Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier: Cebn8c2S+gYA8c15YTQYjuMCUpXg0RoSwVwcLKAMSbw=
Subject key identifier: 91:1A:BA:7A:4A:7E:C6:D1:A8:AC:69:F5:92:6C:97:41:51:7F:3C:19
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 019A71EED970D0F6F616324321E479A2D7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number: 0FE5
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=)
2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: 6YlaEpDCMaRYPVbrP3LNId3uY5lD8L/YiDcV9xV/B4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d9:70:d0:f6:f6:16:32:43:21:e4:79:a2:d7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=911aba7a4a7ec6d1a8ac69f5926c9741517f3c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:7b:65:76:e6:7b:94:73:3c:b3:21:34:a5:
b6:43:3e:67:a1:b5:27:85:eb:67:8c:35:69:58:63:
7c:3d:de:ef:2e:9b:79:cd:ba:25:e2:a5:47:01:96:
c2:0c:11:15:18:7f:16:44:0e:1c:98:2d:a8:bd:21:
eb:2e:cd:ae:86:7c:45:9e:f6:98:88:26:8d:68:a5:
60:d8:de:fe:27:90:86:c0:8a:85:8b:49:ec:0c:76:
d5:7f:4b:11:1b:09:47:bf:99:bb:67:46:3a:75:a6:
06:10:4d:48:5c:a3:31:9e:ed:6e:e4:85:02:80:a3:
4a:9e:91:20:ec:00:95:18:0a:e7:57:77:ff:ee:a6:
14:88:74:f5:31:a5:2e:de:aa:a3:70:0e:1e:7b:72:
44:9d:15:5b:48:8b:35:ee:0e:70:a2:fb:86:81:9a:
c9:78:bf:ca:c2:15:5a:62:ef:e0:80:29:6f:4d:b6:
46:86:9d:72:d5:bf:3b:a7:df:cb:4e:49:08:cf:6a:
5f:9b:6c:b8:0f:e2:55:9b:4a:52:b8:52:8e:e1:f9:
8b:12:84:45:c5:b9:07:74:87:12:3e:96:ab:12:79:
36:1a:3f:9e:0c:a3:16:1a:a4:2e:ce:ad:77:a4:49:
4a:f9:c3:00:20:3d:26:2b:48:d2:3a:7b:52:31:53:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1A:BA:7A:4A:7E:C6:D1:A8:AC:69:F5:92:6C:97:41:51:7F:3C:19
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b7:96:52:6b:4f:c1:54:32:05:2c:00:6e:66:67:9e:6d:c3:
26:9c:d6:4b:4f:21:bf:89:98:e9:4a:30:3c:91:a8:b6:fc:d7:
9f:c7:c0:f6:dd:bb:d3:64:13:2f:b4:5b:c5:78:2f:aa:80:3c:
e5:e3:2e:0d:a0:11:b0:41:39:ec:82:5c:9c:73:2c:47:77:03:
30:94:c0:1f:95:78:98:f0:91:b3:e2:b6:23:1d:22:bf:32:53:
b2:a6:d0:a5:5e:fa:83:b1:5d:b4:4c:9c:88:1b:44:64:f6:7a:
c8:ef:cc:d3:06:98:60:ae:c2:ea:59:9e:c3:32:59:83:4d:a6:
5d:e1:01:a9:a1:04:16:b2:4c:d5:45:06:b1:be:c7:6e:6d:2a:
16:0f:7d:ca:e8:6a:a8:30:00:2e:eb:50:10:ab:ed:c4:cb:63:
70:5b:08:05:c7:be:83:a3:59:26:7f:d2:70:f5:01:3a:6b:52:
c6:68:9a:27:52:2f:86:39:9e:d9:51:9c:72:86:ce:4c:1d:38:
f0:5e:43:54:1f:f0:6d:b9:44:09:f6:56:d4:8a:f3:7d:23:f8:
c3:9b:1a:9a:ad:35:6a:f9:63:81:48:3a:9b:0b:d0:e6:70:7f:
99:fc:7d:90:0a:37:c9:83:b1:19:9b:34:5c:21:19:91:7d:93:
d4:df:12:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:51 2025 by rpki-client