Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File: CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier: o3ElcWxO6lQW795KgwUES0A+30tkg82izznqcRiYp6g=
Subject key identifier: 7C:02:66:99:25:D1:DD:D1:9A:A3:CF:7B:2E:52:30:5C:C2:87:D7:B2
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer: /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial: 019A725CC1B3BD56163234124B40D9FCE4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number: 0CBD
Signing time: Tue 11 Nov 2025 10:01:12 +0000
Manifest this update: Tue 11 Nov 2025 10:01:12 +0000
Manifest next update: Wed 12 Nov 2025 10:01:12 +0000
Files and hashes: 1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: FM2NCZeZ0f81ZzBfiNV9azn855wtwSeVZWxknCydWzY=)
2: LfJ8ODju367d2avuOQm5piH-KjI.roa (hash: o3ZK8YLnbi2AKR9dzokceRf3/tnSGkPPHYTuBxrwd0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c1:b3:bd:56:16:32:34:12:4b:40:d9:fc:e4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Validity
Not Before: Nov 11 10:01:12 2025 GMT
Not After : Nov 12 10:01:12 2025 GMT
Subject: CN=7c02669925d1ddd19aa3cf7b2e52305cc287d7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:27:8e:66:f2:a5:26:7c:ad:ec:a8:f8:97:
07:f8:25:5f:a2:49:db:48:5b:87:3e:3c:a3:90:76:
ef:1a:db:c2:1f:5b:67:31:2a:0c:b4:0c:5f:50:a5:
0d:1b:f0:3a:5e:a9:f0:2b:29:e6:c6:bb:4f:06:14:
2d:b4:64:e7:b0:64:b5:39:34:c2:17:75:d8:b5:da:
f8:38:09:45:34:ba:4c:b6:a8:29:61:26:9d:f7:8f:
c7:d9:de:67:07:70:9a:9e:47:46:6f:06:ee:39:a5:
37:06:a6:5f:df:9e:52:34:12:8d:6c:2a:d8:17:a3:
22:09:eb:de:c1:b3:ce:c6:72:8e:0d:13:cb:c5:e1:
e2:e8:40:43:0a:27:02:c3:a3:e6:bb:d0:54:d0:d1:
07:82:57:fe:b2:54:39:76:71:0a:55:b2:de:3a:ec:
20:f7:52:8c:c8:b1:ed:a8:66:de:e9:fd:7b:f6:b4:
56:71:36:e1:17:4f:82:19:7e:0d:23:f2:fd:09:39:
3d:61:0c:bb:1c:80:c5:8a:fb:1c:93:a3:ef:82:38:
df:4b:55:f1:b6:ce:c3:82:40:98:ba:c3:99:b3:5c:
58:2d:95:97:d7:30:a6:d5:c2:1f:c4:99:a4:22:75:
5a:2b:c5:cf:53:0a:5f:43:d3:fa:c8:a5:14:3d:a9:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:02:66:99:25:D1:DD:D1:9A:A3:CF:7B:2E:52:30:5C:C2:87:D7:B2
X509v3 Authority Key Identifier:
keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c4:26:2f:f5:a9:0e:0f:66:b6:c2:18:96:05:ff:19:60:81:
cb:c9:8a:30:3c:1c:7d:7e:bd:c4:9a:bd:58:21:a6:5e:f3:26:
3f:7f:e9:13:00:97:37:9f:93:b3:6d:dc:22:3a:15:77:a3:86:
36:6b:23:7e:32:05:84:e5:62:1d:de:ce:7a:08:82:fe:0f:5f:
4d:8a:3c:aa:94:e1:1e:6c:b5:47:57:88:cb:35:66:20:1f:89:
5e:fb:ee:2e:b1:16:1f:b2:8a:08:15:6b:9b:fb:80:a7:90:69:
d7:72:87:bd:30:1a:48:97:0d:ab:ab:83:b7:bd:88:33:a0:67:
7a:6d:0c:14:a5:88:5b:61:85:da:da:f4:27:72:52:e7:fc:5f:
dd:9e:3c:49:a7:42:d0:6c:af:a9:64:84:55:bb:f7:f3:b6:79:
ab:28:3a:71:94:8c:8f:24:c4:c1:f3:72:c4:ad:1c:e2:d8:10:
c6:45:77:e7:be:16:87:56:a1:a9:04:c2:28:78:fe:02:6a:13:
e5:ef:fa:75:44:5c:01:4a:5d:16:13:c3:5a:44:a6:fc:b7:87:
69:a8:97:53:9d:b0:80:89:48:1e:68:f8:c5:4d:7f:b4:0c:20:
43:05:58:c5:a4:e0:8a:b2:6d:7f:7e:51:d1:d9:13:66:93:d7:
69:c7:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:45 2025 by rpki-client