Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: n8k26T+ZRH2xTBM8qlb2U5xYoq7nV3VZ60QeOYtqQSU=
Subject key identifier: A2:F8:34:A6:D8:13:EF:90:25:89:82:ED:B3:7B:90:2D:05:71:56:A1
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 019A7225C2F7487F21F3BEAFA3BD962E9BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: 1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa (hash: YZnIrYBAzViRIOg0Z2wubi6eZGwgwJHXDai7+0T2WrY=)
2: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: isD2OhrEWwH1C4t4GF6VUWRocy1zTUqCZerAFVbrecA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c2:f7:48:7f:21:f3:be:af:a3:bd:96:2e:9b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=a2f834a6d813ef90258982edb37b902d057156a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:c6:9e:0d:21:3a:fe:89:4a:33:32:71:99:
64:07:e7:ef:a7:e5:7a:fb:cb:87:be:8c:cd:d3:8a:
7e:d4:ba:2c:72:e2:32:f4:bb:a6:9f:30:c1:6a:d0:
17:8f:59:8f:04:14:8c:f6:a8:39:bf:16:08:c0:e7:
c8:88:41:89:89:e6:a4:45:ef:af:3c:cf:92:2e:78:
4d:52:c8:f1:6f:28:0e:8d:12:cc:cd:65:76:cb:62:
57:37:b5:90:72:04:d3:ab:8e:be:d9:d3:15:75:48:
73:09:e8:cf:40:66:9d:8c:a2:cd:1a:1e:8e:d7:72:
17:c4:c8:f7:c9:86:c9:38:9a:f2:f5:bf:40:73:30:
d6:c3:a5:6d:9c:19:38:9b:ee:78:26:0d:f8:67:66:
b9:bc:b5:e2:ad:8d:04:e0:2c:1d:6e:cf:ee:93:9a:
89:84:10:b1:c3:b7:30:6b:ab:c6:09:95:8a:d4:74:
b4:4c:88:28:89:f6:b9:fa:d8:5b:e0:76:59:fa:f5:
af:be:6a:fd:a2:b1:cc:c6:08:16:61:a4:ac:20:53:
5c:f2:f9:87:ec:01:53:04:2c:9b:a5:2b:d1:4c:8e:
7d:2b:75:73:10:ee:d5:3e:25:fd:0e:13:08:a3:ca:
5d:22:6e:45:2e:07:c6:fe:b0:a1:e1:53:4f:85:06:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F8:34:A6:D8:13:EF:90:25:89:82:ED:B3:7B:90:2D:05:71:56:A1
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c1:df:36:44:ff:57:b9:32:af:d4:bf:db:c5:e3:23:ee:f2:
b2:eb:4f:e3:7c:c7:52:9e:b5:4a:52:f6:15:92:07:b4:77:cf:
74:db:6a:2b:c0:50:43:20:0b:8d:d4:8c:1b:e1:06:75:fd:9a:
3a:d6:b8:ce:41:fc:20:30:52:79:f0:e0:05:dd:2e:71:ba:2a:
a6:40:b3:29:a3:91:e8:d4:aa:70:6a:4e:40:d7:0b:7f:7b:26:
67:cd:86:39:a5:89:71:a5:a7:20:8d:70:3e:89:15:d4:10:18:
e8:c6:e1:ac:2e:80:d6:d5:fe:11:e6:ab:b0:b2:05:b0:45:12:
bc:75:1e:47:b5:60:64:03:35:a1:5c:1f:1a:f0:68:be:43:88:
7e:cf:6a:88:92:b9:da:f7:9e:dd:17:bb:07:ff:54:20:26:4f:
8a:a6:c2:a9:ae:5e:37:4e:fe:6a:83:b2:4d:cf:08:eb:85:64:
95:50:7a:1c:27:08:b7:5b:ed:28:58:66:94:8e:cc:44:d6:cd:
cc:d2:15:2b:ba:17:69:92:07:03:d2:44:9d:e0:4b:f8:1c:0d:
cc:bd:c4:e8:d2:e3:7b:16:17:4c:c0:e8:33:23:9b:2a:91:ff:
18:b4:92:dc:0d:bc:bb:1c:e3:5a:62:50:a7:b8:eb:c3:38:d8:
4e:59:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:17 2025 by rpki-client