Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: 4b07uWmL66XKs88dsVRFUISI+alelLbjVSiYeuRjtNk=
Subject key identifier: FF:CD:16:E3:D6:8D:41:1B:07:A3:66:E5:89:2E:F8:75:52:5E:19:DA
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 019A7301B16AC98C81403259D7CE9B54624D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0ACF
Signing time: Tue 11 Nov 2025 13:01:22 +0000
Manifest this update: Tue 11 Nov 2025 13:01:22 +0000
Manifest next update: Wed 12 Nov 2025 13:01:22 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: BxWRBbQ+O7pxDtvDZBFcKSDDPJNLLILUy5G//NXBrqo=)
2: JFMyA-XTfzJ98LwUaDo6uCal6eE.roa (hash: 53iyOJ7/FikpZ4x6oYvSunvmMxLDuiMuvaZO1jcps9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b1:6a:c9:8c:81:40:32:59:d7:ce:9b:54:62:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Nov 11 13:01:22 2025 GMT
Not After : Nov 12 13:01:22 2025 GMT
Subject: CN=ffcd16e3d68d411b07a366e5892ef875525e19da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:db:12:a0:5f:1b:c4:cc:1e:1a:ca:21:a1:
b5:45:8a:5e:e7:a3:25:f6:2a:92:de:c2:e9:1b:e0:
42:56:dc:79:ea:22:88:07:8d:ce:b1:82:6d:24:1f:
f8:90:dc:f0:48:7c:2d:e5:bd:56:0f:56:0f:ab:ac:
c3:7d:84:fc:c9:85:99:ef:54:ce:66:ff:a6:0a:34:
00:9c:1a:8d:b3:04:39:27:1f:4d:8b:ae:72:2c:0a:
a4:d0:89:79:4e:af:7f:46:87:5f:81:34:42:0b:05:
ca:2f:bb:a9:24:ff:bd:0b:d7:28:06:f3:9a:a4:69:
be:b5:58:2a:eb:98:fd:64:f1:53:f6:08:13:4e:6e:
f2:11:96:74:20:b7:4e:c5:e1:cb:6b:9c:58:d5:29:
89:59:4f:32:b4:6f:33:4c:aa:fa:a9:d2:fc:0e:99:
31:c3:c1:4c:6b:08:92:6e:d8:e8:9c:95:ac:8f:40:
4b:07:56:ac:0a:c5:31:9b:a3:38:3e:21:03:6d:c6:
21:fa:67:92:ab:05:74:79:06:ea:11:7d:a0:bd:85:
22:05:64:22:3b:08:c7:bb:bd:4a:a7:64:05:89:a5:
72:27:79:62:da:3f:e4:b8:90:35:64:16:aa:83:9e:
44:cc:18:0e:3e:69:51:31:73:5a:57:0b:d2:59:ba:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CD:16:E3:D6:8D:41:1B:07:A3:66:E5:89:2E:F8:75:52:5E:19:DA
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6c:64:0f:7e:65:0b:bd:6c:ab:e7:60:7c:a7:e5:52:af:60:
0b:2f:ab:74:e1:95:cd:64:5b:13:e2:5a:a7:f2:ae:5a:b2:ab:
0f:15:f4:d0:26:49:c8:93:8c:e3:e8:7b:9e:a7:a9:a2:33:e2:
39:38:20:cc:ae:2b:33:b5:3f:5e:3b:f5:27:2b:88:7f:bc:b9:
de:26:97:a0:53:d4:d9:de:4b:6d:14:25:29:33:c2:eb:22:ed:
71:0e:91:91:7d:81:3b:eb:41:9d:cd:c6:d3:60:68:80:71:6f:
05:1d:18:a3:c4:bb:2f:2c:68:e3:26:59:c1:a8:c5:34:d7:20:
ef:ad:73:59:25:de:6c:cf:28:8e:06:43:ab:b6:e7:a2:2a:6f:
f8:33:05:f0:24:e4:c4:da:1b:a7:ab:f3:03:b6:1d:02:50:66:
18:95:02:6c:64:db:fa:d8:fb:97:d7:d5:93:19:ad:51:27:0f:
f7:f6:1e:e5:4b:34:8e:27:6b:3b:60:c7:89:cb:ee:2c:c4:12:
26:a2:8e:6d:b3:a0:17:f7:2b:4f:0b:80:3a:31:1f:a2:85:48:
01:c2:67:bb:76:15:02:a1:97:b8:20:d8:0e:7c:5f:21:0a:c2:
84:b5:7e:06:33:b5:a3:14:f0:fe:84:1f:01:8c:6d:0c:f0:e0:
c0:3b:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:39 2025 by rpki-client