Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
File: CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json)
Hash identifier: RuMThqEGiUzr+FY3ehD/uVqDu42KhKShtBapXsY6VS4=
Subject key identifier: 8C:0E:2A:D7:2A:7E:1E:CB:CE:85:16:6C:59:7C:91:07:3D:05:74:E5
Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Certificate serial: 01992DB5A5BCA20BBF3F02D3D1EC81DBAA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
Manifest number: 0405
Signing time: Tue 09 Sep 2025 09:01:43 +0000
Manifest this update: Tue 09 Sep 2025 09:01:43 +0000
Manifest next update: Wed 10 Sep 2025 09:01:43 +0000
Files and hashes: 1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: 0uU1wPzmQnSR0JrjpEGnrPDeW6rhJpRFAlWGK4QPXaA=)
2: eHRO21DmqwNpVgTB2vD5a-Ys0dI.roa (hash: aBKp2xE7MsTi71gMh8o9d5bU6XkJQ/dv6sIkU9dHe34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:a5:bc:a2:0b:bf:3f:02:d3:d1:ec:81:db:aa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Validity
Not Before: Sep 9 09:01:43 2025 GMT
Not After : Sep 10 09:01:43 2025 GMT
Subject: CN=8c0e2ad72a7e1ecbce85166c597c91073d0574e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:70:3d:dc:bf:74:66:43:85:52:b3:03:3c:
65:7a:3e:09:c7:58:03:41:51:74:ba:a2:0e:b3:71:
19:b2:9a:30:3d:bc:fe:74:82:56:a9:1a:0b:d4:39:
b5:6d:b1:17:73:71:de:37:2e:c2:64:eb:63:b9:f9:
af:f2:b9:88:09:92:8d:fc:14:47:db:70:37:4a:a2:
48:92:6f:6f:23:63:3f:ba:74:f3:49:d3:af:7c:d9:
f1:bb:30:06:d5:d1:bd:2b:09:09:66:f5:39:10:b9:
fe:ba:90:cb:1a:6a:62:b9:9d:0c:b0:37:3e:ac:c3:
fc:34:0f:fb:10:5c:e4:e0:85:96:2e:35:cc:5e:30:
66:ee:ff:18:ff:7d:15:4e:b8:6b:2f:72:94:b9:1a:
82:9e:ac:ed:9d:0b:02:6c:f3:29:fa:5a:08:59:cc:
15:93:88:1e:d0:7c:ea:81:d7:66:61:37:41:77:0b:
65:c4:33:ec:f2:34:47:e6:59:ed:98:0f:8f:04:c1:
81:c9:fd:3f:e1:fc:90:bd:ba:0e:83:cc:eb:24:2c:
ad:40:cd:6a:e9:fb:6c:2a:f1:a6:b3:72:31:f6:9f:
e8:6c:44:20:db:8f:da:46:73:e1:47:cd:95:c0:95:
8e:36:62:6b:f6:e8:ee:ed:13:5f:82:2b:1d:36:86:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0E:2A:D7:2A:7E:1E:CB:CE:85:16:6C:59:7C:91:07:3D:05:74:E5
X509v3 Authority Key Identifier:
keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f2:b3:69:ca:aa:bc:da:d2:87:b6:aa:04:92:4e:64:78:9c:
e7:a0:0b:cb:0c:28:71:c4:99:af:d6:4a:3d:07:8d:ea:4c:01:
aa:94:59:f8:08:95:62:be:35:e5:5e:c0:e5:91:e8:7e:53:26:
36:70:d3:14:03:fc:c5:8f:25:92:6c:67:d5:4d:a0:6e:96:0c:
d4:0d:35:69:c8:32:72:57:c0:5a:dd:d7:df:3e:64:a8:e9:8b:
b4:d2:6b:20:59:9f:48:b6:3e:09:78:4c:65:f3:0f:66:53:81:
d6:24:ec:01:4a:5d:17:57:51:92:51:c2:88:52:41:58:6f:71:
33:8f:a2:a3:0a:fa:2c:9d:8b:ef:85:0e:2d:bb:be:9d:eb:3f:
5c:af:af:5b:b6:3d:ee:e8:c7:9b:29:0c:c2:69:b9:71:e7:7f:
1a:83:c9:28:a6:b8:9c:55:c4:7d:99:17:84:8f:3e:d5:08:d9:
d9:b5:8a:9f:5e:a4:08:03:bd:25:21:f6:aa:ca:10:81:ee:7b:
90:9a:5b:61:f7:9e:e0:2d:55:ff:12:3e:02:59:3c:4f:df:70:
e5:9a:c1:9d:cd:a3:91:f6:14:83:1e:32:83:e0:cf:70:e9:ac:
a4:b7:77:49:a5:14:f4:27:e7:ac:5a:9f:09:49:f9:6e:a3:26:
22:fa:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 16:21:41 2025 by rpki-client