Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
File: ci0p5qil5cpi3rc-r_OrE95VBq0.mft (raw, json)
Hash identifier: HkKAlK7rN/oyu0PPLblb37wOs+nJaInPMZwOXQLiGyw=
Subject key identifier: 09:2A:AF:8C:64:51:E3:AE:58:9B:E5:8D:A8:E8:92:3F:AE:0C:7E:62
Authority key identifier: 72:2D:29:E6:A8:A5:E5:CA:62:DE:B7:3E:AF:F3:AB:13:DE:55:06:AD
Certificate issuer: /CN=722d29e6a8a5e5ca62deb73eaff3ab13de5506ad
Certificate serial: 019A7112F5B67EFD40CAD1AB028ED098BFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
Manifest number: 0225
Signing time: Tue 11 Nov 2025 04:00:59 +0000
Manifest this update: Tue 11 Nov 2025 04:00:59 +0000
Manifest next update: Wed 12 Nov 2025 04:00:59 +0000
Files and hashes: 1: ci0p5qil5cpi3rc-r_OrE95VBq0.crl (hash: MCuGf0EorMyXj41Y9iq71OTorPgoCZlOXCBl5/GSpDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f5:b6:7e:fd:40:ca:d1:ab:02:8e:d0:98:bf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722d29e6a8a5e5ca62deb73eaff3ab13de5506ad
Validity
Not Before: Nov 11 04:00:59 2025 GMT
Not After : Nov 12 04:00:59 2025 GMT
Subject: CN=092aaf8c6451e3ae589be58da8e8923fae0c7e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:67:79:6b:5d:6f:32:de:b5:72:77:cd:ff:
0a:dd:14:23:fc:44:6c:d3:3b:f6:72:25:76:b9:4f:
8d:9e:f4:bd:8a:62:f0:f4:11:3e:df:a7:2b:b7:d1:
ed:fe:05:49:bb:b0:c1:84:7b:0b:86:a2:94:df:4b:
f8:d3:b6:be:31:94:e4:76:e0:89:47:5b:4c:70:4a:
e6:61:a2:2d:9c:98:50:99:d2:4b:a4:ec:a2:12:f5:
b1:3d:52:cc:bf:57:93:2e:10:2f:57:8d:33:25:b7:
ad:93:55:cb:52:70:a1:e5:4a:f7:7d:2b:53:b2:21:
c7:73:d3:4d:06:36:8d:64:df:fe:0e:67:f2:af:c4:
90:3e:15:30:6f:0f:37:98:4d:82:be:42:7b:58:2b:
46:02:4e:7d:e5:d5:9e:7a:64:8a:18:b1:74:26:58:
54:48:23:21:92:ec:2a:e2:9f:5d:2f:21:67:80:47:
98:22:9f:7a:74:b2:80:8f:42:c8:48:7d:de:0b:f4:
ae:04:86:b7:a0:ed:e0:d8:8b:d5:c1:e5:9d:f4:cb:
88:bf:8c:99:b0:f8:0e:fc:1a:ee:4f:4b:a9:cc:18:
bb:d0:1a:57:d0:79:89:01:25:9e:43:4a:e7:f5:2e:
43:5f:55:66:35:ba:2a:7a:7a:e2:1e:16:95:6d:7e:
d7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2A:AF:8C:64:51:E3:AE:58:9B:E5:8D:A8:E8:92:3F:AE:0C:7E:62
X509v3 Authority Key Identifier:
keyid:72:2D:29:E6:A8:A5:E5:CA:62:DE:B7:3E:AF:F3:AB:13:DE:55:06:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b1:62:16:21:2b:05:2c:07:dd:40:6a:98:06:75:69:4c:eb:
29:15:b9:79:69:22:5f:46:a9:c9:0d:e0:b1:96:24:ba:cd:25:
df:7d:c7:a8:a4:ae:27:aa:63:d4:02:37:ca:ac:d1:e8:48:30:
f0:66:e8:41:ac:24:af:49:b3:84:d7:8b:93:3a:5b:6f:7e:bf:
2a:ec:20:04:6f:dc:30:2f:65:02:df:ac:b4:ce:f6:3c:35:da:
d9:b6:d3:fa:22:75:e8:6b:09:44:f2:91:d9:64:13:41:7f:7f:
bf:6c:57:64:6a:60:1f:f2:11:6c:7a:e9:75:3f:09:50:e2:83:
59:56:3a:87:8d:f0:ff:d9:2b:38:a7:aa:dd:bc:48:e4:1d:1a:
86:bc:60:63:09:c3:88:c2:e4:12:db:d6:a2:73:13:ae:8e:ac:
d9:6f:d7:7a:0d:de:c0:a4:dc:c1:cf:52:91:d4:35:7f:c3:5c:
be:e7:09:43:7a:0b:f0:d3:67:10:0b:62:c6:3e:21:6c:e8:9a:
fa:7b:16:cf:01:b4:49:13:f7:9b:a3:41:a3:7f:1b:d9:27:d3:
a1:8f:3c:dc:15:65:3b:49:db:e3:5d:bb:23:4b:0e:b6:14:d0:
b1:38:66:7d:95:79:c1:38:4a:9d:77:16:a5:64:48:d7:55:c2:
f1:20:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:01 2025 by rpki-client