Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: sDMMcwN4v4yxfjhW7zOfeqiLpY+GKckOfLFN6VITxw0=
Subject key identifier: 1C:A5:0A:55:6F:0D:EE:B1:A9:E3:A3:99:73:98:96:72:2C:5C:1D:0A
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 019A41DDAB8795E35902CBA546A07318D442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 1706
Signing time: Sun 02 Nov 2025 00:00:37 +0000
Manifest this update: Sun 02 Nov 2025 00:00:37 +0000
Manifest next update: Mon 03 Nov 2025 00:00:37 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: Isw6Ru81M+0qx0Vf7nAxWD91FHyBzpL73dPKwW+hR28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:dd:ab:87:95:e3:59:02:cb:a5:46:a0:73:18:d4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Nov 2 00:00:37 2025 GMT
Not After : Nov 3 00:00:37 2025 GMT
Subject: CN=1ca50a556f0deeb1a9e3a399739896722c5c1d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:9f:4c:36:d2:40:90:c7:05:46:47:d5:23:
18:0e:d9:c8:4e:05:ba:50:0c:a7:ee:32:d2:c3:c7:
23:24:a4:27:f6:50:11:d0:fb:9d:c1:01:d7:73:1e:
2a:0d:bb:6b:ee:bc:f1:d9:17:83:24:3a:a3:8d:03:
3a:5d:b5:3a:f2:6a:f4:79:3a:3e:8b:2f:d0:63:96:
e8:c8:77:5b:88:6d:50:4f:b9:c3:9c:81:f7:51:c1:
d6:15:23:8d:fa:29:7f:ab:73:2f:85:7f:73:e1:b7:
9e:30:95:64:da:e8:97:fc:e5:a6:ee:eb:56:93:d3:
24:bb:49:83:8a:4a:f1:6b:d3:64:22:7a:1a:af:ac:
88:3f:cf:e1:4b:16:3e:27:e7:a2:59:99:57:65:5f:
72:15:99:68:fe:86:24:ca:7b:37:df:28:a8:c2:dc:
ad:ce:32:37:c2:1f:88:e4:fa:07:c5:99:7a:05:9f:
4f:90:25:74:ea:5e:66:3d:a0:fa:e3:b0:0e:6e:7e:
21:f2:2f:06:8b:5c:1e:f3:90:82:80:9e:af:71:b8:
a3:f5:2d:bc:21:d6:de:81:71:3f:a3:3a:69:dd:6c:
ef:84:69:ee:71:0c:fa:dd:51:8f:88:ee:4d:16:e6:
9d:5c:4e:89:34:2b:6c:82:d7:09:ec:05:a8:04:ae:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A5:0A:55:6F:0D:EE:B1:A9:E3:A3:99:73:98:96:72:2C:5C:1D:0A
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:94:60:3f:23:b6:6c:e6:0c:72:d3:82:b1:33:16:c2:d9:93:
74:49:44:70:e3:eb:87:54:df:ed:82:0a:5b:9f:43:30:04:e0:
0f:2a:42:fe:bd:9e:92:ea:72:91:5a:47:e8:6b:e5:b8:85:91:
af:84:7e:b0:66:ef:f4:4d:82:b7:ab:05:4d:f7:42:57:18:c1:
33:5c:6a:16:44:a1:4f:30:aa:c8:44:73:40:f3:12:e4:d1:64:
fc:b9:95:bf:fb:9b:a9:6e:48:4f:17:81:20:e3:38:6b:62:ca:
94:ce:6c:bb:72:8a:8a:f1:9e:89:2a:0c:d5:c1:d3:4d:d2:b4:
4e:a6:6b:99:d5:0e:31:b9:3d:a8:02:93:7b:de:b4:db:29:08:
7e:5e:4f:24:6f:c5:15:0a:00:05:17:d3:f2:be:ec:8d:cd:9a:
54:f4:80:ca:b1:8f:d0:bb:f2:d3:b3:e8:12:88:3f:15:a3:a9:
51:53:27:26:9d:50:9a:51:7e:a5:8e:b7:f1:26:e1:8e:05:e5:
2a:3f:d7:fb:d1:e5:1e:0c:b5:79:10:32:d2:87:16:ac:23:94:
1c:da:af:20:c1:a0:67:2b:fb:22:7d:89:1c:50:ac:d8:ab:fa:
ce:21:ea:96:5e:20:99:25:81:e4:c0:48:e4:6e:70:63:00:1a:
c7:b2:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 05:54:32 2025 by rpki-client