Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json)
Hash identifier: FzoL77iwk9sHc9kP9nzIsxPbYraUxST4Ep7NgH/HGhs=
Subject key identifier: 68:B8:9A:03:58:B4:AB:1A:2B:36:9D:FA:B1:69:25:DA:9D:53:9F:9A
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 019A711334463655BDCB067BC6F8CD8DEF0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
Manifest number: EC
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: 1LHuWbPF9oNsPUtbbGGiyJ2t8fLEGrfIaI/EzSwE06s=)
2: feLtnRMkzU1rqe5DPxi47-2h3dM.roa (hash: x685XsSKo/9+h/ObOY3HT9WaSelNcUDDImrGBWSa8eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:34:46:36:55:bd:cb:06:7b:c6:f8:cd:8d:ef:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=68b89a0358b4ab1a2b369dfab16925da9d539f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:6f:b4:72:cf:08:03:2f:eb:47:bf:e9:50:
ea:1d:fd:84:47:5c:8e:0b:f0:4e:1d:87:72:9f:67:
cb:5b:1f:45:26:e6:9a:e8:fa:4b:6b:fd:7b:c1:6f:
65:87:31:c4:9e:77:f7:4f:2c:81:71:ac:69:54:9c:
27:72:9e:19:a2:1f:e3:44:f0:c7:6f:7e:ea:f4:21:
a2:01:00:86:b6:97:e1:e0:54:f2:3a:81:c0:59:a9:
67:6e:6d:66:d4:ad:fa:b9:ff:df:d1:14:11:67:10:
c9:49:83:b4:8c:04:ae:fa:90:7a:c6:75:be:ec:e1:
c4:55:b9:7d:a8:2b:89:46:97:00:db:37:19:19:33:
c1:a5:c4:da:fb:57:c3:d9:97:18:c8:94:8a:22:77:
35:18:e1:ce:dc:61:d5:78:b8:53:96:8a:fe:b7:57:
d1:94:76:a6:ea:0f:86:9f:3b:33:1f:10:b6:9b:12:
b2:e7:4e:9d:ae:e7:80:66:91:e5:62:c9:47:4c:dd:
81:68:27:0e:c5:97:c5:87:c5:cd:53:e2:a4:6e:1f:
1e:f0:39:db:a6:03:85:d9:c0:2c:04:5b:91:61:3f:
e7:8e:9f:56:df:8b:25:24:d1:58:12:ac:1b:38:e3:
7a:04:8e:34:b5:e4:8e:27:53:28:b6:b0:30:07:08:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:9A:03:58:B4:AB:1A:2B:36:9D:FA:B1:69:25:DA:9D:53:9F:9A
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0f:19:be:e7:3b:7b:92:d9:36:62:76:8b:b4:6a:a1:3b:ed:
df:1b:1a:e6:46:b4:28:cd:cf:34:61:db:2f:95:f3:e4:3e:11:
49:5a:dc:50:65:f6:ee:4c:23:7f:3d:50:be:ea:da:20:52:20:
db:e5:45:18:85:7f:77:99:32:1f:df:6b:9c:e5:d5:56:60:04:
40:5d:7a:53:3e:d5:17:93:e7:e9:8b:e0:b5:f1:0e:28:ce:9d:
d1:a1:77:85:a5:a1:64:25:7b:54:69:3a:db:f1:0b:b1:4c:4f:
aa:5d:d1:81:bd:44:97:86:e4:f0:c5:98:65:17:f0:96:03:26:
6b:f5:0d:9c:d6:54:5c:80:0c:a2:ad:04:7c:48:29:ab:f5:b8:
53:7f:8f:b5:55:47:02:84:aa:a2:0a:e1:67:4d:22:80:e2:5d:
90:eb:81:60:c0:7d:cb:d8:10:e2:f3:3a:30:c9:69:e3:03:1e:
b1:70:5a:55:cd:d1:36:94:4a:68:d9:11:45:cb:99:ff:29:72:
9e:e3:85:0f:06:ad:23:b5:74:31:81:e9:24:20:6a:7d:01:d9:
42:8e:47:1d:5f:fe:4e:3b:53:a1:3d:4b:ef:a3:40:af:80:e3:
86:45:7b:9c:cc:5c:6e:89:5d:67:45:fd:80:be:43:52:5f:ca:
c7:fd:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:10 2025 by rpki-client