Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: fVJSiatp8YAFuxDa0AtAfGwMmBQXSm7nUX16VtaIumI=
Subject key identifier: 2B:B8:0E:E1:9F:DC:23:D8:25:0E:59:39:42:80:9A:D0:B7:17:D6:BC
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 019A4F99664BBB144DD8FCE0CD0490352039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 16:00:44 +0000
Manifest this update: Tue 04 Nov 2025 16:00:44 +0000
Manifest next update: Wed 05 Nov 2025 16:00:44 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: AfqKHxF1gZcSV2ygapeUrzKYPLlh3xhOelHvx6xROWo=)
2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:66:4b:bb:14:4d:d8:fc:e0:cd:04:90:35:20:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Nov 4 16:00:44 2025 GMT
Not After : Nov 5 16:00:44 2025 GMT
Subject: CN=2bb80ee19fdc23d8250e593942809ad0b717d6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:82:af:e8:61:20:99:79:cc:11:af:bf:1a:
90:cd:c2:dd:70:d6:21:05:84:c9:2f:2e:cb:07:b9:
d4:80:23:f7:58:f4:c8:0a:a8:8a:30:07:18:47:3d:
75:e4:17:a6:fc:82:39:e0:3c:6f:41:05:f0:b7:a9:
4e:f5:11:13:ce:68:3b:fa:d3:aa:ef:4e:e0:ed:d8:
2a:e8:59:8c:e3:74:d5:9d:4e:15:e0:b4:b0:94:86:
bb:4d:ef:a8:5b:61:7b:3b:8d:27:29:e8:90:98:8a:
b3:4c:94:f1:33:8c:8d:44:81:22:c3:ea:0a:da:d5:
e2:41:d7:64:ed:c7:64:a4:4e:16:9c:8b:5b:5a:4e:
81:34:50:60:88:e7:da:26:84:53:04:41:5b:5f:7c:
e9:fa:6a:eb:74:2a:48:97:63:e2:64:6c:34:97:4a:
57:e7:cb:aa:a8:cf:75:b3:89:d8:ec:fd:8c:60:a2:
3f:63:0b:b5:4d:96:1d:d7:da:88:43:90:e6:c9:76:
33:c3:a9:88:f7:d7:52:14:b7:cf:09:81:82:48:44:
ac:2b:de:e0:be:81:fa:8d:74:de:e5:6b:98:e0:ae:
b3:b9:9d:cf:89:b0:82:c5:c1:a1:64:e1:bd:da:0c:
48:df:b3:02:60:a7:0e:06:a1:f7:a8:03:ce:5a:dd:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:0E:E1:9F:DC:23:D8:25:0E:59:39:42:80:9A:D0:B7:17:D6:BC
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8e:4f:28:eb:78:ce:63:57:41:79:20:b1:3f:1e:b5:f2:52:
00:2d:49:83:19:5a:60:03:4f:5a:a1:95:3c:bd:b7:4a:9e:1d:
ec:7d:9b:dd:7f:0f:94:79:bb:1c:a4:fd:e3:db:88:96:5e:14:
63:f2:47:e8:9d:da:ce:0f:b2:a3:0c:06:eb:3c:b4:d7:22:4e:
0c:f1:74:e3:88:a3:d4:03:c9:0a:85:9f:1f:64:e4:a2:8a:9d:
b5:e7:35:ba:1e:6c:a0:54:88:f0:cb:e7:ad:07:98:60:79:bd:
99:2c:4b:5e:87:6f:6a:64:91:2d:a0:2e:37:87:8b:c9:5e:e5:
2d:d9:61:6c:ea:8a:f1:dc:bb:67:e9:96:9c:b6:c3:0a:23:b9:
8a:73:fb:bf:36:9c:90:89:5f:53:bb:3d:8f:88:ed:83:a1:3b:
2b:7c:f2:96:29:65:ac:8e:68:87:3a:e8:a5:f7:e1:02:d0:7b:
9a:15:3c:61:5a:f3:98:39:34:c7:02:cb:8f:b3:31:f4:1b:f0:
fa:12:c9:22:06:7f:ce:be:56:76:af:8a:75:85:53:21:57:70:
c2:b1:28:71:fd:21:fa:eb:68:d5:3b:70:27:56:e5:05:2b:de:
7f:f4:ca:72:df:a5:f3:e2:ed:1a:e1:4c:f8:cf:d2:9e:6c:f3:
5d:d3:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:57 2025 by rpki-client