Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier: 89docE2T3Rw+ZZSqYHR48QnmejoJcuzGoKDaiccguBI=
Subject key identifier: 32:D4:BF:46:33:C7:35:09:81:F0:D1:22:87:33:67:27:39:C2:0C:8F
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 019A71B886D7B69A97F146ADA266768F511F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number: 0B0A
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: DJQOXLWE8MZ/MwlRU8vXsXw1zcCUUzU4EGGtWTp8HKA=)
2: tX_eiSv6b9gWuAzQ90obdliFuqM.roa (hash: ZiFHzPJvZH9N84EKs/55J2Q6VVzMS4porN9rlx3w+2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:86:d7:b6:9a:97:f1:46:ad:a2:66:76:8f:51:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=32d4bf4633c7350981f0d1228733672739c20c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:d5:1e:28:81:2c:39:7a:63:e4:a3:29:e3:
85:b2:8a:a5:8f:e0:8a:c1:97:01:a6:e6:79:59:d7:
12:36:21:d5:7c:08:a0:0d:79:a0:5b:73:c5:7b:c7:
d2:84:e7:42:45:23:b6:51:13:0d:4e:e9:75:d5:60:
44:8e:92:01:bd:10:fb:a8:3e:74:34:78:ef:5d:57:
91:2a:45:87:ef:ed:c0:06:04:53:75:e2:ce:ce:92:
83:78:59:bd:52:7d:5d:1d:31:58:89:d4:e4:53:24:
c3:98:25:fc:3f:ff:05:58:40:93:1b:ed:a0:67:f2:
90:65:f7:1c:96:c7:5d:e3:52:75:7e:ac:31:87:7a:
3f:01:db:c2:5d:e7:42:d1:f1:0b:4b:f1:dd:60:ee:
ec:99:74:53:54:6e:2b:f7:20:ff:35:5c:2e:ca:6f:
15:fc:99:92:d4:a9:4d:9e:28:ca:1f:c8:12:cf:6b:
c9:59:c3:83:d2:90:e8:03:72:a4:cf:d5:43:cb:97:
67:b8:2e:46:aa:1d:8c:19:a9:82:8e:01:22:91:ab:
78:4f:1e:c2:6e:80:d9:5e:c6:b5:84:71:b3:3d:e6:
ad:6a:95:62:82:3e:6a:20:5b:66:d1:95:01:31:b1:
46:48:a2:69:17:56:c7:a2:61:b2:e8:1a:91:3a:9d:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:BF:46:33:C7:35:09:81:F0:D1:22:87:33:67:27:39:C2:0C:8F
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:18:c5:b2:c2:40:a7:ad:16:e2:49:aa:ab:0b:e0:6e:06:fa:
1c:81:58:13:26:d3:ea:9c:48:ad:d5:5a:cb:ca:a3:b6:e3:da:
86:3c:bc:95:08:ac:de:8b:72:75:2d:d8:4e:ed:12:b6:81:42:
c5:04:95:7b:c7:40:2c:e2:9d:41:69:d0:3d:c9:dd:1f:15:d7:
a8:22:5d:98:76:4a:5d:e5:ba:dd:5c:13:50:eb:a7:c9:3d:b5:
a1:8d:e9:cf:6b:49:c4:c5:d2:41:24:f0:d3:e4:f5:2d:11:44:
94:2d:93:9a:41:2f:23:6c:be:d8:50:8e:c8:99:6e:0c:8a:fc:
e6:f9:2a:2e:cb:18:cc:48:9e:2e:94:25:7c:8b:55:a1:fd:0a:
4f:e0:93:52:05:47:78:a0:31:79:ee:55:fb:ac:3a:ea:2a:79:
e0:d9:38:6e:77:9b:9e:58:94:60:0a:a3:dc:22:29:bc:ea:2a:
5b:fd:53:36:96:96:01:90:67:e2:e3:9a:f5:95:da:a2:e2:35:
8c:47:3c:52:65:9d:7d:16:67:06:f3:2e:bc:d5:f2:cb:6e:94:
a1:f4:04:e5:50:63:26:aa:53:d9:c7:d6:41:91:52:a2:72:e6:
6f:d4:25:9a:af:69:1b:01:11:31:f4:aa:51:a8:82:28:52:97:
f6:8b:c1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:18 2025 by rpki-client