Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File: CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier: 5uCzZjuDDxfkSqT8EwQlsb8hK41yctMdUDzyEIGzfYs=
Subject key identifier: EB:21:55:8D:69:51:38:9F:16:31:6F:0E:CA:14:A2:A5:EF:F1:72:6D
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer: /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial: 019A6D3670A70EF28847F7A55DA96723CD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number: 04A6
Signing time: Mon 10 Nov 2025 10:01:15 +0000
Manifest this update: Mon 10 Nov 2025 10:01:15 +0000
Manifest next update: Tue 11 Nov 2025 10:01:15 +0000
Files and hashes: 1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: EkwcpteDDoS73XydqbBjXxI30bUJUz3F2IwW2CV/bvU=)
2: VWgiKeUlZyr_tkfBtwpTnh3j5es.roa (hash: F+rSoMMmSh1ZRMmb8OY6V8ChtegfB1X8DkMugPNoNpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 08:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:36:70:a7:0e:f2:88:47:f7:a5:5d:a9:67:23:cd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
Validity
Not Before: Nov 10 10:01:15 2025 GMT
Not After : Nov 11 10:01:15 2025 GMT
Subject: CN=eb21558d6951389f16316f0eca14a2a5eff1726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:d4:e4:78:03:2f:1c:61:45:d2:b9:19:11:
c2:39:b0:8c:1a:38:d7:bd:64:1e:8a:ba:37:ec:c2:
bf:e3:e8:b8:a6:ad:7f:42:5b:29:8d:ea:1a:6a:82:
ea:a0:34:b4:8c:28:e7:4a:d9:f5:33:89:6b:52:85:
33:64:72:6b:af:4d:cf:88:4c:c4:49:d7:85:80:5b:
5a:82:e5:ae:d4:3c:53:8a:2c:e3:a0:a0:ef:f7:35:
14:74:0b:e1:34:93:97:6a:46:52:9b:c1:d5:9d:07:
6b:27:ca:ee:13:48:35:3b:a3:52:a3:16:ef:95:aa:
36:c1:71:4f:2c:50:40:70:43:c1:55:37:9c:18:12:
41:f6:c0:fc:25:93:9c:e1:3a:1b:d1:87:d2:a2:01:
ba:17:c7:a6:ba:2e:f3:e0:70:cd:be:71:fb:2a:ae:
74:b3:84:7f:89:20:ba:53:b9:8d:58:17:10:ee:e6:
8a:e4:5f:0b:15:88:2a:2a:6d:1a:27:19:43:85:90:
b8:e0:97:cb:08:a0:da:a2:53:dd:3d:ec:61:e2:94:
e9:09:36:b8:c3:23:6d:f2:91:a6:da:6a:c1:34:89:
4f:ed:48:99:8f:c9:07:f7:b3:0b:fd:f3:55:40:d5:
c0:88:d7:27:05:48:0c:21:67:b0:27:df:58:ef:70:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:21:55:8D:69:51:38:9F:16:31:6F:0E:CA:14:A2:A5:EF:F1:72:6D
X509v3 Authority Key Identifier:
keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:32:e9:63:de:fb:e1:56:f1:f5:66:1f:b6:d6:38:80:94:6b:
c8:fd:29:09:c9:01:4b:79:92:4d:78:6c:a6:4d:5d:51:25:bf:
81:fd:52:5a:82:f7:50:34:85:2b:e1:f7:49:70:89:89:6f:f3:
1e:21:cd:a6:db:14:a8:03:47:da:03:35:e7:c2:87:99:1b:03:
70:fd:45:6c:67:8b:82:94:58:83:81:19:67:a8:55:28:e0:39:
dd:a9:3a:6d:04:e2:77:81:13:2d:bf:2d:bb:db:30:3e:f2:17:
0e:d1:7d:f4:b5:31:ce:df:ff:3b:5a:e3:4e:ec:e7:32:1a:b9:
3f:d1:b8:d4:6f:a5:cb:f6:9c:d2:18:b6:50:49:9c:e0:84:d1:
c6:eb:d5:ab:3c:6e:3a:9f:82:3e:75:04:8c:3a:cd:17:8f:5c:
aa:dd:fc:20:ef:3b:a6:68:45:a1:ca:75:22:23:96:e3:f4:dd:
16:cb:0c:3e:cb:2b:cc:07:35:7c:64:a0:a2:52:be:8b:37:30:
20:a5:b7:b1:d3:de:4e:90:a3:1a:6a:28:f5:65:36:4e:c6:94:
b6:7b:4b:b6:f5:14:e4:78:e5:b4:e6:a1:c3:68:48:8e:b4:8e:
69:03:3f:db:e6:e2:75:45:11:1c:62:80:b7:fa:b5:7c:3b:f6:
ab:ca:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 16:02:47 2025 by rpki-client