Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: xygTZu3ObQpEgYEx0dD6mf8zf4l27MTy6xvaDyf1wt8=
Subject key identifier: 07:7D:3B:E6:8E:C3:77:40:F7:AD:00:4F:2F:8F:D7:2A:0D:72:1C:1D
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 019A4E4F69025DE2D2BE4A4B02C408EDCA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 0AF5
Signing time: Tue 04 Nov 2025 10:00:18 +0000
Manifest this update: Tue 04 Nov 2025 10:00:18 +0000
Manifest next update: Wed 05 Nov 2025 10:00:18 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: ZraKA0gFClmGj5QRJZMCNvzQHRlFh7YvMlUTcV1E0v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:69:02:5d:e2:d2:be:4a:4b:02:c4:08:ed:ca:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: Nov 4 10:00:18 2025 GMT
Not After : Nov 5 10:00:18 2025 GMT
Subject: CN=077d3be68ec37740f7ad004f2f8fd72a0d721c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:d5:46:3a:4b:af:97:1b:9d:fa:5d:57:6f:
bb:e3:18:55:9a:ef:b0:bf:b6:24:1d:66:75:52:1d:
9a:3f:4e:43:d2:b0:0f:4f:e5:81:57:b2:cd:b5:81:
61:4d:8e:d6:f1:fe:c4:80:2f:08:ba:b9:b2:c1:0b:
7d:ba:dc:5f:99:bd:20:82:c8:e4:0a:71:ea:39:92:
de:92:d3:7c:62:0f:1e:7f:87:08:9e:c3:15:f2:07:
f3:97:47:02:f7:c8:48:c0:ab:22:25:76:f8:0a:c2:
23:d3:97:1e:aa:70:3d:c9:0d:00:71:c9:95:38:4f:
bb:1f:c5:8d:ed:07:63:f8:81:2f:3b:95:8c:35:63:
e0:91:96:5b:cb:ec:cc:11:f5:9d:f6:89:7f:c4:ec:
cf:f4:29:45:23:d4:89:41:5a:89:97:1b:ef:67:7a:
12:29:86:a5:75:69:ef:35:01:c7:3e:a1:4a:9c:9b:
71:2c:82:0b:ec:99:69:c2:c3:bf:97:7c:45:df:3f:
e3:9f:ec:47:1c:49:92:ad:7f:e3:f6:a5:86:60:c3:
6b:0e:06:13:70:14:60:b6:58:61:29:ce:7c:7e:55:
51:a4:75:9d:29:10:15:86:71:0e:63:bc:d9:d1:d0:
da:e9:ca:b2:a7:36:45:4f:3b:87:ad:e6:bd:f6:91:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7D:3B:E6:8E:C3:77:40:F7:AD:00:4F:2F:8F:D7:2A:0D:72:1C:1D
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0b:6e:be:d4:7b:8f:e7:70:cd:8d:de:89:44:80:a2:61:35:
c0:09:fd:93:0e:7f:9f:f3:ec:ad:0d:3f:91:b6:e1:79:ce:86:
4b:84:28:e8:f3:20:93:b3:3c:7e:d8:21:f5:6d:cf:b2:43:b2:
2a:d0:14:fb:54:3e:04:13:75:b4:69:c1:23:80:4b:3d:b7:6a:
6a:7b:59:67:1f:71:10:6f:7b:c0:b1:2b:24:62:16:82:90:b6:
83:7b:2d:09:48:5a:98:e8:3c:61:65:99:aa:f9:6f:0c:ba:23:
ed:d6:94:6c:0b:6a:c7:4c:8d:12:00:5a:b1:87:01:62:6f:07:
e8:c0:70:97:97:50:9c:5a:b1:c1:ca:42:ab:de:95:5f:b3:f9:
69:e4:a4:21:56:ee:5b:60:1f:d6:f1:08:f8:90:e3:53:e0:d7:
ca:4d:8f:ac:c3:af:57:08:be:d2:a3:da:61:44:32:d5:f1:7f:
bb:b0:94:f9:fa:3f:0f:0f:e0:da:f3:48:6d:70:7b:cb:5f:3d:
3d:5b:4b:c8:8f:c7:11:8c:1e:20:4b:10:0d:26:a5:62:60:25:
3d:af:46:e1:25:d4:5b:1b:34:d8:24:d2:6d:de:b0:4f:f2:f0:
a5:01:69:c6:16:0f:27:e2:78:86:23:c2:14:ad:00:d1:05:3e:
2c:77:c7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:55 2025 by rpki-client