Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json)
Hash identifier: zo3mPbLh2N0uHadn0MDNvPY3bTW0vjyyIjxwO4+/kHU=
Subject key identifier: 61:7F:B1:1E:5D:4E:28:E8:C3:64:B2:2E:41:CC:D2:29:BD:53:C4:D6
Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
Certificate issuer: /CN=726f9448a910d2574157a30403f46c1172aeedb6
Certificate serial: 019A503E4BD739B563F24DA95E159134DEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 19:00:51 +0000
Manifest this update: Tue 04 Nov 2025 19:00:51 +0000
Manifest next update: Wed 05 Nov 2025 19:00:51 +0000
Files and hashes: 1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: pAi41cZTQ2+rInCycXXuo1AzCwlJ7Mm9YX/m5iTT6Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:4b:d7:39:b5:63:f2:4d:a9:5e:15:91:34:de:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6
Validity
Not Before: Nov 4 19:00:51 2025 GMT
Not After : Nov 5 19:00:51 2025 GMT
Subject: CN=617fb11e5d4e28e8c364b22e41ccd229bd53c4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:96:e6:e8:4e:21:70:4f:30:24:bb:5f:2e:7f:
92:a7:11:a0:c9:4a:24:a0:25:42:a9:eb:47:95:98:
78:1e:05:a4:bd:aa:5c:c5:a9:5b:6a:34:7d:e3:77:
1e:17:45:f5:ba:bb:2d:c8:b4:16:13:80:40:75:f0:
7d:0f:7a:eb:cc:f3:df:9b:a3:97:33:7b:d1:c0:f6:
ae:f0:a9:34:82:64:bf:c3:2e:47:d6:92:e0:4c:41:
5a:43:17:09:df:29:ad:0c:09:6d:b4:48:7a:e1:84:
54:37:7a:cb:6f:53:44:1f:09:a5:9e:8c:f6:e0:d2:
8f:4e:95:2e:8f:c0:4d:f9:25:97:7a:65:ad:bb:7b:
88:84:31:0f:46:0f:8c:fd:b7:23:f8:95:b8:2a:4f:
16:26:cc:c0:04:71:4a:22:85:bb:82:27:86:bd:92:
3d:67:ae:36:ff:bb:a2:64:08:d6:18:f2:32:2f:b2:
25:83:38:db:94:95:16:72:07:65:3f:74:ce:66:0a:
29:28:82:ba:fa:89:b3:37:b3:aa:3d:67:c5:0d:b6:
ac:b8:76:db:3e:88:1a:0a:ac:b6:34:6c:b0:7d:dd:
0e:e8:f1:fe:89:e6:cb:fd:0b:78:33:47:b1:4d:27:
66:90:04:59:a5:37:72:8a:56:b1:e9:fc:88:cd:12:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7F:B1:1E:5D:4E:28:E8:C3:64:B2:2E:41:CC:D2:29:BD:53:C4:D6
X509v3 Authority Key Identifier:
keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:84:cd:29:23:84:74:41:4c:d5:d9:fc:2e:91:b4:91:e7:d8:
f0:38:88:fb:d0:d5:78:13:b4:a7:9b:92:70:25:2d:2c:36:7b:
e5:18:05:33:7b:40:c8:8a:6a:14:ab:9a:e6:5f:0c:9d:7d:fc:
fd:66:9b:a9:b4:ba:42:55:be:36:cf:60:f6:b0:0d:e3:5b:1a:
ca:23:8c:5b:4a:81:9d:89:f7:1f:81:9f:c6:dd:d3:f5:da:a7:
a5:e8:96:43:ee:c2:59:a8:47:62:bd:97:43:f8:c6:18:30:28:
37:a3:a9:de:92:69:f3:c0:49:6d:7a:cc:c7:63:25:fc:df:ef:
a1:7e:12:32:1f:31:d1:da:33:56:1a:96:d8:07:e6:e9:f0:5f:
f1:24:eb:2a:7b:d0:cd:1b:8d:4f:2c:83:eb:b2:7a:50:9f:ee:
ea:56:71:e4:93:8c:6e:72:9d:c2:6b:ba:e4:ce:ab:eb:6a:72:
98:5f:89:40:b4:41:a7:ac:ac:39:bf:67:ff:71:1b:16:b2:6d:
9a:7d:c9:5b:fd:77:20:71:d1:bb:d2:22:4e:86:12:d8:26:f1:
2e:3e:59:a3:e3:a9:43:bd:e2:1a:fc:f7:03:bb:a5:5a:71:46:
5f:fa:b1:95:54:a2:59:3b:58:37:66:7f:01:05:3b:82:b0:12:
37:c7:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:17:55 2025 by rpki-client