Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: jqcaRNZCviNcEzh0jN0NPTTr5hkwUsEud/u6qBOkW4g=
Subject key identifier: A6:2C:EE:1C:D9:FA:E2:DB:F4:FC:E6:EE:9F:4A:06:CD:05:5F:75:E4
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 019A71B7F93E1850EB95856A5E9518F5BBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 0736
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: JZ4wb6flxas6JIisBbt7+/wQ08nUE5ZEhubu6umdfcY=)
2: F9XGZi-RuqVcSe1fpzN4q7qIdc4.roa (hash: f6T7R08rHMZ0z6ganX/KnRpxEiznu3aFpX2FIokh414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f9:3e:18:50:eb:95:85:6a:5e:95:18:f5:bb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=a62cee1cd9fae2dbf4fce6ee9f4a06cd055f75e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:67:90:cc:3c:ba:e4:23:be:b0:1f:dd:b5:
48:45:15:aa:bc:b2:d7:14:24:be:d0:6b:c6:6f:9c:
63:f8:b4:c3:24:50:a5:1d:68:8e:4b:43:22:bf:c9:
61:ce:f3:f4:ac:87:86:43:f1:b3:0f:79:65:9f:01:
1f:dc:c3:a4:43:aa:95:24:59:d2:bd:5b:08:ef:07:
85:de:b1:ca:a2:7e:ee:f8:d3:17:a6:2f:35:cb:90:
99:f4:ec:4d:ad:bc:75:0d:e8:cf:77:9e:d8:28:1d:
24:a5:52:3d:b0:c1:60:c9:e9:55:ad:0f:4f:f1:86:
6a:ad:95:6a:72:ad:9e:10:c0:47:a8:27:16:0d:bf:
4c:81:74:e4:04:8b:5b:5e:16:da:02:70:ba:46:88:
9c:11:2d:6e:c7:bb:b2:84:a8:f8:0a:14:a5:01:56:
0e:39:4a:4d:85:79:b8:a5:c4:77:2b:ec:17:ac:21:
d0:e4:b3:7a:e2:d6:04:0e:f8:78:9d:3b:b5:74:51:
67:1e:cb:b4:52:36:9f:e7:60:ff:b8:4f:44:7e:29:
e1:82:ae:74:b4:f4:49:bb:fc:d6:01:c2:f2:ab:38:
89:40:b7:bd:eb:a4:a7:21:b2:df:89:c6:41:7a:f0:
a5:c0:0e:2e:09:ef:7f:1a:e7:f9:7b:ba:2b:d2:04:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2C:EE:1C:D9:FA:E2:DB:F4:FC:E6:EE:9F:4A:06:CD:05:5F:75:E4
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7b:f5:eb:7f:d5:e5:6a:b6:70:c3:07:f1:f5:06:9f:8a:38:
3c:34:ee:2e:87:9e:dc:0b:1b:69:3d:7b:02:78:b0:73:19:04:
3c:3c:8d:1b:2b:ac:a9:da:b6:19:c3:25:34:a2:d1:41:23:0e:
a0:30:c3:4c:b0:82:b3:71:e5:72:40:21:21:e4:96:1d:1a:5f:
b0:a1:85:c2:e1:2c:7e:b8:97:c8:26:33:c7:b5:08:ce:b5:2e:
45:af:fd:0c:0f:27:f4:d2:56:dd:19:68:be:5d:28:96:96:00:
2e:e2:a0:a1:bd:c9:1e:53:c9:1d:f8:c7:a0:ca:ac:39:89:f0:
27:a5:4b:1d:d4:6e:f9:7e:06:9c:1e:42:c7:ac:89:2c:11:40:
e1:07:03:26:76:d2:39:40:84:60:9d:fe:b4:8e:60:3f:a9:cf:
ff:1f:ee:80:26:05:e8:78:61:81:28:e2:81:95:2c:f1:26:02:
59:f0:b4:16:4c:44:b5:ba:f5:31:8b:13:dd:03:f2:20:ff:8c:
46:a9:bb:c4:be:36:8b:7c:7f:17:2e:88:65:0f:5a:d3:6b:28:
7b:35:f8:64:08:17:4c:fb:3c:90:00:83:87:7a:c8:c4:75:5b:
db:90:0c:56:0a:3c:36:b3:2f:a4:c8:59:05:1e:45:1e:8f:cb:
ed:7a:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:35 2025 by rpki-client