Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: 9DWuVlMWHfK3ESb0EP2q7R6tPjqJRJl1DCb/aKGC4bo=
Subject key identifier: 19:2F:66:39:D2:A7:0C:3F:5C:63:AC:67:9D:86:78:4D:74:70:EB:1F
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 019A729328FD355118D98D392F83E1FC45AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 0588
Signing time: Tue 11 Nov 2025 11:00:38 +0000
Manifest this update: Tue 11 Nov 2025 11:00:38 +0000
Manifest next update: Wed 12 Nov 2025 11:00:38 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: RgiRV8BKLTmmAAJxxOZEqU2LYPeKhClcgQcNqhtIzVk=)
2: yETJRCulpX8WNZcfOAFqy72Srf8.roa (hash: mwiJGcKb2MAwWuqaRGZUo2KeH/efjz418z+bxhMih0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:28:fd:35:51:18:d9:8d:39:2f:83:e1:fc:45:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Nov 11 11:00:38 2025 GMT
Not After : Nov 12 11:00:38 2025 GMT
Subject: CN=192f6639d2a70c3f5c63ac679d86784d7470eb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ae:dc:01:f5:06:9d:63:66:20:07:dd:70:04:
78:54:2a:f6:84:49:bb:d7:b0:69:61:72:4a:2d:3d:
60:1e:fe:b1:d2:4a:69:0f:b2:5e:da:dd:c4:fd:52:
6b:5b:ce:8e:47:30:3f:c5:de:68:33:b0:f4:8d:36:
fb:44:f3:4a:8f:d8:8d:fc:93:ba:ad:23:2a:58:d2:
87:7a:55:df:fb:5e:55:4d:d4:e4:4e:ec:ac:7e:de:
9c:a3:4d:10:44:0a:f9:8f:ad:8e:8b:c5:d3:23:c9:
70:59:fc:7c:ca:bc:f4:e6:1c:af:db:94:29:47:40:
80:0c:a6:f7:79:c0:1a:00:c0:d0:68:1c:a0:3f:09:
e0:6f:54:d5:81:89:0f:38:6e:03:b5:5f:18:e8:cf:
93:cb:10:9a:57:e9:7c:67:8e:9e:54:2c:44:7c:66:
46:00:4f:d4:a4:bc:3c:62:65:48:b5:45:9e:6a:02:
f7:40:38:a2:a5:0b:86:de:fa:ed:b3:fe:02:59:a4:
ff:58:ed:03:d5:1f:26:57:8c:aa:bb:0c:0a:55:1d:
36:d1:78:a0:06:a9:5f:28:c5:ee:dd:a8:08:f2:70:
34:52:4d:58:7c:ca:27:33:c8:fd:24:f1:a3:c1:ac:
d7:c2:37:a0:85:bd:50:6f:72:70:c4:bd:3d:68:e1:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2F:66:39:D2:A7:0C:3F:5C:63:AC:67:9D:86:78:4D:74:70:EB:1F
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8d:46:94:10:f7:76:3e:c5:ed:23:39:e2:22:b2:5e:c2:d8:
78:2e:60:98:c7:a4:51:4d:b9:89:61:49:32:2a:0f:71:a0:47:
de:f5:f6:31:d5:40:39:ac:90:d3:bc:74:8d:8a:3e:6e:b8:f3:
cd:db:4e:a1:6f:f4:7e:b9:07:50:91:2f:9f:be:40:b6:90:ee:
51:d3:44:d3:02:83:b6:5e:6a:78:60:29:79:35:f9:09:5f:22:
d1:29:9e:0a:73:ae:bb:9a:de:21:19:89:84:8e:1d:b0:d7:4a:
0b:f8:a8:28:57:a9:54:f7:3d:b6:e1:d8:4f:77:ff:3b:ef:5f:
b2:e2:3f:ea:b6:5f:0d:76:67:59:02:7a:44:12:30:05:05:85:
a1:25:54:d8:57:38:a0:f2:7f:7c:4a:77:73:6e:10:8d:1a:73:
55:57:50:cd:87:41:59:1a:11:8c:c5:ef:14:f8:83:82:6b:8b:
bf:06:e9:4a:af:d1:77:f3:3c:40:1b:cb:55:97:6f:0f:42:84:
b6:92:31:b1:a1:f2:5f:33:24:c4:42:d1:c2:f8:03:ea:a0:5e:
10:dd:90:cd:69:1c:7c:a6:4d:93:18:e4:42:a1:b6:64:f5:cc:
24:74:ac:29:90:89:44:aa:f4:78:59:b8:37:9d:b7:c3:4d:e9:
ec:8f:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:10 2025 by rpki-client