Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
File: CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft (raw, json)
Hash identifier: L0kJlRyCJpm00SK+P9NpHu6n/V0/ynhDjZVLMoxCNH0=
Subject key identifier: 71:9F:73:B9:31:49:B5:21:66:6F:06:CD:C3:A0:29:B4:44:99:14:EE
Authority key identifier: 08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
Certificate issuer: /CN=08f234563be959822df42f8d7274fe547c0b2f05
Certificate serial: 019A72258D4A6C242FDF21D0C9DD5379DFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
Manifest number: B8
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl (hash: fOEsrCHdL3jWMxYGTNMaTOOIiBQ3vqYXt+dUHpD+D94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8d:4a:6c:24:2f:df:21:d0:c9:dd:53:79:df:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f234563be959822df42f8d7274fe547c0b2f05
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=719f73b93149b521666f06cdc3a029b4449914ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:23:50:2f:54:43:29:97:09:09:75:88:90:
39:41:47:3b:11:d6:99:4f:a3:87:22:d8:74:3f:fa:
33:06:ae:e4:de:f3:97:db:a7:15:56:e4:f2:6d:51:
c1:0e:1c:84:ef:fe:23:ad:5b:af:8a:b4:7a:50:0b:
73:83:fe:bf:2f:79:6f:57:5b:69:b8:44:c2:b8:f6:
dc:b3:30:fb:68:c4:bf:b2:01:7c:06:46:c4:f6:09:
88:03:48:69:2b:72:96:67:49:5f:cd:60:c2:a8:60:
1d:5a:52:5d:b2:0d:71:0e:a6:a1:55:3e:3a:99:9e:
08:de:d1:e6:e5:98:5a:ef:0b:1e:72:0e:96:f3:3e:
14:b1:b5:c8:4c:a2:b7:9f:34:b9:05:4a:42:68:8e:
5d:f4:58:b2:5c:6f:ea:5b:6f:e8:52:45:17:2b:a0:
11:bd:e9:4c:57:9e:91:e0:bd:f0:82:69:d5:c1:ad:
8a:6c:90:31:52:d9:68:aa:70:f1:59:57:dd:f5:78:
25:e4:40:54:98:77:11:35:8e:ef:26:b9:4b:b5:ba:
bc:10:49:e4:2b:5d:50:34:88:41:80:92:93:5b:87:
77:7d:35:9b:32:b5:df:3f:91:92:94:de:f4:f6:61:
b1:75:b5:c8:53:a7:df:51:64:52:6b:bb:3a:de:06:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9F:73:B9:31:49:B5:21:66:6F:06:CD:C3:A0:29:B4:44:99:14:EE
X509v3 Authority Key Identifier:
keyid:08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bc:a8:41:bc:42:32:a1:2b:0e:e7:b9:f3:39:60:88:26:09:
e7:25:db:9d:78:6d:9d:31:11:7b:3a:03:ac:b7:8c:ca:4a:7c:
b0:37:bb:8e:38:36:03:a2:6e:59:3a:02:a8:2d:dd:ef:cf:5f:
1c:47:57:10:dc:eb:39:f3:1d:1c:56:29:b2:e2:13:80:2e:b8:
72:6a:e4:d2:c7:5e:25:b0:63:42:b9:75:7a:42:60:b1:1b:66:
d8:99:45:83:c4:2d:58:18:ae:60:4d:98:15:66:7f:45:81:e9:
37:18:a9:a2:7f:d5:07:fb:f3:bf:cc:14:74:aa:5f:0b:f0:34:
d7:ab:53:36:ab:fd:86:11:c5:0c:50:89:ea:74:68:ff:01:44:
70:bd:50:5c:7e:ec:1b:0a:1c:21:ae:94:b7:4d:69:35:44:b1:
39:e3:5e:4a:11:45:90:56:e6:14:9a:4d:c5:bb:ee:fd:07:38:
2c:aa:3d:e3:62:f1:bd:80:7e:56:67:0e:98:47:6e:83:13:4f:
0c:98:35:29:b6:23:54:a2:2f:01:6c:c0:03:23:a0:3b:ba:12:
04:88:9f:60:47:f0:9b:d6:22:9e:b4:48:ba:9d:d0:5a:c5:7b:
fb:a5:4f:b0:52:4a:70:a7:ce:b0:79:3d:62:c4:1d:ca:7c:4d:
4d:c0:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:21 2025 by rpki-client