Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
File: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json)
Hash identifier: Ullf60soE7b2mFoog/X+MEbxq9E+yWQhdTz21g9l2LE=
Subject key identifier: AD:73:C9:A4:B6:7F:D8:E3:45:11:3D:6B:8E:41:82:12:B6:E3:FF:F9
Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Certificate issuer: /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Certificate serial: 019A70A4DD92987146DCDB690E468837F67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
Manifest number: 0BD3
Signing time: Tue 11 Nov 2025 02:00:44 +0000
Manifest this update: Tue 11 Nov 2025 02:00:44 +0000
Manifest next update: Wed 12 Nov 2025 02:00:44 +0000
Files and hashes: 1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: f7GjZLkJC/s1Rwpc4JR0a1mgEvZ9riH/PSJjYpGWHRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:dd:92:98:71:46:dc:db:69:0e:46:88:37:f6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Validity
Not Before: Nov 11 02:00:44 2025 GMT
Not After : Nov 12 02:00:44 2025 GMT
Subject: CN=ad73c9a4b67fd8e345113d6b8e418212b6e3fff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:7c:dc:e2:80:82:96:12:42:b8:3e:7f:75:
c2:f6:df:4e:ff:fa:2d:18:83:eb:6f:46:ae:6a:fc:
3c:70:50:08:6f:7b:01:16:82:3f:29:63:83:ae:44:
ff:7b:15:60:7b:56:5e:fd:af:42:26:66:89:47:96:
0a:6a:12:6c:f2:6e:30:d0:81:3a:db:c7:60:0a:59:
7a:77:2a:dc:82:7d:ef:15:1e:81:63:0d:df:5c:e5:
b1:bc:2e:62:23:2a:00:8f:bb:c7:8c:21:f7:b4:d0:
f2:51:de:5b:26:db:38:24:b5:aa:0f:73:c2:11:15:
1d:35:a5:f1:b0:c5:9d:01:38:5f:e4:e5:b2:b8:a0:
6f:ac:c5:b1:b5:57:3b:61:99:4f:e9:43:74:c9:c4:
d0:3f:b8:38:4a:39:2d:6d:6f:59:fe:7b:a5:d3:a7:
0f:02:af:7e:8d:1e:1a:d2:db:b6:0d:be:59:24:1d:
60:99:3b:38:01:1a:b6:a7:ae:68:bb:1b:dd:8c:81:
fe:b2:5d:ff:20:ba:76:0e:af:4c:bc:14:33:6b:af:
9d:5e:58:46:cb:c8:d9:5c:b2:6e:a9:de:c1:6d:c6:
8d:82:c7:ce:28:f9:6f:23:70:2f:43:53:47:42:6d:
de:1e:6f:70:2c:4e:a5:e1:82:4f:68:97:7d:eb:3d:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:73:C9:A4:B6:7F:D8:E3:45:11:3D:6B:8E:41:82:12:B6:E3:FF:F9
X509v3 Authority Key Identifier:
keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8d:1c:7a:7f:db:e8:00:0c:87:b2:42:bc:b2:9f:52:b9:af:
0e:bc:af:14:1a:25:ed:b2:2a:83:ad:b4:59:f6:b7:fa:50:69:
74:89:74:7a:00:87:30:e6:6e:f2:f3:f6:05:6b:92:9d:99:31:
96:7c:5a:81:62:2b:d3:69:71:50:b2:8b:0e:99:78:98:10:ec:
c6:13:de:b9:31:23:1c:35:cc:4c:c1:4f:cf:a9:d9:9a:e1:66:
74:b7:30:de:6e:00:09:e9:66:63:5d:f3:5b:bd:c2:09:df:01:
d8:50:ca:60:d3:78:0a:d1:8f:06:f0:7b:22:1a:26:45:e7:da:
07:7c:37:9b:50:7f:bd:4f:b2:fc:6c:36:93:bb:0d:c1:ac:5d:
69:f9:f2:bc:2d:e2:5e:aa:21:9d:56:29:c3:fe:5e:01:c5:e4:
95:16:ef:74:bc:57:a2:64:0c:2e:06:b1:3a:42:a4:78:ab:27:
0d:30:db:3b:34:b4:98:5d:33:46:e1:c6:05:95:4e:9a:60:e2:
68:e1:ff:55:7a:cf:b4:a3:1d:7b:57:30:eb:9a:44:d8:1b:8b:
a4:7e:5f:4f:d3:5e:0a:5a:d1:50:7b:3a:ad:db:95:c2:1a:d8:
91:52:0a:97:88:24:33:6f:3c:26:f6:78:c7:9f:a4:7c:1d:6c:
bc:79:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:07 2025 by rpki-client