Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: 2Be8xvaaTMlt11VsjIDZgYyR5+Ed6Dzh+susrExwuK0=
Subject key identifier: A7:A9:C4:E7:54:36:DF:4B:06:FA:36:55:97:B8:55:2A:92:B1:70:F1
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 019A71B8DCE8B93A0AAFB8AC75D42136CBC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 0649
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: QD23qjQT/sgrWer4oUbY2jIyuKqRYkH6JNUGFQ8Gj5Q=)
2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:dc:e8:b9:3a:0a:af:b8:ac:75:d4:21:36:cb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=a7a9c4e75436df4b06fa365597b8552a92b170f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:72:6e:b4:89:47:d3:ea:51:3b:e4:80:c4:
dd:9c:7e:f4:49:ae:0a:11:d5:48:a6:b5:78:8f:15:
3b:03:f4:0a:1d:0d:70:fc:fb:a2:67:55:73:2e:f3:
a8:14:8b:48:54:1e:32:5d:bc:79:08:af:ad:9c:44:
c7:2b:cb:88:b3:5d:ad:c4:f8:09:2d:79:1e:3a:bc:
ab:91:a7:9c:99:62:8e:b4:74:01:d2:62:bf:83:4d:
04:e7:9a:4f:aa:d5:54:52:57:38:ba:d1:03:be:e1:
b9:f8:65:59:e5:72:97:6a:c2:f1:63:6e:e1:35:fb:
59:f5:16:a7:87:fa:59:b8:3c:1d:ae:34:63:40:55:
d3:92:ee:8c:53:8d:80:d5:6b:c0:74:eb:f3:4f:05:
49:fe:97:f4:b7:ff:ac:ef:5a:be:28:68:33:1e:fb:
f2:83:88:ef:22:a5:6f:7c:af:3d:1d:4d:f7:0a:7c:
92:0d:8f:96:4e:97:76:9b:27:ba:4c:69:42:13:be:
b4:3d:96:f8:39:5b:82:e9:f7:22:19:48:bf:80:13:
60:d0:3d:6e:3f:71:1c:ac:13:cf:1a:61:d3:bf:0b:
1f:38:a6:7c:46:1f:f0:67:b9:a5:40:7d:e8:44:4b:
82:10:87:df:03:26:49:25:3b:b1:0d:33:f3:c0:05:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A9:C4:E7:54:36:DF:4B:06:FA:36:55:97:B8:55:2A:92:B1:70:F1
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:11:bd:6e:d4:d3:4b:22:cf:87:11:be:43:f0:c6:2e:f6:86:
e7:44:ee:a7:5b:68:46:79:9c:6f:c1:15:6f:04:1b:dd:17:97:
6d:c8:63:20:dd:96:5e:f6:77:6a:28:b4:18:06:77:e1:3a:5b:
48:60:77:21:ed:f0:df:25:70:f3:d3:b7:e5:fd:0f:d1:1e:8e:
ea:9b:e0:d1:da:e1:7b:91:9b:6b:ca:18:66:a1:6c:33:f5:f8:
85:55:4f:02:bd:56:4d:27:c8:e2:1a:88:3f:0a:4a:26:75:b7:
f9:b9:af:9b:a6:de:2c:a4:26:97:ec:35:59:19:42:a5:0d:55:
78:48:6a:56:c4:3a:10:95:f1:f5:78:55:e6:2d:7f:0a:69:cc:
69:c1:e9:0a:c3:52:0c:8c:5f:5a:a0:ba:de:00:17:10:81:3f:
6a:23:7b:40:d9:c8:2d:46:d2:1b:d2:69:cb:c3:6b:cb:17:26:
9e:96:23:11:08:d0:2f:0b:ec:86:78:ac:cc:a0:07:6d:b5:53:
12:a9:92:24:81:ca:29:dc:b1:e5:b2:ee:e9:57:d8:a6:fd:b1:
4b:3e:17:fa:a9:32:f3:12:a6:54:c5:db:be:8e:ea:9f:84:2f:
73:b7:d2:82:7f:63:d3:2d:6c:b1:7c:74:f7:7e:b7:11:4b:36:
51:87:e9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:54 2025 by rpki-client