Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
File: c5ojygLNDwflNvtppcC5vqDaYKU.mft (raw, json)
Hash identifier: avRMRGMKbGgsDmHnJZAIwj/pvg3p/693rP4cC9UnF0Q=
Subject key identifier: F5:2B:B9:5F:02:2A:73:C7:D9:1E:0C:FB:81:F0:7B:BB:E7:46:18:3A
Authority key identifier: 73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5
Certificate issuer: /CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5
Certificate serial: 019A7226351572FDCA3FA192A656FFCD8E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
Manifest number: 0A12
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: c5ojygLNDwflNvtppcC5vqDaYKU.crl (hash: ExgE234FSurcs3wK2XdJa4Gac28zcr/SJ3VoKDxIqlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:35:15:72:fd:ca:3f:a1:92:a6:56:ff:cd:8e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=f52bb95f022a73c7d91e0cfb81f07bbbe746183a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:ad:34:e6:83:9f:08:78:8b:7e:e4:63:64:
24:15:2c:60:38:0d:7a:a9:28:54:87:3b:4f:f6:2c:
ad:e2:86:b5:80:df:2f:16:a2:04:83:ec:31:12:34:
a1:2f:cc:07:e3:60:7a:a3:f4:8f:52:84:28:63:6d:
aa:9c:8c:2c:d9:08:29:eb:70:f6:ac:55:01:a0:3c:
f6:17:14:92:a0:2a:76:b4:96:5f:b4:09:5b:70:5c:
e6:49:5d:3d:51:1f:2e:81:63:61:aa:92:41:68:38:
68:b9:20:09:bf:c0:15:27:13:f4:da:38:ec:79:99:
e1:ba:0d:67:0f:10:a7:7c:40:fa:ac:71:9a:e9:cf:
45:bf:91:2b:3b:dc:16:ae:03:12:6c:c5:be:a9:c4:
4e:41:30:36:da:f9:1a:1d:ee:a8:16:60:1e:7d:0c:
82:a1:44:1a:42:38:65:ab:84:0b:5b:16:60:6b:3e:
b6:bd:cd:94:37:e6:32:c4:d6:d5:4d:73:82:58:77:
13:c2:ac:ae:63:5c:2e:c2:9b:f0:c3:09:50:0a:af:
af:7f:23:19:85:19:e6:13:6a:83:58:69:06:2f:ce:
bf:84:b3:2b:cb:62:be:89:ed:0a:25:ca:1d:3c:26:
d7:b0:1e:a0:6a:5e:55:fe:b5:66:36:16:d4:90:04:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:B9:5F:02:2A:73:C7:D9:1E:0C:FB:81:F0:7B:BB:E7:46:18:3A
X509v3 Authority Key Identifier:
keyid:73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c4:87:02:9e:3e:0a:31:88:fc:5c:56:a1:d2:8d:3e:6e:be:
e8:75:57:65:85:49:db:fd:17:a4:2a:4b:d6:29:af:35:7d:b3:
6e:b3:08:03:0f:fd:76:3b:61:38:90:f5:16:f6:b5:9b:22:e3:
41:88:35:4d:67:e4:cf:5e:d7:a3:65:d7:84:77:cf:80:cb:92:
c7:a0:8b:26:12:20:4a:ca:2a:a9:1b:9f:20:8d:ed:3d:52:11:
ed:f3:b1:6d:5d:47:0c:44:b8:8a:08:0f:75:a9:83:8d:ea:16:
91:7c:01:19:8b:88:dd:cd:9d:49:8a:41:9d:e4:c1:dd:5e:c9:
ce:29:fb:c0:5b:d5:92:46:39:60:49:bf:36:cd:d0:fe:a5:e6:
e1:21:44:b9:3c:5a:75:83:c8:a9:ff:84:f0:52:e3:59:30:68:
b8:62:c6:80:20:90:4f:93:ef:eb:7f:82:eb:51:aa:38:d7:81:
27:cf:54:e6:bd:49:7c:12:f4:8d:62:12:21:89:32:ff:e2:28:
df:42:df:cb:45:a6:55:c7:7c:3b:f0:01:a7:75:79:a5:b9:73:
50:e0:0a:11:cc:44:bb:a4:4f:23:d5:ff:fd:47:e1:2e:c2:d3:
bc:57:ac:f8:c6:92:3d:0e:67:e4:2c:ca:59:8d:ee:06:c9:8d:
29:a7:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:17 2025 by rpki-client