Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: /4i81hXiXqo4tSlS39P1fZM52ScLD8sXiqAxwJ1D0Xg=
Subject key identifier: FA:22:8C:E6:0D:E6:F2:E0:12:0D:61:2C:2B:1B:61:66:D5:FC:82:14
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 019A3534A131E9DE9FA25F2CC38A89474017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 015A
Signing time: Thu 30 Oct 2025 13:00:32 +0000
Manifest this update: Thu 30 Oct 2025 13:00:32 +0000
Manifest next update: Fri 31 Oct 2025 13:00:32 +0000
Files and hashes: 1: 0En_rM3ItFKYLhaLLd8WBZOTlpA.roa (hash: 152maO322NYmeUI+2QBI3Muc080/yMuLJaeicPAME94=)
2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: 63xaXNFE6vraprpwVM1awngYL5UdaVHrsBeWED9R488=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:34:a1:31:e9:de:9f:a2:5f:2c:c3:8a:89:47:40:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Oct 30 13:00:32 2025 GMT
Not After : Oct 31 13:00:32 2025 GMT
Subject: CN=fa228ce60de6f2e0120d612c2b1b6166d5fc8214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:58:09:be:ec:e3:ef:b4:39:3e:d5:55:6b:
4f:0b:cc:50:9a:39:6f:ff:a1:64:3e:7d:eb:2f:ed:
f3:30:22:41:6e:27:72:a4:65:d3:bc:bb:7e:fe:df:
f4:42:d5:cd:f8:b3:f8:ce:e4:f2:d7:60:43:26:55:
09:6e:25:40:f8:29:f0:10:97:44:37:d1:99:16:ac:
32:04:14:5e:fe:3f:23:a7:38:ed:0b:24:53:f1:67:
d4:1e:d4:c0:12:f0:03:09:34:c1:88:74:5c:56:5d:
5d:ca:40:d8:f0:56:18:9c:54:b1:c1:34:f2:bd:f3:
df:cd:c9:91:34:5e:d5:92:d9:68:cd:a2:92:44:15:
1b:61:98:63:83:f4:3c:ba:87:3d:8f:55:7f:78:57:
d9:24:bb:2b:ce:a4:18:42:b8:c9:2b:fa:39:fe:16:
92:a6:1b:08:2c:2d:71:83:0f:45:91:c9:38:a5:31:
cf:5d:bd:c5:a3:7a:63:5a:71:7d:32:7f:f4:91:3a:
1d:6f:1d:7c:fe:31:71:b0:9d:a2:17:29:39:0e:09:
ae:6e:38:63:37:18:3d:e6:cc:87:e3:79:25:9d:de:
d9:73:e1:81:6f:fd:75:d3:94:e4:61:71:b5:9c:17:
18:9b:d0:e7:96:be:2f:c1:2f:b8:87:dc:fa:c4:1c:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:22:8C:E6:0D:E6:F2:E0:12:0D:61:2C:2B:1B:61:66:D5:FC:82:14
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:ea:9b:9c:3f:6f:cd:83:5e:34:15:d2:61:6f:5b:e3:6e:
b5:28:c0:a4:4d:ba:87:ec:45:12:dc:fe:80:7f:45:a3:ff:a1:
89:1d:a2:05:18:50:da:f6:74:05:c9:81:2a:e6:d1:40:59:80:
6d:2a:ac:37:3f:ac:01:34:48:0d:da:ea:01:5d:06:3f:bf:17:
7b:d4:1d:00:a0:5a:04:37:3e:4b:4a:ef:ce:2c:ac:49:ea:87:
46:6b:0f:22:4f:5b:af:5e:77:29:e8:62:67:94:45:13:f3:e5:
5c:51:f0:ba:0c:54:a9:4c:14:b1:94:44:a3:84:cb:1f:f9:7d:
98:90:08:c0:bb:f7:e6:4d:c6:d3:bf:ba:dd:15:07:da:fe:64:
3a:a0:8f:eb:22:c8:9b:12:35:bb:09:f8:d4:b3:b1:b0:a3:33:
16:d7:ba:b2:40:23:75:2a:3a:fc:20:6f:93:8f:f9:3f:c0:f9:
c7:de:28:14:4c:2e:46:b1:f1:4d:f5:c9:11:c5:d2:0c:7c:d3:
43:c1:d9:83:1a:aa:38:6d:26:40:47:e0:37:d4:95:51:fa:1b:
33:0b:ba:a3:a5:5f:db:f2:2e:32:d0:bc:f6:ac:87:aa:5e:33:
6e:ec:d8:51:79:11:2f:56:a2:af:dd:b5:fe:42:bb:6e:4e:fa:
9d:ec:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 15:03:45 2025 by rpki-client