Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: 2d5evhjgmCrWclxBYjSEHyXzIf1pHFvojLwlEAVbmrI=
Subject key identifier: 79:7E:48:03:FB:E1:5F:CE:85:7A:7C:7C:58:A1:39:6E:D1:5B:B0:62
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 019A71B86F74C3ECB9F3D759163AB3F6BD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 08BA
Signing time: Tue 11 Nov 2025 07:01:43 +0000
Manifest this update: Tue 11 Nov 2025 07:01:43 +0000
Manifest next update: Wed 12 Nov 2025 07:01:43 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: hcmt3iD0kd1chowfCNRSwEiXo1Hiek4TGvTCSCcYsUI=)
2: vQYaMoR9txyndSYv7p8Vy1-ysWo.roa (hash: q7GID5FIOuixp8y5Io1pyufdLHt0l/VDVy3RytUEJPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6f:74:c3:ec:b9:f3:d7:59:16:3a:b3:f6:bd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Nov 11 07:01:43 2025 GMT
Not After : Nov 12 07:01:43 2025 GMT
Subject: CN=797e4803fbe15fce857a7c7c58a1396ed15bb062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:67:f6:06:a5:43:81:37:33:08:1b:36:f2:af:
b7:4e:94:04:21:84:dc:08:61:37:f7:32:7a:0b:96:
91:da:5e:32:9d:7e:88:32:30:74:0c:0a:cb:2a:cf:
80:4f:a4:0f:f0:d8:c3:90:70:dc:81:50:d3:60:2e:
44:1f:98:18:61:39:19:b9:39:4c:92:8c:b8:57:17:
c8:3d:b5:e7:ab:47:71:0c:ff:f6:8c:4a:26:60:a4:
cb:a9:2f:47:ae:32:98:07:46:4f:92:c7:66:97:33:
01:59:bf:5a:25:c2:98:59:c1:65:df:dc:d1:16:33:
0e:88:61:ff:4b:00:ee:9e:84:9d:e3:ef:d5:2f:41:
33:30:6b:67:ed:40:53:e5:c3:02:0d:ea:b5:7a:a6:
c4:6e:c5:20:42:3a:82:fe:bf:66:c5:08:7e:fd:69:
4b:92:4a:dc:2e:57:f5:38:f7:1d:84:86:b5:93:db:
db:2a:91:f9:d2:de:fb:7d:41:27:71:97:db:60:99:
37:fd:22:6a:9e:18:52:84:29:20:6f:c7:0e:61:03:
22:1f:45:4e:95:19:3d:5a:05:6e:0f:e4:47:d3:8d:
6d:50:e5:90:2c:96:41:24:27:f5:35:11:7b:1d:92:
c3:20:9f:99:0b:d5:8f:c0:dd:7e:ff:f3:96:d6:ea:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7E:48:03:FB:E1:5F:CE:85:7A:7C:7C:58:A1:39:6E:D1:5B:B0:62
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0e:55:58:8b:65:4f:2b:ca:69:01:09:31:b4:f0:20:2c:74:
bf:71:d7:58:96:3e:10:b3:00:68:5c:49:43:40:fb:4d:1a:6c:
b5:94:c9:42:e4:a6:9d:c7:9f:1b:4a:b4:31:f9:c0:1b:e9:c3:
ed:09:27:dc:84:15:bb:1c:52:ba:d0:d9:bb:3a:c5:3e:b8:99:
bb:77:dd:4e:6d:84:b4:c0:e0:47:f0:9b:f7:dd:10:10:0a:38:
da:95:a5:75:52:29:cf:e7:af:06:a9:3c:d4:e8:6c:f9:03:f5:
c9:52:f3:a7:10:8a:30:7e:4f:e3:e3:1f:43:00:4f:c6:ac:59:
d4:ad:15:d7:89:7b:b3:49:f1:6c:77:b8:cd:67:36:de:a9:ec:
2a:ba:3b:b4:6c:ad:fb:a9:1e:46:a1:28:01:9e:b5:cf:3c:45:
b7:79:68:9e:6f:28:c0:56:7d:60:66:67:96:d1:de:d7:8c:1f:
8a:4f:47:6f:41:c3:a0:bb:a5:02:3f:00:91:72:a1:4c:bc:c7:
15:02:13:81:f3:a7:08:b2:67:34:70:e9:43:28:b7:f3:70:ea:
86:28:e0:a4:95:c8:61:0e:f4:a1:32:be:83:1c:94:9a:14:1a:
3f:8c:c5:4a:c7:c4:d1:4b:01:41:f9:02:9e:fa:39:d8:84:fb:
51:c1:13:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:56 2025 by rpki-client