Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: 3yRSxJ6yHWjPGPNVN79lTqWLsQxHkzKl99T1/03oUl0=
Subject key identifier: 59:65:D0:7B:48:D8:F9:AA:83:A8:55:87:A6:B2:DB:5D:E3:8F:51:66
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 019A7338609E678B5768F845C60AE04A48CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 0543
Signing time: Tue 11 Nov 2025 14:01:05 +0000
Manifest this update: Tue 11 Nov 2025 14:01:05 +0000
Manifest next update: Wed 12 Nov 2025 14:01:05 +0000
Files and hashes: 1: 1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa (hash: biNGhGH5AKAvuvZqlWI6oNS4u1EhxLRFN8pAccYPS0U=)
2: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: cnRVuXz5LYrnQCdsLwSmxQhZObxibhY0YAeQmWDpggM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:60:9e:67:8b:57:68:f8:45:c6:0a:e0:4a:48:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Nov 11 14:01:05 2025 GMT
Not After : Nov 12 14:01:05 2025 GMT
Subject: CN=5965d07b48d8f9aa83a85587a6b2db5de38f5166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:eb:8f:2c:f7:54:9d:04:1a:64:2f:96:b1:
00:f4:2a:d6:62:ac:07:64:dd:42:a6:f8:dc:8a:4c:
6a:18:28:be:56:8f:ba:81:61:d0:ab:35:27:1a:e9:
0a:64:02:0a:9e:16:14:d0:6a:ef:42:9e:02:0e:86:
1b:d4:e3:48:40:f3:23:59:fd:60:b0:d2:90:78:51:
b3:fa:71:ca:30:99:15:62:57:c9:13:e7:36:1c:90:
cb:3b:af:19:b4:51:30:cf:d8:ef:2d:0c:02:72:61:
51:c6:18:d2:b8:8a:32:76:a2:53:ff:4f:a0:16:19:
34:9b:c8:b8:c9:13:95:5b:71:41:0c:4f:32:30:7e:
6e:98:cb:39:19:14:2e:90:7a:a3:07:c3:23:d2:f6:
04:04:66:b2:9f:1b:31:38:e7:0c:c1:51:13:51:84:
33:41:54:be:5c:51:a5:91:9f:f0:46:0c:c6:49:1a:
cf:7d:f8:0e:ee:0d:76:8d:42:db:19:89:da:5c:24:
03:90:a3:b1:9e:da:f8:ea:88:30:57:f2:12:b2:4d:
c2:dd:c6:54:61:47:94:b4:89:b9:a0:42:d3:e4:40:
d6:38:9c:c2:8f:97:1d:64:59:06:14:7e:6e:2d:09:
a1:1b:97:c9:74:0b:de:5a:8e:a3:ed:5c:90:5c:7f:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:D0:7B:48:D8:F9:AA:83:A8:55:87:A6:B2:DB:5D:E3:8F:51:66
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d3:3f:c0:87:ed:50:ed:64:0a:e5:ac:9f:c8:59:45:90:b5:
f9:64:bb:f6:cd:d7:19:08:8c:37:23:3c:5b:10:5c:24:f4:9a:
9b:1b:8d:2f:7c:2e:54:5f:7e:f8:d2:ce:7d:78:a8:e2:b3:98:
dd:3a:f1:f5:72:b7:cf:b6:fd:cf:a3:b8:a3:88:33:93:d5:be:
e0:a2:83:6e:a5:3e:93:83:f6:8a:31:21:2b:71:84:00:b5:93:
a0:03:7b:3e:20:dc:c3:a9:d5:b2:a7:0f:81:e8:0e:16:5e:d7:
74:8c:64:e6:84:ca:3f:dc:0f:f9:de:72:1b:9d:27:99:e2:fb:
a8:2b:ac:cc:0e:8d:70:ee:f6:fc:0d:51:31:04:d7:1f:87:69:
ff:1e:75:ec:49:64:7f:40:20:ab:38:f6:97:02:64:a8:1b:fc:
d8:64:ef:89:b2:e6:3d:57:e9:14:32:5f:12:f0:ee:71:4e:5c:
06:1d:80:44:cd:f6:c6:dc:27:cf:22:cf:ec:ba:aa:79:56:b2:
db:1d:d3:da:c3:8c:e8:b6:55:14:7e:f7:ff:47:05:48:e7:b5:
47:23:77:2d:7e:05:4b:83:f4:6d:1a:80:af:13:09:d3:63:00:
a4:a3:36:57:85:27:06:f3:cd:86:ea:4d:52:7e:00:b0:20:44:
c5:71:79:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:02 2025 by rpki-client