Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
File: cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json)
Hash identifier: wGuFglEks5tTEAjB5cx6dUy+PutLXS6pOsMkbF9KI50=
Subject key identifier: A1:03:2A:98:D5:5E:58:30:C3:9F:F0:F6:9C:64:01:AD:1A:C5:00:82
Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
Certificate issuer: /CN=70379a6713e79e598d9feaa66dca169188e0218d
Certificate serial: 019A71130DFA6D34D3EF56E510EB0F704B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
Manifest number: 0F23
Signing time: Tue 11 Nov 2025 04:01:05 +0000
Manifest this update: Tue 11 Nov 2025 04:01:05 +0000
Manifest next update: Wed 12 Nov 2025 04:01:05 +0000
Files and hashes: 1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: zqv2x4rTYEuxrECkmcHj4berRLfaPYF82W8xmy5LK1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0d:fa:6d:34:d3:ef:56:e5:10:eb:0f:70:4b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d
Validity
Not Before: Nov 11 04:01:05 2025 GMT
Not After : Nov 12 04:01:05 2025 GMT
Subject: CN=a1032a98d55e5830c39ff0f69c6401ad1ac50082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:34:a8:fa:b5:2e:b5:eb:9f:70:99:64:6d:
ec:2a:e3:6c:cf:15:4b:2c:88:eb:b5:fc:cf:a6:2a:
14:91:2d:80:d9:3b:4f:2d:c4:f3:b4:2d:8d:f9:a5:
10:63:11:f2:53:3a:96:68:f2:08:cb:17:ac:16:99:
2a:15:2f:1a:8a:b1:74:0b:5f:6e:cb:8d:80:b9:f4:
71:2d:3d:4c:4a:5a:a0:4a:f1:4e:4e:91:4c:d0:c3:
d5:be:b8:a0:b8:3a:ed:cc:a3:18:3e:e7:99:18:e3:
26:ce:74:ea:d5:0a:94:e3:c2:47:95:3f:31:22:9a:
a4:fc:db:f5:fb:d1:ec:3e:f5:39:c4:e5:71:28:fa:
26:52:1f:7f:ca:70:88:48:74:c8:e8:79:f7:21:af:
31:32:f8:36:7a:32:0d:03:34:62:17:7b:56:f2:7c:
d4:91:01:f8:a2:85:b5:8f:e2:e1:d1:bf:e1:67:ed:
69:4c:a8:5d:6d:ea:dc:06:48:44:1b:e9:65:09:21:
50:1f:ec:82:f3:65:67:ee:ef:11:43:fc:93:48:ec:
82:71:78:56:b4:cc:26:24:52:89:55:82:c6:82:a3:
24:a2:e1:bf:88:a3:62:21:0d:66:04:38:c7:d8:ad:
c2:20:cb:58:2e:f9:8e:14:58:83:ce:40:00:c4:ca:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:2A:98:D5:5E:58:30:C3:9F:F0:F6:9C:64:01:AD:1A:C5:00:82
X509v3 Authority Key Identifier:
keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:21:41:c6:6b:a9:bf:57:cd:85:aa:2c:13:c4:01:38:e4:c2:
5a:d8:34:c2:7c:31:ca:2d:e6:08:6e:f0:85:ae:01:07:fe:e0:
d2:0b:2f:85:6a:2c:6f:53:9a:33:6b:43:d9:4a:16:53:47:8c:
f8:6b:16:70:d2:b1:f8:2e:43:b1:1f:4d:9f:89:99:09:84:bc:
60:a7:4e:56:f8:6e:6f:1c:9f:ef:c1:c8:d3:57:46:14:f9:4f:
a1:c4:f9:2e:b9:d5:01:ad:11:d5:f3:ff:29:d3:ea:ed:d1:2f:
79:70:3d:a0:dc:37:e9:aa:2b:d5:6e:e7:b2:53:96:47:82:96:
5b:2c:2b:6c:08:d2:5a:64:bf:31:70:7f:e2:01:83:77:7a:d6:
f3:0c:55:a7:eb:21:e1:6b:df:6a:3e:b9:67:cf:ab:2d:d4:e7:
da:2e:54:d0:d6:5c:75:2b:d0:f1:e0:ce:6a:9e:08:cb:fc:3a:
17:92:d2:0e:40:1d:6a:a7:0e:cb:a7:c1:fe:62:7c:86:4c:15:
19:7f:60:f9:d0:7b:92:66:67:10:18:3d:08:85:46:95:27:cc:
25:1d:8a:d2:fe:27:d9:67:ab:ea:50:01:d9:a8:f9:47:e0:84:
98:b3:09:52:c8:7d:43:ac:06:40:20:a7:74:12:94:98:93:79:
84:ef:37:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:08 2025 by rpki-client