Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: uSIEzqJACdIt5GvxFtYMite+YR2ngUTKvm/4EUH0kz0=
Subject key identifier: 2C:37:AB:3D:5E:32:AD:FE:8F:73:2C:85:AE:27:5D:82:7C:AF:1C:A9
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 019A4EF559DF761D3A8FAC4E29DC2395EBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 128B
Signing time: Tue 04 Nov 2025 13:01:33 +0000
Manifest this update: Tue 04 Nov 2025 13:01:33 +0000
Manifest next update: Wed 05 Nov 2025 13:01:33 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: JSpN8Cgkj99Khte48wHwxGF/7nUt1yJtA9LzfK5gHSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:59:df:76:1d:3a:8f:ac:4e:29:dc:23:95:eb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Nov 4 13:01:33 2025 GMT
Not After : Nov 5 13:01:33 2025 GMT
Subject: CN=2c37ab3d5e32adfe8f732c85ae275d827caf1ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:a9:e8:ab:89:a8:96:ed:91:9b:41:5b:ca:
7c:3a:9a:f2:58:d3:56:18:ee:03:f0:59:ca:f2:64:
32:29:ea:b1:01:55:f5:89:f3:31:3d:16:b2:38:b4:
14:53:04:87:42:79:9f:c8:df:d0:bf:5b:f1:e3:d1:
94:16:fe:fb:35:0d:ba:af:ba:96:a9:4d:78:b0:88:
ad:ea:42:ec:6c:46:57:4d:9c:64:a9:86:b2:bf:4e:
06:52:23:46:03:d6:fc:79:fb:95:55:bb:0c:5c:c9:
87:8f:f1:a6:75:41:cf:87:61:ea:23:10:06:2f:41:
0f:18:57:a3:0d:ea:29:6a:00:f5:44:7a:07:7d:c3:
28:d0:c1:e9:53:21:e2:43:35:04:05:ac:e4:43:67:
7b:5d:3a:98:e8:2b:33:d8:7d:00:b0:ef:75:ff:f5:
f0:58:b9:9e:90:2d:0d:d7:e5:54:7e:96:63:ef:0b:
84:90:ae:7a:19:a8:59:49:5e:30:49:a9:ff:e0:a5:
00:14:4b:0f:1c:51:4a:48:33:c7:0c:16:bd:e4:47:
2a:5d:5a:56:9c:4a:71:da:a1:9c:49:c9:db:5b:84:
d8:08:90:90:ed:5e:4f:4a:eb:95:2c:cd:1a:a0:c6:
a3:a2:95:7b:97:33:37:86:1f:d9:5d:c6:9c:6c:2b:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:37:AB:3D:5E:32:AD:FE:8F:73:2C:85:AE:27:5D:82:7C:AF:1C:A9
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e3:16:79:1b:0d:23:52:06:3a:84:33:bd:df:72:08:5a:58:
84:a9:c3:fd:d2:d1:76:9b:f2:e5:f6:95:98:4e:cb:1b:33:9b:
36:ed:56:88:b8:1f:56:9c:ac:f8:e1:07:61:f3:c0:48:54:3c:
1d:5c:d7:14:10:18:d2:e3:f6:0a:76:62:d7:18:80:df:3b:97:
0e:f3:93:6a:01:07:8f:32:43:42:26:b4:19:24:02:3c:86:a9:
3a:65:fe:4f:38:e7:6a:31:b6:45:5c:81:35:e0:92:03:41:f9:
bc:4f:a5:ad:bb:a6:8e:52:5c:82:ee:72:0e:51:0a:bf:e1:bc:
5b:70:85:af:d8:59:ba:f9:69:32:05:ac:79:2c:b9:04:fd:f4:
30:18:bc:00:e4:b3:8b:f3:dd:d7:a5:7e:d2:ce:09:c3:3e:7a:
07:c7:62:a3:03:44:bf:55:17:b2:d6:d2:23:2c:8d:a1:cb:7a:
9c:cf:75:22:2a:de:26:0f:2f:69:b4:ae:f1:9d:c8:05:b2:b2:
2f:01:b8:20:13:f7:29:b8:53:3c:11:d2:86:2f:ab:1d:ba:a3:
08:9a:86:09:34:17:70:17:f6:47:f0:7e:29:79:a7:af:29:47:
66:18:2a:65:63:b7:ab:0e:5b:6a:d7:40:5c:f7:32:99:ca:15:
ae:bb:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:11 2025 by rpki-client