Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: PzX8ikYYYJhE0YKxIKzP1kDW9sg6AIYG6LYDVPC/fao=
Subject key identifier: 00:22:E9:4C:FE:9E:44:12:42:40:29:D3:11:30:E4:DC:98:54:42:A9
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 019A70DC5C2E2AE6DC245A107BA7BCB22564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 03:01:20 +0000
Manifest this update: Tue 11 Nov 2025 03:01:20 +0000
Manifest next update: Wed 12 Nov 2025 03:01:20 +0000
Files and hashes: 1: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: AuzleXDsHxRVsU7AcGpvvOaA/oWE2woztSCokJC4fpU=)
2: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (hash: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:5c:2e:2a:e6:dc:24:5a:10:7b:a7:bc:b2:25:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Nov 11 03:01:20 2025 GMT
Not After : Nov 12 03:01:20 2025 GMT
Subject: CN=0022e94cfe9e4412424029d31130e4dc985442a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:58:5f:46:f5:2c:a4:e7:ee:a5:84:80:e8:
61:57:4b:b1:ef:cc:46:a6:2e:7c:52:d9:d8:b7:31:
9e:f3:78:67:15:0f:57:01:09:57:2c:07:18:29:56:
60:2d:2f:05:2c:40:24:f5:89:14:5f:aa:28:d1:9f:
41:a4:95:f3:30:28:59:20:8e:43:ac:48:05:1e:a5:
90:7b:4b:24:40:6b:29:15:e5:b2:de:83:b5:1c:ee:
7f:6e:2b:24:41:ba:83:5f:16:d2:1b:b3:ca:9d:11:
d7:38:c9:78:fa:93:11:d9:46:9b:02:4f:95:a0:c1:
6f:5f:6d:b3:5e:c3:0b:ce:a2:e7:46:e4:40:fb:1f:
f7:f9:0d:e6:a6:d2:0a:b8:fb:30:98:92:c8:04:2d:
b0:91:70:73:cd:84:3e:a8:76:b3:d4:da:6f:65:02:
69:80:01:03:a9:bc:77:70:ed:28:9f:42:bc:e5:8f:
1d:b4:02:6b:2e:94:84:f5:11:6b:0b:35:e0:44:20:
2f:1d:5f:08:77:e1:5c:cd:83:ec:d1:b4:16:fa:be:
74:ae:8f:5d:d1:df:e5:b9:e5:20:2c:5d:f7:05:99:
bc:44:cd:81:4e:c4:66:d4:28:0f:f9:ce:e6:ed:6c:
58:90:f8:ee:74:45:d1:b5:86:76:42:46:dd:c0:32:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:22:E9:4C:FE:9E:44:12:42:40:29:D3:11:30:E4:DC:98:54:42:A9
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:96:d3:28:1b:f6:ad:bd:fe:20:6a:63:b8:18:e8:e0:2f:bf:
0b:14:b5:e6:a8:c9:92:8f:4f:d6:c8:2c:79:48:03:61:cc:16:
e3:e2:70:5d:a9:40:64:e2:60:43:4b:d2:03:71:ff:9a:09:f7:
ef:73:85:90:4a:80:98:81:3c:da:c6:de:62:95:14:f8:4c:ef:
a5:c8:d3:92:11:96:f8:95:cd:be:92:2e:5d:a2:c9:a8:d7:14:
91:77:ef:b8:34:3f:67:c6:2a:4c:10:c8:c6:05:d7:20:44:1f:
69:74:7c:2c:61:61:c5:d7:65:11:d0:09:73:47:c4:15:d8:7f:
0d:ad:fc:29:ed:7e:28:8e:41:83:cd:a1:ac:c3:72:90:48:fb:
d1:77:d9:b5:cd:f5:81:0b:f5:2d:77:77:2c:91:f7:d4:52:94:
36:a9:33:c5:53:7f:f7:04:72:45:a0:2d:69:49:a9:13:11:27:
74:85:78:44:c8:d6:c4:ca:79:49:a9:3b:5e:6a:95:3a:6d:98:
d8:21:76:22:e2:ee:b9:36:2b:0b:40:0a:f3:9a:1f:5a:60:a4:
56:fa:a5:4c:80:b9:78:46:68:70:25:60:1f:4a:1f:b2:d5:f3:
55:00:68:7e:f3:3a:b9:f4:1d:fd:54:25:3a:2f:f1:53:5f:94:
8f:cb:1b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:48 2025 by rpki-client