Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: fXNP+Fl5Xbvkdp7G87TiK32K3TY9nTOslPUhNwK9Z5M=
Subject key identifier: 31:BC:40:E0:04:38:D6:8A:B8:34:D1:46:99:BB:2D:F6:8C:8F:84:E5
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 019A15A9BFCBF57D59F426108DC4A5883903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 16F3
Signing time: Fri 24 Oct 2025 10:00:37 +0000
Manifest this update: Fri 24 Oct 2025 10:00:37 +0000
Manifest next update: Sat 25 Oct 2025 10:00:37 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: neqGBkrDcHsr13Esgtj7Z4Z9xxrPzCqywh4OCDCajqE=)
2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:a9:bf:cb:f5:7d:59:f4:26:10:8d:c4:a5:88:39:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Oct 24 10:00:37 2025 GMT
Not After : Oct 25 10:00:37 2025 GMT
Subject: CN=31bc40e00438d68ab834d14699bb2df68c8f84e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:05:76:ad:8b:65:44:fa:50:38:91:a1:d6:
53:47:be:25:d9:e3:47:dd:f2:58:3c:02:53:63:75:
10:57:9d:59:80:66:cc:2f:b7:21:f1:08:f0:f1:55:
eb:22:ef:3b:dc:8a:a4:ba:22:27:29:97:f5:56:69:
70:ba:b1:c3:e2:08:76:d8:40:86:79:47:b1:c0:77:
57:22:69:da:84:73:43:d7:eb:6e:0a:61:e7:61:08:
57:ee:51:ee:8a:27:a6:08:6b:1d:20:1f:98:d0:08:
a1:46:29:0e:09:28:89:44:62:ba:3b:21:7b:a4:8e:
54:f0:bb:70:da:f9:58:2e:b9:7d:19:07:7b:b4:68:
49:79:4b:63:1b:65:15:c5:b4:8d:95:67:9c:f1:68:
eb:98:51:a8:60:4a:1c:50:85:0c:c7:f1:fa:28:18:
32:ab:3b:e8:17:89:1f:d6:ed:f5:f1:52:21:89:21:
36:0f:39:57:e0:93:b4:0a:89:f2:6f:16:d2:d6:eb:
82:1a:4c:01:dc:28:93:c3:c4:9b:58:79:08:e0:93:
a1:0c:bd:16:c4:28:e7:a1:12:41:93:0c:b0:0d:3f:
49:b1:4a:cb:9d:fa:36:4e:48:76:fd:2a:0c:54:5e:
1e:bc:f0:00:84:d0:aa:14:da:69:68:31:2e:4f:04:
fd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BC:40:E0:04:38:D6:8A:B8:34:D1:46:99:BB:2D:F6:8C:8F:84:E5
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d5:53:b3:27:a9:eb:b3:f0:16:1f:4e:b2:d0:3c:99:d4:77:
b1:82:a6:df:f7:1d:bc:87:f2:65:5d:b1:08:a8:87:a4:05:f7:
98:87:38:94:59:cc:6f:3d:d5:a8:f6:91:b8:f5:7a:55:11:86:
27:04:59:a5:f0:8b:04:ee:17:a7:49:a0:76:93:8d:d0:57:93:
52:b3:68:54:08:36:4f:90:10:23:fb:23:8f:a8:52:ee:94:a9:
9b:96:90:82:c5:cc:f0:fd:ab:d7:ce:d1:d3:76:72:a2:42:74:
76:1f:08:4d:83:c9:c6:69:ce:0d:13:35:b6:d2:31:fd:e5:c4:
bc:b8:81:08:a0:e8:a2:87:22:94:e2:b5:2f:97:e4:b6:e7:b3:
3c:9d:a2:ce:55:b8:88:0f:f9:32:b7:1a:a1:21:9c:18:f7:25:
af:25:e6:68:d2:a0:01:18:54:f8:e6:6d:d1:31:e3:c5:f2:11:
a4:5f:07:ee:57:3e:7c:9b:ab:bb:33:ab:09:07:c5:83:be:9d:
c5:0f:e6:f6:b0:10:bc:2c:35:fd:eb:fb:54:72:68:71:fc:54:
92:78:da:71:6b:bd:e5:4a:52:53:06:9a:a0:dc:9d:ea:c3:05:
60:76:91:69:f1:f9:77:48:77:be:3a:b9:4f:a7:3a:4f:ec:46:
f6:6b:e4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:18:35 2025 by rpki-client