Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier: xOclwxrmeDUYOlB0UcHhomC2pqqPOAeDFALwQSBaWF8=
Subject key identifier: D8:49:66:0B:6A:8E:D2:81:9C:74:96:43:45:69:EC:1B:0B:56:52:25
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 019A5187457429547507FFB247DD3A5945A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number: 099B
Signing time: Wed 05 Nov 2025 01:00:10 +0000
Manifest this update: Wed 05 Nov 2025 01:00:10 +0000
Manifest next update: Thu 06 Nov 2025 01:00:10 +0000
Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: ew5C9QcbluGyyvIEygPf3TiSrUqBstVQlTi8B74xd5U=)
2: Lh4J1VP02-oTK-HxM-W2DuWref8.roa (hash: W28vw4gwp9YROhgcttiVHyEse6JN5PCY1Q1d5LlTtlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:45:74:29:54:75:07:ff:b2:47:dd:3a:59:45:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: Nov 5 01:00:10 2025 GMT
Not After : Nov 6 01:00:10 2025 GMT
Subject: CN=d849660b6a8ed2819c7496434569ec1b0b565225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:8b:73:7b:90:ff:67:5e:e4:0b:1e:5e:ab:
a3:04:da:eb:53:b7:ef:a0:91:67:77:83:0f:60:d2:
44:c3:95:8a:b3:30:62:57:ae:21:24:0a:c2:54:77:
16:89:a5:67:18:e6:8f:47:cd:28:87:33:6a:95:2a:
ac:c7:f9:ce:41:db:af:86:5d:9d:1a:14:24:1b:80:
52:88:13:94:be:e3:ee:d6:9d:85:c4:c5:9c:9b:f3:
31:c1:fa:d3:8c:45:0d:93:f4:56:47:5a:32:58:06:
ec:74:8b:47:35:58:44:14:d8:de:59:c1:f9:6c:24:
d3:ee:b6:85:3c:a0:25:6c:2c:db:77:4d:69:cf:b9:
b5:86:cb:a4:7c:36:c9:0f:2c:8a:c0:35:d6:40:bf:
10:07:7a:43:7d:ed:50:0f:bc:82:b3:02:da:75:61:
e6:e3:e6:74:55:06:47:82:8c:92:19:bf:aa:05:93:
7d:58:bd:39:49:e6:21:56:9e:e1:28:12:bf:8c:15:
8f:b1:7a:83:e5:fe:86:10:54:7f:ef:43:68:8d:b0:
1b:0d:11:76:f9:0c:3e:ab:43:8b:9d:7f:c3:3f:b0:
df:87:c0:8d:c0:c7:5f:fa:fc:be:23:01:de:28:d5:
80:29:ea:f5:f3:f5:09:ae:d7:2e:74:ac:c0:15:db:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:49:66:0B:6A:8E:D2:81:9C:74:96:43:45:69:EC:1B:0B:56:52:25
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e8:44:10:d0:7b:f8:50:32:27:08:ef:8e:ba:b0:c5:da:58:
2f:e0:7e:12:da:79:72:25:07:66:58:55:aa:a9:ec:5c:27:55:
aa:59:9b:95:d0:a4:0b:ad:e0:da:8d:8f:c5:bf:65:ac:c2:74:
60:fb:ee:69:78:28:65:f2:11:7c:2d:9d:24:92:ad:0e:3c:22:
2e:c2:22:a4:97:85:6f:46:ec:79:98:d4:c3:75:ae:5e:7a:4a:
6f:95:67:a0:53:bb:4f:ac:48:d9:fa:c0:23:3f:d6:48:0e:fa:
4f:e6:dd:d1:ef:3e:0f:9a:35:04:3d:2c:ff:8a:c6:a5:94:71:
ad:93:2a:ff:1b:15:fb:02:f6:11:00:5a:bb:88:44:48:2e:10:
ad:c8:f7:a4:c8:d9:57:79:0e:64:f0:31:b5:65:84:20:65:ce:
dd:62:84:43:8a:64:36:30:14:b3:73:52:2e:5c:62:dd:14:95:
0a:d0:84:08:34:7b:94:cf:b9:3d:75:10:a6:70:1c:95:3d:42:
2e:3d:d4:58:47:72:0a:1e:b4:7c:af:79:3a:83:c4:03:d2:61:
c7:32:26:86:5a:cb:0e:16:1f:bf:f7:06:22:7a:8c:ba:f3:54:
31:ee:d8:07:1f:e8:e6:df:3e:a4:82:0a:48:a8:a4:4c:7d:17:
8e:1e:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:18 2025 by rpki-client