Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: JUVZfuwLlYjKeBeMCXGg5F4KWD1QrFye+4xy4tnprf4=
Subject key identifier: 31:F3:0A:D3:51:6B:E7:A5:7A:F5:8B:AF:33:87:CF:F7:C6:47:D6:DA
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 019A26D411DECA3E6DF39D9419AA10BC12CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 1485
Signing time: Mon 27 Oct 2025 18:00:23 +0000
Manifest this update: Mon 27 Oct 2025 18:00:23 +0000
Manifest next update: Tue 28 Oct 2025 18:00:23 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: sQkDvzPcvIFUmOsW4hs1PuL8wfPFIfdfdHrTYdMC1C4=)
2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:11:de:ca:3e:6d:f3:9d:94:19:aa:10:bc:12:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Oct 27 18:00:23 2025 GMT
Not After : Oct 28 18:00:23 2025 GMT
Subject: CN=31f30ad3516be7a57af58baf3387cff7c647d6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:c1:24:e5:e5:96:11:8f:96:a8:b4:3a:c3:
03:b1:ae:ff:32:3f:6c:b2:b5:3a:84:9f:9d:31:b4:
35:b7:1d:b0:66:e2:ee:5d:72:07:fc:ac:82:d9:ae:
28:ab:41:88:aa:4a:58:9d:b8:ba:c9:2f:00:56:6f:
82:7d:37:cf:0f:05:cb:63:e8:00:d6:63:79:e0:41:
10:99:7b:35:c6:b8:ec:e1:f6:19:f2:8e:3b:de:a2:
4e:2a:93:c5:47:a5:ee:bb:36:e2:55:f3:d5:0e:bb:
80:b3:aa:dc:39:70:39:70:ae:11:25:50:81:6e:1d:
13:e7:b7:00:8c:20:1a:00:0b:dd:a3:46:a3:ff:0f:
75:68:82:6f:86:93:7f:ff:7a:2b:68:a9:90:71:02:
db:12:8a:94:82:12:d1:90:a1:98:5c:de:2a:db:aa:
fd:1b:88:c3:49:b0:92:63:30:c1:78:67:1d:70:6a:
10:20:dc:c7:b7:22:33:d4:c1:bf:dd:19:1c:12:88:
1e:ca:24:df:38:d0:f2:c3:cb:df:51:de:26:d2:9c:
2b:16:de:38:5d:44:92:44:8b:bf:1d:6a:cc:06:7c:
ae:09:66:dc:d6:d3:23:a4:28:4b:0a:d5:83:d9:5d:
fe:42:34:b3:1b:b1:1d:a7:71:49:64:1c:37:24:9d:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F3:0A:D3:51:6B:E7:A5:7A:F5:8B:AF:33:87:CF:F7:C6:47:D6:DA
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9a:17:62:30:11:3c:34:07:d2:a1:dd:ad:a6:4b:b6:c4:48:
9f:18:1b:43:a6:35:73:bd:aa:b4:4f:a1:12:eb:b5:c5:7f:e5:
63:e3:b7:fd:4d:5a:15:4a:6f:92:0f:4b:2a:50:df:56:dc:dc:
6e:a2:7b:1a:c0:ed:59:2b:f0:4d:61:8a:36:ec:37:b1:68:27:
f4:db:51:db:27:0b:fd:bc:af:10:8d:ca:65:87:f0:c7:3f:0f:
37:f4:b8:9f:b5:dd:31:f3:63:62:41:8a:36:0f:e9:f8:54:ac:
fa:a5:8b:84:52:06:f7:2c:10:5a:ef:8b:a2:ed:6e:b0:7b:f9:
cd:98:6f:da:15:cc:a1:10:7d:87:d1:f8:97:57:4d:83:92:91:
5d:6b:ac:00:23:c9:b9:79:89:bc:1d:60:30:80:43:53:02:66:
b6:e8:67:d2:26:f6:03:f3:3d:35:88:9c:1b:db:43:00:7d:31:
c3:15:0c:0a:fe:b5:53:03:2e:6e:88:f7:74:a3:34:ff:38:a3:
a4:ab:04:3d:07:81:a2:cc:99:ab:a3:cd:39:b3:4f:fe:44:37:
a7:66:d1:25:52:bd:fd:8a:60:8e:d4:12:8d:41:f4:9c:04:47:
e2:ac:b6:2e:30:ee:86:61:01:5c:06:ea:ba:73:c4:a2:59:c7:
2f:0e:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:04:21 2025 by rpki-client