Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier: nlybjpf6oE4ZY3jirfF2+ZSMpP97yzTJ93rcpFZAlV4=
Subject key identifier: 72:7B:7C:74:98:14:42:B4:7F:7B:22:78:45:21:77:88:A4:57:EB:DE
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial: 019A725CE28D67F3F8B6C5FB7AE4B27E86AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number: 07F0
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: zV199kmpTuhBSvFa6vRVdu/kmDZ9KilSnXPc8KvWkQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e2:8d:67:f3:f8:b6:c5:fb:7a:e4:b2:7e:86:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=727b7c74981442b47f7b227845217788a457ebde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:e5:7a:94:ba:67:b7:05:6c:85:d4:59:e0:
ef:0d:57:4b:3e:b2:eb:1b:12:0f:36:7f:f3:e8:d0:
9f:5b:0f:6f:fa:3e:2c:ce:44:ad:ba:15:e6:0c:01:
fd:b7:86:65:72:96:90:96:e8:62:a8:82:c9:77:24:
0c:86:59:27:01:6a:38:92:3c:ff:2a:74:a3:47:2a:
e7:4c:9c:dc:94:82:8c:fd:fe:05:3e:a1:eb:86:ce:
6f:c2:3c:61:99:c9:a0:24:ac:fe:45:7b:c9:36:a3:
bb:a1:da:de:12:44:bc:76:fd:de:38:74:77:0e:a8:
6f:6b:f0:91:24:8e:a1:de:a7:ba:f3:bb:3a:b7:3c:
9f:cf:9c:c0:15:ab:80:8d:1d:b8:18:c3:3e:67:1c:
95:78:46:29:25:11:fe:f0:75:b4:ed:d8:3f:bc:09:
a8:1d:6b:35:ea:cf:4e:52:2a:1c:0e:1c:69:a1:be:
1b:23:ce:94:8e:02:7d:af:10:5f:c6:ad:48:3a:3a:
fa:da:01:b5:b7:13:51:34:14:ee:36:56:2a:77:9c:
99:56:cf:bd:82:aa:c8:95:67:56:67:b0:d3:4a:b6:
e9:b0:1e:ae:00:96:9b:ce:d8:7a:db:3a:59:aa:73:
a7:b2:cf:a5:f4:bb:cd:c3:e3:ec:7a:ad:55:7d:20:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7B:7C:74:98:14:42:B4:7F:7B:22:78:45:21:77:88:A4:57:EB:DE
X509v3 Authority Key Identifier:
keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9c:72:af:8f:fb:02:7f:71:72:89:ee:c8:8c:65:4a:8f:f6:
79:ed:2c:c4:da:83:30:ed:2d:21:4f:ce:c6:0d:94:db:a8:cd:
1f:20:25:aa:67:04:ae:ae:55:ff:a6:f6:0e:d9:3e:a7:34:37:
0a:74:c6:9b:03:f9:98:1b:71:d6:93:4d:35:80:fd:5c:bf:e1:
e1:43:f3:98:bd:81:9a:24:bf:e4:ff:10:25:f7:b5:93:e6:ff:
3d:ac:1e:f4:94:7b:f3:42:e9:da:54:6b:37:7c:5f:8d:a0:1c:
09:22:19:73:c4:92:d5:50:e4:b7:f5:cb:83:6c:68:de:8c:94:
4b:b3:95:25:a2:71:22:86:4d:b2:37:df:93:69:d1:04:fe:07:
06:a5:81:7a:d1:92:2a:99:3d:19:9c:99:b3:6c:0b:99:95:76:
68:ec:2e:1a:40:74:cf:53:9f:b6:a6:c5:53:f9:55:d0:ab:e0:
82:27:16:b2:51:d2:46:05:2d:be:f8:12:a3:cc:a8:ec:f5:0a:
8e:18:60:a3:c5:b8:82:4f:91:e2:33:d1:53:5a:b4:b2:64:1b:
de:f2:f7:e2:19:d6:d4:8e:22:6a:7b:42:79:62:7e:e5:0c:33:
76:ba:a6:30:b8:f8:19:e5:fb:3a:93:e1:29:b6:04:d6:68:20:
1c:eb:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:47 2025 by rpki-client