b4:e4:b9:7d:62:34:60:ee:
08:1a:cd:eb:70:49:c1:20:93:9d:f4:3d:29:f6:a6:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:B1:F6:BB:85:19:1C:5F:5A:1D:72:AB:67:E4:10:20:D9:13:6C
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:fa:c8:f4:d6:fd:1d:06:f3:d8:36:0f:ab:f6:45:c2:5f:44:
08:d8:54:e7:e5:09:37:28:cd:73:91:08:a6:77:c9:73:f3:59:
3d:f6:4b:87:01:34:1b:2a:cf:51:e5:5f:ce:f0:7d:73:20:40:
ea:f7:ed:62:fb:8b:90:df:02:0c:e2:f3:4e:9d:cf:86:04:7a:
c8:d4:f3:19:38:e2:fc:7b:a8:08:df:68:98:c6:89:14:28:c8:
c4:16:af:fb:3a:a9:f8:3c:6c:0d:f4:5b:6e:f4:ad:0e:2c:e6:
bf:e9:75:ae:80:37:53:78:5d:30:54:64:d4:7b:05:5f:f5:96:
f5:b3:5a:7e:94:7a:42:3d:ea:a7:aa:8e:9b:27:53:79:f3:4d:
ed:e2:1e:69:10:eb:aa:56:c1:33:93:ad:7c:0b:45:f5:4c:59:
1d:a3:4f:88:27:77:73:53:35:82:14:23:e0:4b:28:e5:da:77:
49:85:97:da:04:f1:00:0f:1d:d5:87:c1:d5:6a:46:3a:e7:08:
94:80:50:6d:8b:d0:e7:17:c1:91:35:f9:3a:62:a8:57:c8:9c:
f9:2e:6f:60:50:97:85:e0:9f:b8:9e:8f:ee:2d:98:f6:9e:59:
b0:e8:4b:af:b7:a7:96:ad:7e:b6:f8:1b:78:78:a8:f8:d6:c7:
97:df:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:39 2025 by rpki-client