Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: Lmz5SemB4VyOB56LK8QWfppKrfuWKUqG7dmPe/MNvPo=
Subject key identifier: D7:6B:AC:B8:25:32:0F:52:5A:60:1B:5E:67:9F:30:F0:03:E7:95:DD
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019A511950E29E327E1853A8E9090B2DCE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 012C
Signing time: Tue 04 Nov 2025 23:00:04 +0000
Manifest this update: Tue 04 Nov 2025 23:00:04 +0000
Manifest next update: Wed 05 Nov 2025 23:00:04 +0000
Files and hashes: 1: B6o2wE6gWawQ2uIluRfTifNoqUE.roa (hash: lR7hCY7gYNPQXdb9GPeTgExNM9M4E71Exsz4LaS2qQc=)
2: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: oEJyz7WE81pXbDH+LI2oYSm4gAQQ/w/cBEUoNvXo/lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:50:e2:9e:32:7e:18:53:a8:e9:09:0b:2d:ce:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Nov 4 23:00:04 2025 GMT
Not After : Nov 5 23:00:04 2025 GMT
Subject: CN=d76bacb825320f525a601b5e679f30f003e795dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:f7:13:3a:d4:0c:dc:7b:bb:79:d6:d3:fa:
12:b9:0e:e7:00:49:12:9e:b9:e1:8a:8d:fa:b8:c7:
18:cc:76:f5:c1:15:59:78:fd:48:e6:4d:67:31:a7:
55:4a:60:5d:2d:5f:c1:da:9d:7f:a2:54:e6:f1:7c:
9c:d9:c3:a5:42:36:b6:01:a0:c5:d0:a7:8c:27:96:
1c:54:f6:14:d4:ed:76:83:b3:ac:66:12:0c:6a:77:
ae:3a:af:b7:19:45:1a:55:7b:87:0c:4b:1a:ec:7d:
dd:42:ad:9f:3c:99:b6:a1:fa:0d:bb:a9:ba:4c:39:
d9:cd:2f:60:56:6a:45:40:95:17:0c:ef:cc:19:ef:
a2:a3:5c:0a:34:ef:21:34:1f:f1:31:89:65:02:79:
39:16:cd:5d:6d:b2:ee:cc:ee:f5:f3:d0:28:1e:b2:
45:c4:03:5c:13:f8:6f:69:6f:2d:9e:c7:cf:36:6d:
98:70:07:21:5f:2d:aa:fe:9e:45:18:64:4c:62:5e:
36:cc:3d:25:fd:86:25:b7:93:81:e7:14:94:e9:8b:
31:d5:66:04:56:83:e1:31:fd:55:05:9d:f9:1e:e6:
93:af:ce:6a:af:f3:40:d2:87:40:ba:90:51:52:65:
33:2b:b0:0d:dc:6f:16:9d:cd:12:a9:60:e5:f4:4c:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:AC:B8:25:32:0F:52:5A:60:1B:5E:67:9F:30:F0:03:E7:95:DD
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e6:66:f3:db:66:28:73:9d:53:e2:06:b7:ee:1a:f4:d1:1d:
9a:e7:3c:b5:46:ed:22:8d:6a:42:55:cd:68:29:29:a0:4f:ec:
00:15:74:2c:7a:28:78:00:ed:31:58:16:46:d8:13:c8:57:18:
47:8c:71:d9:7d:ea:9e:b8:73:d3:81:9c:d7:af:e0:13:db:b0:
24:f5:8a:22:ec:8e:a7:b2:3a:0d:0b:91:32:e0:27:ab:b4:24:
67:82:9a:2e:b6:2a:2c:bd:80:4f:56:44:f7:08:bb:06:96:e3:
8a:c1:88:a7:a1:fa:e8:c4:cd:46:74:b7:69:af:3a:2c:ba:ba:
16:2a:a9:5b:3c:8b:49:ac:49:6b:3f:eb:ae:50:9d:b3:b7:ab:
e7:1e:4c:16:a1:2e:8e:2e:6f:64:49:f9:bd:90:06:f7:ef:d0:
76:43:89:75:82:39:43:ed:69:79:0c:1a:b5:49:53:d9:34:c2:
04:a8:84:a8:7a:ef:f8:75:ae:be:3c:4e:f2:98:5a:e8:41:77:
6b:2b:c1:f0:d6:cc:ef:2d:47:26:fb:9e:62:56:d4:f3:0e:5e:
1f:05:af:0c:fb:fd:7c:44:06:09:5e:d0:d9:76:f6:d0:11:06:
18:30:c5:ee:fe:bd:98:e6:e2:76:3f:86:80:d5:be:ab:43:ad:
41:b9:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:41:50 2025 by rpki-client