Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: Z4PgasfWRo/9lh5PO1BhL3A0sWgq3dldkiZLjP7CIh4=
Subject key identifier: 48:FF:B5:E7:EB:3B:C0:E0:BC:2A:89:1C:1B:E6:A5:26:65:3E:2F:47
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 019A24782201AA1AAE610ED8CB39A3FB73C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 07:00:43 +0000
Manifest this update: Mon 27 Oct 2025 07:00:43 +0000
Manifest next update: Tue 28 Oct 2025 07:00:43 +0000
Files and hashes: 1: 4tKIyKN2LpGytONfG9Wwzb3sMh8.roa (hash: So7qtpci+LVeK7KYvgn0X4FAkS3oDmYxiev+fG5cuSs=)
2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: 1Tf7RKrjDwmlCOIKnUoLq2PnhUaz0DlaWIlcS7+fxbQ=)
3: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (hash: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=)
4: rjFAvFxrdSB0H68aH_zK0lS1GcA.roa (hash: iKO/ulWqGpWzjwhANl857sDa0g01+J+R36f50OBJrb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:22:01:aa:1a:ae:61:0e:d8:cb:39:a3:fb:73:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Oct 27 07:00:43 2025 GMT
Not After : Oct 28 07:00:43 2025 GMT
Subject: CN=48ffb5e7eb3bc0e0bc2a891c1be6a526653e2f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:2f:31:35:93:b7:88:b8:72:33:78:d0:d8:
46:0a:81:7a:71:86:be:9c:6e:25:ec:4d:0e:3d:be:
55:a3:58:7d:58:12:3a:b5:b1:4d:04:32:30:17:8e:
60:1c:6f:0b:a4:66:93:44:61:2d:a1:da:18:56:91:
b3:b5:56:bd:af:05:dd:e2:59:a3:a4:ea:11:da:c7:
15:01:eb:20:c5:13:17:f1:0b:da:2f:ab:3d:e5:b5:
88:68:f1:75:ca:83:27:08:6c:fd:2d:43:4d:1a:74:
08:df:a0:19:84:49:7b:da:f7:93:52:7b:8b:56:86:
8e:3b:8b:78:01:0e:d3:4b:88:7e:27:eb:96:8e:c6:
c0:3e:ac:9c:e4:3b:dd:e2:59:f7:4a:75:64:03:36:
76:58:e9:c1:3b:d2:25:c8:2a:82:4f:0a:d1:3f:09:
3c:4d:a3:59:de:68:4d:8d:0a:74:08:f5:fb:3e:69:
cd:ef:0c:13:9c:ef:9b:3e:ba:8c:78:4a:26:42:42:
00:e5:b0:22:c7:a1:e3:6d:7d:8a:d5:ee:7b:73:8d:
ed:e2:10:fb:68:f8:ae:8f:da:91:ad:3b:20:cc:fc:
bf:49:3e:7d:2b:ec:85:cc:a3:81:88:c0:85:74:45:
b4:9e:93:4f:3b:1d:fe:4a:17:fa:e9:15:26:3b:80:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:B5:E7:EB:3B:C0:E0:BC:2A:89:1C:1B:E6:A5:26:65:3E:2F:47
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:71:bd:1c:3c:8a:ba:1f:5a:b2:83:c4:e4:d6:4b:7d:e6:b8:
2f:72:24:04:bb:20:87:db:4d:49:66:b0:f3:91:78:8f:28:c2:
11:c4:41:e5:cb:67:66:c0:0f:4f:1b:69:d2:fe:67:a8:f2:2b:
a2:d2:2c:4f:41:ad:9b:7b:ed:d3:8b:ae:21:dc:0e:11:5f:a2:
a4:98:61:de:5d:6d:a1:5e:9e:0b:d5:16:6c:fc:87:3e:eb:dc:
0b:f4:1f:99:fc:dd:28:81:ab:20:66:e9:58:6a:5e:71:e0:7b:
df:3e:04:b8:82:cc:5c:a8:66:68:8e:3a:c5:ff:d9:1a:01:a4:
70:8c:32:d7:ac:cd:61:22:44:ff:73:90:e6:4f:45:96:93:12:
a9:3f:6c:a5:60:ea:df:e8:aa:7c:08:cc:d6:4b:28:ee:a2:d4:
f3:47:fe:a0:fd:a7:ff:42:21:01:b7:ff:ba:0c:73:78:87:2f:
58:02:9a:90:23:f9:e7:3b:53:70:8a:f9:6e:75:3f:ab:b7:ed:
59:ce:12:f5:03:af:9d:f0:90:5a:33:d9:e9:dc:b9:60:88:93:
43:c6:5f:fe:7a:7a:8b:e4:90:a0:92:80:e5:2a:8e:12:91:78:
80:1d:5c:71:d5:47:6d:2f:31:21:bc:c0:65:b9:81:c3:50:88:
48:43:28:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:34 2025 by rpki-client