Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: 8hv2MJPBMg1qCmPH4IJGoqVpphcKYajgQxECFXuCXao=
Subject key identifier: 9C:EA:FA:66:49:38:C6:0C:D9:A4:DB:65:B4:72:B6:A1:7F:FF:E0:81
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 019A18E2C020C71AD00254A760D8D236A2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 0332
Signing time: Sat 25 Oct 2025 01:01:44 +0000
Manifest this update: Sat 25 Oct 2025 01:01:44 +0000
Manifest next update: Sun 26 Oct 2025 01:01:44 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: B5FcfAQCl4HeEwQpZcK1jVKstdYqxahlAB8uP59I2lM=)
2: Dx843zJfB2RQ1tXw_6blL8VsbDw.roa (hash: Wk3Kg6R2i9DDoDfgR64ME8g+dDPZ0Euba0eJlCA1nOk=)
3: Eqq1hxnObNRaQRziaWuuBD1-O8o.roa (hash: jq17ziTa438haUw4I3TgAJRiuoEa3mnBNSNTDtlyTb8=)
4: baeYMpQTf1prfSgvYpiSJyiA86o.roa (hash: K1aC88mjEbBLbQ7U4e/CSJaIjpQ51Z65KxdLka02ark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e2:c0:20:c7:1a:d0:02:54:a7:60:d8:d2:36:a2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Oct 25 01:01:44 2025 GMT
Not After : Oct 26 01:01:44 2025 GMT
Subject: CN=9ceafa664938c60cd9a4db65b472b6a17fffe081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:a0:91:fc:1a:99:b5:d7:73:93:7d:b9:46:
57:03:f5:d4:d1:e6:04:3b:44:f5:4a:a5:8e:90:2d:
5e:ca:c7:6b:9d:a8:d0:c0:7a:1a:c1:36:13:29:76:
16:d3:45:3f:aa:04:a8:c7:3c:64:7a:55:52:c2:7a:
d4:f9:6a:18:ce:37:3d:7a:72:6e:58:c8:ba:94:19:
d4:bd:bc:e6:29:51:3f:cb:7e:2c:89:33:9d:dc:a7:
3c:bf:d5:9b:0c:83:dc:30:80:f4:0b:36:d1:cc:ea:
69:c7:69:27:84:dc:e7:32:64:6d:51:12:c9:7d:bd:
c3:fb:f5:57:40:08:ff:3b:20:c5:7a:2f:d3:f4:29:
61:f6:c0:fe:3a:b4:be:aa:3c:10:8a:f6:e1:3d:89:
c7:79:86:2e:0c:65:dc:f7:85:d5:c0:ca:0b:e9:52:
8a:4c:6e:50:a9:21:45:54:21:90:12:80:09:d9:df:
d8:43:fc:33:ba:67:16:89:4b:a0:51:19:7e:95:e8:
dc:f1:e7:15:36:57:32:0d:5a:47:37:2b:c6:a6:b2:
c0:7f:32:7f:cc:95:f1:19:d8:dd:76:60:de:62:db:
52:bc:62:bf:03:ef:a3:f9:96:37:87:dd:da:20:04:
de:09:57:9e:e7:b2:e9:9d:57:08:65:0b:97:9c:d6:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:FA:66:49:38:C6:0C:D9:A4:DB:65:B4:72:B6:A1:7F:FF:E0:81
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bf:bf:80:37:05:aa:75:d0:2d:c3:73:d3:e3:38:39:7d:5e:
e9:7a:ea:dc:bf:4d:77:64:53:ae:33:8e:0c:e7:c4:d7:60:59:
78:b3:c4:be:7d:16:23:14:37:58:06:17:fa:bf:4a:0e:4c:27:
0a:db:71:3a:56:0b:13:76:38:4c:62:1a:67:9d:78:39:b9:7a:
ff:44:fc:bb:59:0b:3d:d8:5c:d6:ab:1d:da:de:a3:a7:94:27:
30:90:b4:d6:71:3c:6e:c6:19:f0:79:0f:f5:93:54:cc:64:a8:
d2:e2:d0:47:01:82:18:c5:ca:81:a9:7d:2f:e2:c2:21:b7:20:
a7:16:d8:1a:b4:fb:3b:c3:ac:5a:af:e4:2a:3b:18:e1:e6:41:
46:92:2a:0a:0c:dc:95:ae:84:16:12:61:fc:29:f2:21:af:3a:
bc:33:7b:f9:c2:95:c0:d1:e9:16:49:cb:85:77:ba:83:39:24:
e8:55:44:bd:86:6b:da:1a:80:28:0b:74:ea:37:ed:1b:bc:bc:
f3:aa:fb:95:f7:ab:ee:e5:27:de:99:fb:eb:fe:89:68:64:9b:
f1:f6:2d:bd:53:d0:92:cb:10:30:30:af:c2:b8:c8:c4:b4:6d:
80:63:47:63:89:28:6f:0f:17:e8:79:28:60:05:36:4b:5d:66:
2a:d0:14:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoY4sAgxxrQAlSnYNjSNqLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0
MTIxMmUwHhcNMjUxMDI1MDEwMTQ0WhcNMjUxMDI2MDEwMTQ0WjAzMTEwLwYDVQQD
Eyg5Y2VhZmE2NjQ5MzhjNjBjZDlhNGRiNjViNDcyYjZhMTdmZmZlMDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdegkfwambXXc5N9uUZXA/XU0eYE
O0T1SqWOkC1eysdrnajQwHoawTYTKXYW00U/qgSoxzxkelVSwnrU+WoYzjc9enJu
WMi6lBnUvbzmKVE/y34siTOd3Kc8v9WbDIPcMID0CzbRzOppx2knhNznMmRtURLJ
fb3D+/VXQAj/OyDFei/T9Clh9sD+OrS+qjwQivbhPYnHeYYuDGXc94XVwMoL6VKK
TG5QqSFFVCGQEoAJ2d/YQ/wzumcWiUugURl+lejc8ecVNlcyDVpHNyvGprLAfzJ/
zJXxGdjddmDeYttSvGK/A++j+ZY3h93aIATeCVee57LpnVcIZQuXnNZmXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzq+mZJOMYM2aTbZbRytqF//+CBMB8GA1UdIwQY
MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct
M2U4ZGYzMzEwMjMyLzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy
LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMr+/gDcF
qnXQLcNz0+M4OX1e6Xrq3L9Nd2RTrjOODOfE12BZeLPEvn0WIxQ3WAYX+r9KDkwn
CttxOlYLE3Y4TGIaZ514Obl6/0T8u1kLPdhc1qsd2t6jp5QnMJC01nE8bsYZ8HkP
9ZNUzGSo0uLQRwGCGMXKgal9L+LCIbcgpxbYGrT7O8OsWq/kKjsY4eZBRpIqCgzc
la6EFhJh/CnyIa86vDN7+cKVwNHpFknLhXe6gzkk6FVEvYZr2hqAKAt06jftG7y8
86r7lfer7uUn3pn76/6JaGSb8fYtvVPQkssQMDCvwrjIxLRtgGNHY4kobw8X6Hko
YAU2S11mKtAU6A==
-----END CERTIFICATE-----
Generated at Sat Oct 25 08:21:08 2025 by rpki-client