Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
File: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json)
Hash identifier: hTVV5IvZ7Xrq9hB1AzPMG9fv/ciivaWI9xXjI7lSEjQ=
Subject key identifier: 62:02:31:05:A4:14:29:1F:8C:C3:91:E7:91:0E:77:3B:ED:7A:B9:4F
Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Certificate issuer: /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Certificate serial: 019A53AD29499B3E9C1649BAAD965E531939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
Manifest number: 0BC4
Signing time: Wed 05 Nov 2025 11:00:48 +0000
Manifest this update: Wed 05 Nov 2025 11:00:48 +0000
Manifest next update: Thu 06 Nov 2025 11:00:48 +0000
Files and hashes: 1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: tYDulW1li3NU8Z/GxSo+7g0sEM0w8EHl4TJLas4KCXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:29:49:9b:3e:9c:16:49:ba:ad:96:5e:53:19:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Validity
Not Before: Nov 5 11:00:48 2025 GMT
Not After : Nov 6 11:00:48 2025 GMT
Subject: CN=62023105a414291f8cc391e7910e773bed7ab94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:f8:61:bc:ae:90:3d:69:4e:b9:6e:5b:8e:
ba:89:f0:d7:f7:5a:cb:7f:cb:8d:78:1a:40:89:a8:
55:82:da:f5:a1:7c:3a:29:b8:d4:fa:1d:e0:05:3f:
8c:7f:ad:b4:2c:fe:91:f4:22:91:57:30:93:ee:c5:
75:b4:68:55:1f:fe:ec:f6:b0:1c:1d:0b:8f:cf:1a:
ca:24:be:f0:b8:c7:67:17:95:f2:ad:33:aa:aa:ea:
fc:32:af:2a:62:f9:54:66:6d:1a:62:29:7e:c7:0f:
0b:03:6b:1c:4b:10:60:38:48:7a:ba:19:b4:d9:43:
11:1a:26:48:6c:7e:eb:e5:61:b9:60:ea:be:7d:f5:
4a:2d:0d:29:13:00:db:25:f5:7c:c2:dd:94:4e:18:
0d:4e:fb:67:f1:0f:5c:53:05:03:25:59:ba:29:4b:
6c:44:49:22:75:64:f8:c9:39:2c:22:7f:e5:c1:65:
f2:e4:da:c7:3b:8f:34:82:3c:31:57:1c:3c:41:86:
ee:37:30:10:f8:96:11:31:eb:11:71:93:e9:c4:80:
46:72:04:f6:76:41:50:16:7d:e7:e8:94:06:02:2f:
28:c0:06:ac:09:c2:e8:84:c1:75:b6:72:03:69:38:
3d:0b:96:8d:e1:06:55:3d:b2:39:00:9e:bc:60:18:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:02:31:05:A4:14:29:1F:8C:C3:91:E7:91:0E:77:3B:ED:7A:B9:4F
X509v3 Authority Key Identifier:
keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:89:28:5b:2c:ee:e4:cb:6a:36:ea:dd:d1:16:07:d6:ef:b7:
93:8b:3b:05:f9:77:0c:50:9e:01:4b:a0:62:6d:45:e6:d4:5a:
12:1b:70:2d:31:d0:b4:01:d2:cc:89:71:dd:f5:83:8d:cc:2d:
f2:a1:e9:00:96:6c:ad:08:79:69:51:4a:0b:86:fc:b4:91:3c:
11:be:9e:a1:21:57:ea:ec:8e:b0:06:8c:bd:ee:2a:c4:41:e8:
a2:67:bd:e0:d1:58:c7:78:4d:37:3b:a5:b2:5e:21:c7:62:44:
9b:39:23:57:06:bf:b9:cb:04:c2:64:ad:e0:51:af:da:f3:c3:
cc:4e:bb:ff:c8:5a:73:4d:5d:00:45:6b:ec:48:4c:2d:25:88:
d8:c6:78:81:07:36:c9:14:82:09:df:07:4f:43:23:7b:fd:8d:
a5:a1:12:16:84:61:96:04:3e:a9:fd:7a:5e:a7:75:05:54:12:
a1:b1:ec:a0:bd:63:4d:cf:46:c2:08:c9:5c:55:35:6e:5a:f6:
21:f1:6d:9a:b8:ee:47:ab:0a:55:11:d7:0e:94:5b:51:8d:f9:
1e:9b:34:5c:bb:8b:59:88:64:41:5a:cb:0c:23:ff:16:d4:84:
b1:3e:01:e2:ba:59:21:3e:59:48:bc:1a:68:2a:30:75:42:4d:
f3:0c:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:52:56 2025 by rpki-client