Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: dqq2Mipc+wiY0eBJXtX8orkReB+vjfb6SPnnH4XSPto=
Subject key identifier: 86:D0:1C:F2:E9:8D:17:F4:43:D7:AE:31:F8:85:05:04:A2:3C:DE:07
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 019A71B832CA1B5358EF1567EB5FB8A85DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0B5C
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: qVvIQcpFc1+jBqRX+Dj8SvMCWpQ3hLQ6htYgBl9MN1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:32:ca:1b:53:58:ef:15:67:eb:5f:b8:a8:5d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=86d01cf2e98d17f443d7ae31f8850504a23cde07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:dc:66:78:5d:04:11:fe:66:c0:23:a3:a7:
b6:0c:00:80:9f:00:8b:de:a6:89:45:83:df:f9:3f:
db:3e:7b:53:30:db:34:cb:ad:38:23:b5:96:59:1f:
52:87:a2:3d:28:3c:15:17:60:53:eb:27:64:a1:78:
c7:5f:38:7d:30:b8:d0:68:64:29:56:8e:e3:fd:25:
0d:a9:e3:ea:c7:1c:81:6a:85:27:8e:79:b2:60:19:
04:f0:ae:30:7e:74:34:dc:3f:f2:5b:2e:0e:9a:18:
bd:a0:32:4a:08:29:f8:34:9b:c0:43:cc:bc:1d:88:
d0:0e:ef:73:95:4b:e0:ff:28:3a:39:63:d3:94:3b:
63:e9:e1:b2:07:98:0e:59:96:54:ab:c7:f4:ae:5b:
19:81:cc:ae:38:da:68:85:7b:6b:04:3d:62:ad:a7:
59:79:2b:5f:1f:87:60:6c:5f:18:6c:8e:f2:34:9c:
40:de:36:3c:cb:fa:65:15:a1:62:92:3a:9e:0e:46:
29:36:c5:6c:69:4d:66:4d:d7:fe:ad:8d:e3:62:2d:
bd:c9:f1:52:4e:6d:46:06:b7:87:ff:c6:00:c0:aa:
df:11:07:de:bc:ef:dd:13:32:e4:f4:b5:17:c8:4e:
a6:f6:74:b3:17:8b:fc:b9:37:16:b7:92:3c:0c:13:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:1C:F2:E9:8D:17:F4:43:D7:AE:31:F8:85:05:04:A2:3C:DE:07
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:89:b5:d6:35:ef:ca:2a:14:92:9f:ac:ea:b5:cb:e1:e2:c2:
8c:dd:fd:78:67:fe:74:72:5d:c4:1d:19:d2:5b:0b:b2:58:56:
1b:19:7e:62:68:1c:35:1f:ee:82:6a:06:2c:e6:fa:31:b5:18:
1d:94:af:e3:ae:d7:fc:c0:3e:67:a1:63:72:08:63:9e:75:9f:
74:7c:7b:cb:4a:81:4e:16:12:61:09:4b:b0:fa:bb:33:a1:13:
c6:69:d1:53:37:b7:25:54:69:25:52:ad:26:ea:84:5b:4f:74:
f4:d9:9c:07:0e:9c:d1:5f:be:17:ca:3c:72:01:d1:d6:bc:2d:
5d:1d:d6:00:fc:e9:16:53:17:03:9a:61:9e:37:e4:ec:b3:12:
15:ae:59:3e:5f:e2:bb:49:21:50:4d:4c:57:a3:dd:76:2e:d2:
c1:d1:22:40:58:6e:2c:64:24:c5:38:c1:8a:60:95:f7:d7:22:
e3:97:d6:49:48:8d:f4:b2:21:e2:7a:a5:1a:ae:7a:8f:c4:25:
dd:31:0b:b6:f3:28:9a:42:c7:86:2f:09:27:65:66:74:d8:8a:
72:1c:df:ab:37:54:b8:0d:a8:55:3e:0d:23:dc:c7:4f:88:29:
7e:38:6e:16:0c:d6:43:a1:51:5c:4e:22:da:07:c4:b2:41:0f:
aa:bf:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:26 2025 by rpki-client