Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
File: ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json)
Hash identifier: 13t3ImYJsdT1UScR7NpxQ99wA86W0vrvFcJ3Lf30IuI=
Subject key identifier: B5:20:46:06:AA:08:B4:E3:FF:AA:D3:A5:58:BE:FF:C3:22:AF:36:21
Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
Certificate issuer: /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Certificate serial: 019A72CAA498A01D2684D8CCC13FAD262D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
Manifest number: 076E
Signing time: Tue 11 Nov 2025 12:01:14 +0000
Manifest this update: Tue 11 Nov 2025 12:01:14 +0000
Manifest next update: Wed 12 Nov 2025 12:01:14 +0000
Files and hashes: 1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: eNdtdA4ckGaQnlvTKv3CXPxd4DisPVVvcla7UJeKUsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a4:98:a0:1d:26:84:d8:cc:c1:3f:ad:26:2d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Validity
Not Before: Nov 11 12:01:14 2025 GMT
Not After : Nov 12 12:01:14 2025 GMT
Subject: CN=b5204606aa08b4e3ffaad3a558beffc322af3621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:ba:24:00:32:7d:1e:ba:64:11:d9:95:38:
1f:7b:32:bb:41:88:17:d3:7b:00:70:b0:8f:b2:00:
18:19:f7:66:33:cb:96:91:16:91:fe:3a:b2:8e:f2:
f1:ba:42:26:f1:11:87:2d:ac:fb:ad:a6:54:88:35:
db:0c:30:fe:c4:a7:05:04:b6:43:aa:dd:92:02:2f:
61:3c:8e:7c:be:00:6b:c7:db:89:64:19:4f:0c:ba:
10:15:84:4c:37:d3:8b:65:62:3c:c5:89:c1:80:c4:
d2:df:bb:8f:9f:59:3a:94:c3:01:33:60:af:db:26:
66:d4:df:8b:80:fb:f5:32:30:71:5c:40:a6:45:4f:
b2:93:17:04:77:03:1e:99:f2:a4:56:e0:ac:96:90:
5c:2f:3e:ac:5f:e0:d0:d8:c6:25:e7:bf:72:77:aa:
75:92:08:42:35:31:2f:e3:ee:9b:18:16:a2:45:eb:
59:a8:60:27:a8:b2:eb:0b:3d:1e:7f:b2:5e:01:30:
25:ba:1a:6d:a7:45:de:33:be:23:39:94:20:eb:07:
ad:16:97:0e:7b:9d:00:80:04:e4:a6:7a:fa:dd:7e:
00:02:e0:97:fc:e3:34:e0:98:dd:8c:e1:12:f2:fa:
b7:82:c7:d7:41:0b:50:38:14:02:b0:f2:f5:85:e2:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:20:46:06:AA:08:B4:E3:FF:AA:D3:A5:58:BE:FF:C3:22:AF:36:21
X509v3 Authority Key Identifier:
keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:53:fe:ae:7a:63:1e:63:91:3a:b5:5a:9f:45:bf:f7:16:57:
47:99:33:20:3b:0c:0a:82:cf:cd:16:14:04:48:b8:2c:33:48:
29:c5:68:44:4b:9a:ec:ac:01:29:af:99:f2:ff:7d:94:0c:fb:
13:d1:02:4a:f7:44:5c:66:76:00:1a:cf:af:7b:35:5a:64:54:
6d:70:ec:3e:ab:af:80:8a:dc:1b:e7:4a:6a:7f:54:c9:3e:e4:
b0:7e:eb:27:a5:da:2f:bd:47:79:00:10:73:e7:4c:22:3d:97:
b6:d2:26:5d:18:25:08:54:de:32:00:bb:ef:b6:d6:ac:34:37:
e9:01:d0:bd:d1:9b:c3:61:3d:bb:4b:6c:be:8b:b2:93:2e:03:
27:de:b8:b6:c8:ae:d8:55:34:d1:55:d2:d3:43:0d:9f:ae:07:
5c:85:14:17:4a:11:c9:e4:fa:52:b6:5d:2f:46:4d:d2:d5:4e:
3c:59:0e:67:b3:b7:db:d0:24:2b:48:45:52:00:5e:86:d5:91:
86:4b:21:44:d4:93:fc:80:06:6c:d0:fb:be:f5:2b:9c:98:b5:
9e:b0:53:c9:ef:50:80:64:d2:98:15:3d:04:33:83:0a:d9:66:
b7:f4:7d:7b:70:98:71:29:ec:d6:a7:3d:19:fb:ad:6a:b6:fd:
f4:8e:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:44 2025 by rpki-client