Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
File: CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json)
Hash identifier: Fa/QilHuaJSv5vwYtSLhVRH60ijLUxkYuSB3MKSlvMo=
Subject key identifier: 99:52:B7:28:CB:11:84:1A:D9:F1:0E:17:6D:15:9D:76:2D:21:FE:37
Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Certificate serial: 019A4D742F4C6E0D4F215C0814CAA8DAD7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
Manifest number: 049A
Signing time: Tue 04 Nov 2025 06:00:51 +0000
Manifest this update: Tue 04 Nov 2025 06:00:51 +0000
Manifest next update: Wed 05 Nov 2025 06:00:51 +0000
Files and hashes: 1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: TEX5ofyzma4Yhx8RD3IXNVzcs7iwvV1uOZXzQDYrjtI=)
2: eHRO21DmqwNpVgTB2vD5a-Ys0dI.roa (hash: aBKp2xE7MsTi71gMh8o9d5bU6XkJQ/dv6sIkU9dHe34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:2f:4c:6e:0d:4f:21:5c:08:14:ca:a8:da:d7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Validity
Not Before: Nov 4 06:00:51 2025 GMT
Not After : Nov 5 06:00:51 2025 GMT
Subject: CN=9952b728cb11841ad9f10e176d159d762d21fe37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:da:08:94:53:5a:b8:0a:c2:17:6e:df:fd:
b0:2b:13:73:dd:b3:4a:d3:f2:51:78:ee:4d:f7:bb:
62:08:fe:55:5f:b7:01:25:8b:8a:4d:e8:a5:32:0f:
e5:ba:24:59:11:06:ff:33:9c:86:df:eb:a5:f1:21:
c0:63:58:12:c9:dd:3d:01:b0:a6:db:24:d4:60:91:
b7:49:8d:48:e2:f3:21:ee:45:e3:cb:ad:74:4c:19:
31:04:f9:55:be:b9:2e:f4:c3:a5:80:5f:d1:da:99:
21:22:26:f0:15:61:88:4e:f6:6b:c6:d8:49:40:93:
b0:54:7c:20:a2:2b:e4:89:38:ed:1c:76:6b:a9:98:
78:08:12:fa:29:57:d5:f6:9e:52:28:8b:01:11:a9:
eb:58:f7:15:e0:fe:b6:f4:e1:59:86:ac:44:7d:94:
bd:f1:b4:d1:a9:3b:6c:c3:4c:f3:5f:19:ff:cd:d7:
b1:04:54:32:c6:23:09:c3:ff:31:c6:43:e4:ff:dd:
4f:74:c5:4d:d1:7c:f2:c2:08:f9:18:0e:ac:c4:e3:
52:91:4b:de:42:84:ea:dd:25:3f:03:d4:e1:ed:c7:
0d:d9:f1:a7:9c:1a:5f:38:4b:60:63:49:1d:30:d9:
b1:11:67:17:20:20:29:15:e3:b2:7d:05:1b:95:45:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:52:B7:28:CB:11:84:1A:D9:F1:0E:17:6D:15:9D:76:2D:21:FE:37
X509v3 Authority Key Identifier:
keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:81:a0:e7:a7:69:d7:f9:c1:c5:66:5b:6d:9e:1b:cb:f9:16:
f9:41:a5:2f:77:eb:2d:bd:c3:da:28:3c:b2:80:fc:65:6a:54:
3c:a7:83:17:f4:dc:69:52:84:06:3a:df:b9:50:f1:3a:a5:93:
ce:c5:91:5b:8b:d8:12:86:7d:29:66:06:0b:a7:3b:c6:5e:39:
24:4e:29:3f:f0:a0:9c:e8:6c:c8:70:54:9f:50:2e:da:76:f2:
6d:bd:8b:de:0b:97:98:23:08:49:af:68:42:53:af:d5:41:64:
d6:ae:11:83:75:f2:d1:bf:3f:e1:52:17:0f:a0:52:15:3f:5b:
25:0c:64:6c:0e:f1:23:02:4f:50:af:0f:8b:c7:11:c6:cf:6c:
13:67:ae:61:ed:09:ac:4b:cc:6d:a9:72:85:04:cc:60:1a:bc:
48:7d:62:98:38:ae:f7:e3:c2:2c:db:d2:9d:a5:d4:6d:2d:67:
4c:f6:d0:15:c6:79:2b:e8:3a:49:e9:04:0f:41:43:69:36:18:
6a:e9:40:9c:92:35:82:1e:ab:72:0c:6b:2d:f7:3e:41:30:d2:
12:c3:17:5c:8f:2e:c1:d3:82:a0:4b:53:62:cb:8d:d8:59:fe:
e7:0c:ff:96:9b:a9:ef:a1:b4:b1:76:43:4e:da:40:f0:2f:8b:
19:57:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:37 2025 by rpki-client