Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: 2zSWFX2x2Bu4/vJlOmg5vh0RmgYy5FK712S4j+wjXec=
Subject key identifier: B9:20:59:20:A5:A5:8A:63:03:B4:30:C3:24:B4:64:44:F8:BD:B1:87
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 019A4F2AFF8F2C23F0E9641F30A1EABFA18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 0DDF
Signing time: Tue 04 Nov 2025 14:00:09 +0000
Manifest this update: Tue 04 Nov 2025 14:00:09 +0000
Manifest next update: Wed 05 Nov 2025 14:00:09 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: RcElLFL2EIZtPCsVIRu4PkhbvJ2GHxzbMt0DY7lb7N4=)
2: YFKVeEBJZW1VH1lMf1z8k2XR2dw.roa (hash: ktDo2PZ71KEenNsxjiVRbbwqRhzDhrH0f5p3Dle1h/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:ff:8f:2c:23:f0:e9:64:1f:30:a1:ea:bf:a1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Nov 4 14:00:09 2025 GMT
Not After : Nov 5 14:00:09 2025 GMT
Subject: CN=b9205920a5a58a6303b430c324b46444f8bdb187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:99:c7:0b:8a:9b:c0:eb:ff:2a:60:28:53:
31:3d:d2:9b:45:8c:cf:cf:9d:65:1f:8d:97:a6:9e:
8b:6d:79:e4:f6:45:4d:4b:1a:62:bf:da:96:ab:6b:
c7:b5:33:e0:d0:d9:21:71:bf:ff:db:9a:73:14:c0:
8e:81:4b:3d:a6:21:d9:3e:17:14:23:89:bf:74:87:
1a:b6:8b:fc:bf:de:81:8e:01:7b:4e:8a:68:5b:c5:
9a:b4:25:e5:37:d6:19:cc:d1:a9:f3:a7:26:54:df:
0f:8c:10:cc:0f:8f:02:ec:8f:5b:cd:f6:0b:04:14:
94:43:35:2f:fc:54:fa:92:aa:ae:26:67:7e:8c:fe:
78:d8:59:f1:76:a3:20:d2:14:e8:d4:6b:1d:7d:58:
6f:9d:1e:13:c8:62:97:b4:b8:03:37:d1:d6:3b:16:
d8:b0:3b:b7:5e:df:c1:18:73:ac:e4:3a:32:ad:4f:
6f:16:90:dd:02:88:43:46:42:1a:34:51:ee:c7:8d:
5c:62:36:e3:6d:86:b8:fa:b6:f2:4a:2f:42:bb:4f:
81:f4:de:5c:ac:eb:d4:c8:17:13:cc:93:54:08:2e:
b8:b1:49:72:0c:26:2c:ac:65:ff:6b:e6:84:0d:dc:
14:34:02:59:34:63:79:e9:44:92:05:ca:44:38:0f:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:20:59:20:A5:A5:8A:63:03:B4:30:C3:24:B4:64:44:F8:BD:B1:87
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:03:87:e0:cb:dd:32:81:b3:c1:b0:d5:d7:1f:b3:3b:d8:db:
d7:42:fc:ab:c1:48:14:10:cf:b8:ab:83:18:16:fd:29:14:5a:
af:7e:ea:dc:51:9d:94:ae:8b:f6:02:a5:28:66:71:53:b3:57:
ea:ef:2a:12:dd:43:ec:89:44:a4:25:1b:2f:73:08:d1:2b:48:
30:72:14:db:39:65:82:d9:6a:7d:26:3f:ed:5c:2a:a5:32:39:
f3:f7:5d:90:01:b1:57:df:ab:7c:3e:d4:d9:7c:eb:59:ef:20:
31:78:30:a1:fb:55:b3:64:2e:c1:05:17:6e:22:99:50:41:d3:
95:ce:f0:44:b9:a5:5c:a4:d6:e0:7f:be:87:74:b1:e8:81:34:
ec:c1:97:2c:33:85:c8:f0:1b:ec:7f:99:d7:f3:68:37:27:87:
76:e4:ed:25:f2:de:65:e5:83:d0:6c:b7:96:81:eb:a1:a8:b6:
6e:67:68:4c:f4:9d:cf:50:bb:2b:89:c6:8d:a5:d5:b0:7c:c1:
55:8a:53:8c:ea:3f:02:86:1b:7d:c5:33:87:a8:63:33:41:a5:
ca:85:95:83:58:29:6e:eb:0a:e3:8c:91:93:ee:62:9f:8d:46:
ff:64:71:7e:f2:84:6d:62:98:c2:27:e7:b3:a9:77:78:01:a4:
97:8a:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:00 2025 by rpki-client