Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: KQSI1IVrPLu7sA4wPZo8vMz8yDjlKTbn6Yi5eKfMkOU=
Subject key identifier: 63:D6:96:EB:BD:D8:F0:27:48:D4:C4:52:A1:A1:6A:0B:3A:1B:A0:38
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 019A4EF49C4BED55E47CA3A9E659B033A7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0B4A
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: v9t0PZ+GXov8PQbKtYFM8s+vu9bc9TQgfXFVJqmLR1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9c:4b:ed:55:e4:7c:a3:a9:e6:59:b0:33:a7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=63d696ebbdd8f02748d4c452a1a16a0b3a1ba038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:43:e6:d3:bd:bb:50:7a:2a:65:1d:09:ad:
e9:3f:64:8c:18:d7:20:13:71:c8:1f:d4:5f:48:e4:
7b:89:74:f4:e0:cd:36:17:04:4c:11:7b:69:aa:4e:
c7:f7:a0:b9:17:9f:41:95:5a:d5:f0:88:12:22:05:
97:85:eb:bd:45:99:7f:c1:99:52:6f:d4:c7:b0:9b:
f1:bf:6e:b2:3d:84:fa:8e:5b:26:43:3c:68:c3:98:
58:9d:7c:65:57:37:f4:a7:1a:e1:66:c9:dc:cf:59:
13:a4:6b:46:0f:ba:5f:c3:c7:5b:b4:78:c9:35:2f:
fc:58:44:61:46:87:db:22:d5:87:50:81:94:6a:d0:
88:2f:56:1a:87:80:d7:89:b1:0c:de:a5:fa:a2:87:
94:0d:e0:42:d7:df:cc:cc:c9:ab:c1:d7:d2:61:d3:
f7:f4:b2:a6:6f:db:c9:1a:01:59:92:7c:04:c3:99:
12:08:d7:7b:cc:fa:c0:e1:30:e5:11:be:d1:55:b5:
73:4b:ee:34:f5:46:1a:0f:24:a4:d9:bc:13:ed:cc:
ad:a5:d1:8d:79:00:f4:cb:72:03:b0:6c:b1:b6:57:
c9:b4:8e:4f:85:b8:30:19:41:fa:6a:89:a2:2e:4a:
c6:16:76:86:71:10:35:33:56:05:7e:51:0a:12:da:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D6:96:EB:BD:D8:F0:27:48:D4:C4:52:A1:A1:6A:0B:3A:1B:A0:38
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:22:d5:83:1e:eb:14:c7:89:0d:64:32:bc:74:a6:08:49:eb:
3c:ce:41:d6:42:12:61:ea:98:18:c6:8f:50:24:b3:3a:94:83:
a9:8e:1f:76:e9:bd:d6:11:f3:16:f1:99:63:d5:58:e2:cc:2b:
f8:2a:c4:20:7a:a8:da:91:1d:9d:3c:c5:f4:e4:ee:7b:43:12:
2e:b5:77:04:4e:eb:8d:aa:52:7f:46:c9:18:53:bc:54:9c:84:
6c:5f:92:57:27:b9:80:b3:22:fa:73:cd:6c:73:14:0d:81:43:
ad:f1:b5:bc:bd:5d:20:2e:95:5f:6a:35:99:80:9f:34:40:cf:
f0:ad:d5:e1:89:da:8a:37:90:62:96:43:5e:9c:02:68:09:60:
01:23:e5:63:94:c6:51:3b:dd:e1:ba:b2:e5:8f:bd:28:83:c1:
13:d5:73:11:02:16:b9:24:22:30:88:27:f0:dc:cb:a0:44:b6:
52:9f:d6:70:f3:74:b4:df:c5:e9:f5:e4:7b:bf:48:b7:dc:11:
8a:1b:da:9b:98:a0:b7:01:e9:f6:f4:c1:0f:24:18:b8:00:00:
12:dd:bf:a9:8f:b7:b9:d2:b4:c5:91:e7:0b:ed:d8:2a:e6:fa:
28:88:86:a4:75:66:d8:b9:93:20:62:f6:15:1b:92:29:42:c6:
a2:9e:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:13 2025 by rpki-client