
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
File: CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json)
Hash identifier: 7wjbhPUi+3EqQfEK/vVgHaBt7nvmDnzhft7BzsQ+9vE=
Subject key identifier: D8:5F:0F:39:A8:D8:15:9C:96:3A:F2:1B:3B:B0:D8:61:45:AA:AA:D6
Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
Certificate issuer: /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Certificate serial: 019A4F629F04CF1830016411FA2A44F14193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
Manifest number: 0892
Signing time: Tue 04 Nov 2025 15:00:54 +0000
Manifest this update: Tue 04 Nov 2025 15:00:54 +0000
Manifest next update: Wed 05 Nov 2025 15:00:54 +0000
Files and hashes: 1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: WUNptTsXK90rSNY3AipCx9l8sC7f0wYiBbly7Dh7XDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9f:04:cf:18:30:01:64:11:fa:2a:44:f1:41:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Validity
Not Before: Nov 4 15:00:54 2025 GMT
Not After : Nov 5 15:00:54 2025 GMT
Subject: CN=d85f0f39a8d8159c963af21b3bb0d86145aaaad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:03:ed:b2:59:42:41:53:3f:84:3c:1c:ac:
55:56:92:7c:84:a7:89:9d:b4:d3:91:f8:99:6a:73:
3f:42:fe:24:55:d0:df:1c:ad:10:ae:bf:d2:c2:05:
d6:c0:a7:4e:51:ab:30:48:ae:8e:85:70:6a:d7:63:
d4:3a:04:3f:68:4a:08:57:bb:47:d6:f5:66:64:09:
28:8d:36:9b:bd:72:c6:e3:0e:df:5d:1e:06:55:1e:
ab:c5:ea:3a:c5:51:1b:16:1b:1f:7c:32:22:2b:e6:
4b:70:81:e7:3f:31:ce:82:b2:79:13:99:0e:a5:9e:
ca:e0:98:e1:06:a0:3d:06:7c:6a:2a:20:21:5c:11:
d8:35:9f:7b:4c:02:e9:77:6f:5a:5c:83:2d:58:81:
41:6c:e9:cc:9f:82:74:35:88:bb:af:13:43:f2:ad:
75:3b:b4:47:14:c2:da:5a:30:61:d9:fe:23:7d:ce:
09:ac:81:db:18:c3:35:f2:30:48:7c:e8:48:69:33:
c8:40:56:07:8b:22:4c:ab:c2:e2:68:a1:be:0e:d1:
c7:78:27:41:5e:96:8c:44:f3:76:1d:8b:f0:e0:44:
5c:9f:8f:d7:15:f0:27:8e:44:7c:72:eb:c2:33:27:
20:e6:b3:8d:85:68:8c:87:b7:24:7b:ad:73:58:e5:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5F:0F:39:A8:D8:15:9C:96:3A:F2:1B:3B:B0:D8:61:45:AA:AA:D6
X509v3 Authority Key Identifier:
keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e3:b4:99:b9:03:31:91:8e:71:2d:86:ad:cf:ea:cf:6d:81:
31:f9:f4:c5:eb:cd:e2:5c:1f:9b:91:46:74:f0:39:d2:2e:1d:
a7:fc:41:40:2f:3c:a7:ab:e2:58:dd:31:50:f8:42:e6:32:f6:
23:7f:08:88:4c:dd:f0:09:dc:c6:22:9e:47:00:19:a3:d1:26:
b3:7c:e4:b2:df:4f:26:e7:68:0b:5b:e8:52:f8:e3:95:67:4f:
cb:90:13:a2:c7:7c:f6:cf:41:84:ec:87:46:4c:60:26:7f:e3:
94:d1:40:96:89:9c:4c:c3:9f:d8:3f:2b:93:52:21:a0:32:e1:
20:bd:a8:c0:f5:cc:b2:0d:d2:83:61:77:a0:c2:bc:84:6f:60:
5d:ad:fc:a7:d1:7c:39:44:1b:30:9e:38:fb:74:68:2d:32:ce:
b0:4c:f7:b4:ed:d7:96:90:d8:95:06:97:23:df:77:30:8f:58:
f6:88:2a:5f:32:8d:2a:9b:8b:52:7c:85:7e:46:eb:57:6a:f2:
b4:8b:b2:47:08:c4:05:f2:6d:ec:e3:68:5b:99:24:ea:4b:2e:
d3:8f:55:02:59:16:02:8c:89:16:ac:30:fd:ac:c8:2c:59:d1:
16:73:74:63:66:9b:1e:1b:dc:c8:c2:8a:29:0a:3b:cf:9c:9e:
d2:ce:02:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:32 2025 by rpki-client