Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File: cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier: Dq0xhk9VfjDXv9MNVx+nT2TRlZfdqMcHuIDdOtcfez8=
Subject key identifier: 64:EE:FC:CE:B7:7E:EC:FA:CB:3D:8D:F9:6B:98:14:F0:10:E7:68:2F
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial: 019A714A19A933740D43E1C06666ACB0BEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number: 1322
Signing time: Tue 11 Nov 2025 05:01:12 +0000
Manifest this update: Tue 11 Nov 2025 05:01:12 +0000
Manifest next update: Wed 12 Nov 2025 05:01:12 +0000
Files and hashes: 1: VABLE3iBHalb6Jl_c3u-oyHeiS8.roa (hash: s1CBILyJSh7gNgL+QAYvHKZM5KaEqmZAwVEcKOw0A0E=)
2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: HTMkeWJouga/yKdPsEscu+VTCr1xAYR28RMU3yeSD90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:19:a9:33:74:0d:43:e1:c0:66:66:ac:b0:be:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Validity
Not Before: Nov 11 05:01:12 2025 GMT
Not After : Nov 12 05:01:12 2025 GMT
Subject: CN=64eefcceb77eecfacb3d8df96b9814f010e7682f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:18:aa:6c:25:8a:2a:ca:fa:42:e8:3a:df:
f6:a7:22:59:05:f7:88:c5:70:6b:83:ae:32:5a:70:
70:31:bf:89:17:c4:b7:b8:6e:c9:0f:80:53:e8:9e:
c4:78:9b:34:78:4c:79:46:27:f4:be:fc:b9:84:5f:
9b:f1:eb:0f:bd:5a:13:97:95:c3:49:6e:97:63:8d:
3e:9e:59:da:94:cf:7b:b3:09:43:d9:6b:80:90:7f:
0c:47:d5:00:c0:87:17:77:80:53:c9:8a:de:22:83:
09:48:ce:06:4d:d5:ee:dd:9f:9e:95:77:e9:3e:08:
b9:97:af:25:b6:a8:98:7a:81:e8:76:41:bf:e1:d0:
2f:41:50:34:99:a0:cc:6f:a2:64:16:00:91:5a:fd:
52:09:ad:2a:83:53:ad:8a:2d:66:38:fd:df:ac:c2:
b7:7e:4b:01:b2:9f:6e:bc:5c:83:91:34:9a:23:4f:
42:49:70:ed:aa:93:4f:13:df:97:7f:ca:ef:a6:2f:
f5:87:a4:cd:38:f0:e8:22:bf:e0:7f:58:98:a3:bd:
3e:0c:1c:c3:95:cd:26:24:6b:27:c1:41:d6:c9:7f:
3c:ea:9e:d2:99:ff:6d:0d:12:01:2b:53:b5:e2:16:
90:58:f9:e2:38:6e:7e:7d:a5:63:9b:1f:85:76:85:
a5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EE:FC:CE:B7:7E:EC:FA:CB:3D:8D:F9:6B:98:14:F0:10:E7:68:2F
X509v3 Authority Key Identifier:
keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5c:72:4f:6c:34:73:04:bb:98:ad:16:26:8f:75:2f:61:44:
f5:ce:22:01:41:7c:b9:5d:4d:51:68:80:84:18:74:42:8d:ba:
17:8d:f2:c6:04:b0:ce:4b:3e:7c:25:5a:de:8d:c4:09:4d:1e:
34:52:c6:d8:78:33:ba:e6:11:a6:cc:80:44:53:a5:06:c0:b2:
04:7a:38:2a:fa:3f:39:94:58:6c:0a:ea:9c:43:82:0d:81:ca:
78:27:1d:91:32:ab:4e:59:94:8c:7f:5c:a6:10:aa:a1:d5:a6:
04:d7:a5:e5:b8:d3:8a:84:b1:33:57:a3:1c:78:97:74:94:88:
4b:75:be:7f:34:60:78:d3:72:f1:ec:d9:0f:ec:8f:32:5f:d9:
d5:d3:1a:34:ec:c0:d3:f7:04:11:8c:c6:72:78:4d:ec:94:86:
3b:00:7d:ba:72:73:ac:27:36:38:ad:51:4a:fc:9e:6b:c1:2b:
61:a8:0b:80:dd:85:ec:fc:e7:f3:09:d6:d2:f2:26:18:9a:a3:
e6:01:f1:ad:84:7b:1e:ac:3f:1c:ef:09:fe:55:1d:3e:be:a1:
23:a5:bf:19:75:f4:30:a6:99:03:17:6c:c6:24:67:4c:bd:5b:
4f:43:52:10:1f:00:7c:03:a4:6b:d3:87:60:d5:d4:31:c0:d2:
e8:0e:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:04 2025 by rpki-client