Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: RKtLKTiXfyKzEiMxmv+/QCGEZ3IizZguYTJBbBz/WnM=
Subject key identifier: 0A:62:F7:57:79:E1:5F:05:4F:FD:F3:BB:7D:C5:16:0E:2F:08:88:02
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 019A722610F146DA5C019467ADDE5C96A4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: zkoPPI3GRR2z6RreLOv8i4SveVluiVtktYXV5beIJz8=)
2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:10:f1:46:da:5c:01:94:67:ad:de:5c:96:a4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=0a62f75779e15f054ffdf3bb7dc5160e2f088802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:19:21:2a:83:9f:4f:1c:07:ce:8f:2f:d1:
08:f7:c1:e1:53:3b:59:10:a8:fb:4c:cf:07:aa:14:
02:64:71:38:6d:a5:bd:30:32:7e:0a:e4:2d:7e:6c:
e1:1e:28:93:59:79:47:32:b9:70:d1:6c:49:5d:8c:
bf:b4:75:aa:d5:38:e4:eb:43:cb:a5:c9:30:c1:01:
00:da:72:dc:ad:8b:1c:8f:f5:70:d5:04:f9:82:a5:
83:04:bb:2c:43:69:af:22:cd:f0:51:dd:0b:18:40:
e3:ec:77:6f:49:ed:af:fe:c9:ee:50:7b:a9:92:c7:
d4:49:57:17:eb:d0:80:8e:3c:ca:c0:be:cc:8e:14:
dd:92:2c:ac:e8:1c:a6:2b:ed:16:a0:0f:5d:94:d5:
f6:c2:d1:02:6f:09:11:62:d9:d6:75:8b:fc:b1:7a:
ce:60:cd:96:13:c0:95:52:01:e9:bf:74:ac:fe:a1:
04:43:f5:42:cc:7b:d6:7b:77:b0:19:c3:75:36:4e:
e4:03:0e:53:54:69:7d:9c:35:4d:77:c6:20:54:2e:
d5:86:49:c0:70:18:a9:8f:49:dd:b2:63:8b:6a:1c:
77:5d:58:e3:64:8d:cf:2b:45:ef:53:45:e7:24:0f:
31:87:3f:81:1a:ae:eb:81:ea:ca:f3:a2:1b:75:cc:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:62:F7:57:79:E1:5F:05:4F:FD:F3:BB:7D:C5:16:0E:2F:08:88:02
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:09:43:df:8f:93:6b:35:03:ae:64:86:58:f1:cc:78:30:a2:
29:20:b3:9b:61:dc:6d:7a:29:8e:01:35:ff:30:fb:7b:3c:a2:
e1:90:44:e1:16:07:03:ed:86:8f:95:33:ee:00:88:d4:0c:63:
b5:49:a8:98:e5:dc:ec:ae:80:92:b0:b9:47:0a:58:2c:45:8e:
11:5b:2b:18:d7:bf:0d:a9:2b:fa:68:cd:3a:a0:80:50:bc:73:
02:62:b0:4e:7d:3f:f1:a5:0c:ff:a6:5e:99:51:4f:66:bc:b5:
fb:69:57:03:84:97:0e:1e:2c:bb:58:90:75:57:d4:f6:27:e1:
b6:65:93:f2:6c:b0:38:f6:21:9d:06:11:d8:7a:44:c3:27:b0:
bf:78:ba:69:dd:c7:73:8c:81:c6:eb:ae:90:70:0c:aa:5e:a6:
b6:34:52:ce:76:60:2c:ce:33:c9:1d:61:45:83:b3:33:09:4f:
47:20:9b:de:d0:c3:27:5e:a5:c9:51:c8:12:14:5d:71:fe:91:
ea:e0:18:9c:6b:a2:66:90:c8:9a:38:71:08:d2:98:31:23:6f:
9b:e2:29:44:27:67:f8:ff:44:ba:64:90:1a:9c:07:ab:51:6e:
86:6d:18:27:a7:7c:ce:93:c5:d5:36:bd:ff:1f:a1:c5:32:79:
63:51:40:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:37 2025 by rpki-client