Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: oXxlyFGpBSviFYjtqfNNF6de7tklG8U6z3K1CJfQOdk=
Subject key identifier: B7:FE:BD:90:F1:91:03:4C:51:5D:8A:7C:E2:12:2D:5D:CE:13:09:5C
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019A7149ADEB6E19B33AA8694A05B3B0726C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 10A9
Signing time: Tue 11 Nov 2025 05:00:45 +0000
Manifest this update: Tue 11 Nov 2025 05:00:45 +0000
Manifest next update: Wed 12 Nov 2025 05:00:45 +0000
Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: cFrIzQ6YH9M1dgiHSLNSGiAKAiV29NJAlAeZ5LF8A9s=)
2: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ad:eb:6e:19:b3:3a:a8:69:4a:05:b3:b0:72:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Nov 11 05:00:45 2025 GMT
Not After : Nov 12 05:00:45 2025 GMT
Subject: CN=b7febd90f191034c515d8a7ce2122d5dce13095c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:d5:e6:4a:96:67:d0:fe:8e:ba:51:89:e5:
d1:a3:c7:62:7b:82:6e:3b:a5:70:c6:fd:5c:ab:95:
53:f4:c8:48:36:65:c7:ca:d1:21:2d:c7:be:cf:32:
de:eb:57:3c:d3:36:33:af:1b:89:aa:46:6a:e2:dd:
54:a3:b2:ac:7d:8b:70:0a:6f:a8:fd:9b:2a:fd:c3:
1d:4b:f4:94:c4:f9:f4:18:37:73:1c:30:5d:2f:6b:
0f:92:c9:df:7f:31:44:61:4e:0c:67:58:66:7c:4e:
88:f9:ce:0d:6e:e0:92:9b:d4:bd:a5:b9:c6:01:db:
e6:e9:d1:ee:50:b1:0d:35:fe:72:82:c9:ae:5e:51:
49:64:9d:88:e2:72:51:70:5a:8a:17:50:62:7c:37:
e1:a2:d6:a1:c4:98:4c:b8:8c:38:21:40:d0:e0:36:
d4:e8:6c:b7:2a:2a:6d:df:d5:11:6d:02:d9:ac:03:
c2:ff:58:57:0b:a4:f9:ce:fa:e0:b7:4d:e5:07:a1:
0b:97:26:5a:4f:b0:9d:70:08:33:1a:1c:d3:e1:b1:
5c:73:0e:7c:32:37:f6:a2:b7:b7:e7:76:14:55:aa:
b0:b6:60:e1:9c:99:d0:75:c2:4a:ba:19:37:6b:b4:
d7:28:f4:9a:96:59:7f:c6:c1:2d:e2:37:87:37:f6:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FE:BD:90:F1:91:03:4C:51:5D:8A:7C:E2:12:2D:5D:CE:13:09:5C
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d7:64:bc:d7:6e:ce:82:e7:f5:33:41:35:c0:31:a8:7c:b6:
a5:15:6c:73:a2:47:08:06:a9:82:55:ca:fb:df:f8:5b:54:2e:
b2:87:a3:e7:27:21:6c:9e:93:10:00:e6:32:c5:56:f7:54:bc:
7f:f4:70:98:34:8f:40:77:f5:73:a7:1a:38:72:e1:6b:97:30:
cf:b5:4f:f0:8a:a4:37:30:43:4b:ea:b1:3c:5c:02:7f:d8:b4:
82:09:40:c9:bf:6e:6c:2c:81:b9:f6:83:d9:ff:38:2a:e8:81:
34:bb:0a:20:6e:b9:56:a7:e2:5d:3a:b9:e1:5c:a5:e4:b5:6e:
af:7a:6e:37:d1:93:c6:07:0c:ce:49:c9:86:09:df:34:9b:8f:
6c:e5:1c:42:32:3f:c7:8e:d7:16:f5:aa:42:79:eb:c5:1b:eb:
2f:64:2e:25:87:a9:b3:9b:b8:cc:da:20:ce:95:08:4f:78:4f:
12:ff:73:49:e0:19:69:85:86:dd:4d:c0:c4:8c:42:92:40:68:
ca:4f:6e:e3:0c:81:fb:c6:3e:df:41:4d:8c:f7:95:15:da:1c:
7c:e8:bd:b7:80:90:07:8d:29:c6:c6:8b:7a:71:f7:70:7a:73:
98:88:12:6f:0f:53:ae:00:1b:55:e9:9d:1d:26:5b:4d:2d:6f:
39:14:34:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:21 2025 by rpki-client