Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: dlYYZpKajYVPXYCHZPOYhJmy5zZ3toYMnZDpIeXzqaY=
Subject key identifier: EA:79:58:FD:F3:91:8F:84:64:B7:DA:7F:80:81:6C:94:C9:05:02:BB
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019A7149A9FE19D2B60E8B4A770935D6EB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 068F
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: ADwJyFTnSoqJo76cybY4gze7w-A.roa (hash: ywnZb2Gs7P4sK9InqI7FaEEZlSRwjtQHnM1qlayDDgw=)
2: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: i3P1ZsP4EmDbM+xo2okFzpewUj0X9tbOjMatPKXhrJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a9:fe:19:d2:b6:0e:8b:4a:77:09:35:d6:eb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=ea7958fdf3918f8464b7da7f80816c94c90502bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:d9:49:5f:8e:31:57:a1:68:a0:c6:3a:ca:
39:30:36:9f:a7:5c:a0:c9:9b:35:4e:34:c4:5c:1c:
d2:ea:d3:5c:ab:cb:42:be:53:29:45:c8:ff:fe:94:
d4:88:c5:e4:3c:87:b3:41:d2:47:78:b7:b5:60:6f:
e9:f8:97:2e:95:d1:fe:e3:50:a4:b7:72:98:16:fe:
ca:4d:5a:c3:ce:91:6d:ab:b5:59:c9:0b:62:4f:13:
8d:07:9d:85:7d:a1:2d:91:f8:d5:64:ef:9c:56:0e:
41:cd:9b:ef:cb:cd:cb:c5:0d:6a:14:a6:17:32:1e:
76:fb:74:15:63:c2:f3:52:48:68:c8:bb:c8:85:e9:
41:e9:ca:78:82:1f:7d:01:d3:f2:a8:b2:3b:f7:99:
e4:df:71:b7:ae:5c:e1:f0:0e:6e:b3:53:e8:44:e5:
bf:d6:68:6c:2a:31:34:69:7e:8c:3b:04:ad:7b:b6:
89:de:fb:00:fb:3d:b6:44:3e:38:a6:36:17:c2:54:
88:d3:04:b2:85:9f:3b:6f:fe:58:b0:79:b7:f8:3a:
b2:88:5f:3b:36:46:43:96:08:da:7e:d8:fb:3f:3c:
64:41:4b:7d:61:be:78:5c:91:1f:2e:4c:04:bd:2a:
d7:21:bf:19:c9:ba:a2:45:5e:70:33:32:16:9d:80:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:79:58:FD:F3:91:8F:84:64:B7:DA:7F:80:81:6C:94:C9:05:02:BB
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:37:a8:fc:d2:80:aa:17:d6:95:53:96:4c:c0:8c:67:72:9f:
79:34:73:65:bb:69:c3:9b:49:d2:d3:d5:95:b5:b5:c4:3d:4f:
e6:36:65:ac:5d:17:ec:62:ba:62:ea:8f:67:15:41:e0:bc:d1:
19:b8:7a:a7:b0:b8:e2:98:e1:25:79:a4:a3:45:0e:f0:92:4c:
67:ae:8b:c8:44:5d:b1:67:5b:cd:4a:00:5e:be:1e:5a:f6:c9:
86:88:62:54:86:b3:f1:b4:dc:0f:d3:1a:8f:54:d6:6e:c5:dc:
a5:3e:a8:26:00:9b:35:ec:34:86:25:f5:2f:b6:43:c8:de:d0:
70:b8:d6:09:85:d8:a1:1f:db:ea:b3:c2:8a:6b:c3:5c:bd:e1:
8f:00:7b:ac:8b:e0:4f:78:d4:ed:13:63:81:16:60:de:f7:f6:
b1:f9:68:8c:a5:b2:8f:ec:bc:9c:04:ec:03:e3:1a:59:83:67:
97:ad:62:b0:66:93:80:be:e0:75:be:c5:0b:45:45:30:80:de:
e6:ec:07:ab:48:50:0e:37:8b:35:e0:d7:ca:b2:e8:82:1d:94:
73:88:44:1f:fe:a6:0c:0c:b9:ec:1e:49:61:4a:7d:f7:e2:ac:
14:f6:c6:24:2e:66:84:46:30:c0:6e:e5:c4:99:89:69:ab:08:
77:37:94:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:48 2025 by rpki-client