Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File: CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier: 5Sc25SNfBIqEwrFVLqW3+Sj+9myDcPZKaOw1dDAfcRc=
Subject key identifier: D1:A4:8C:1A:84:6A:8F:22:A5:6F:26:DF:29:32:E6:29:0B:D3:67:C1
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial: 019A4BBC3DF4941B0D143A6DD8A5B7456818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number: 0890
Signing time: Mon 03 Nov 2025 22:00:19 +0000
Manifest this update: Mon 03 Nov 2025 22:00:19 +0000
Manifest next update: Tue 04 Nov 2025 22:00:19 +0000
Files and hashes: 1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: 4wmc8GCWH7v1JQiYC4ZceMhX/RifNFfDTjz3PXLcZmg=)
2: EWTxX8xHCQ-y0eC-O4N3o3QoyvM.roa (hash: dVuWzw7AA4Zse8atqpUG5cLLbJKhbiKvMBsraKeVoHo=)
3: MJmSheQwhqTa8TcshZRbeEjyzHg.roa (hash: Gp/YgLDeJmP+HyXt6WhUwXyvRtnPi/acuut1qwHPb1I=)
4: NK7GdHMYRv_hDeWPBmQND98lvj8.roa (hash: jBbpvQcqJ1jdxJjUVdSmEBEQDhr0KhV9KMUkwMQPtk8=)
5: mx1zhwHtw-uurdoc1Rs-ub83PY4.roa (hash: O6YFpkOTCBT8CmU8XHKba4R6Y/9CL3lbQUtfKViPzQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:bc:3d:f4:94:1b:0d:14:3a:6d:d8:a5:b7:45:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Validity
Not Before: Nov 3 22:00:19 2025 GMT
Not After : Nov 4 22:00:19 2025 GMT
Subject: CN=d1a48c1a846a8f22a56f26df2932e6290bd367c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:79:08:8d:c3:a2:34:63:89:4c:a7:43:f3:
76:4c:3a:d1:c5:2d:a4:dc:02:de:27:ef:54:fd:0f:
26:03:da:3b:6e:dc:3a:22:4c:f9:a8:a9:0e:12:93:
b3:6e:d5:af:00:df:cd:66:9d:4e:8a:1c:4f:bc:a0:
d2:5d:4d:30:96:ce:f4:8a:0d:87:9b:8a:46:58:aa:
34:88:22:17:4f:99:d2:29:5b:4f:a4:96:28:e2:b3:
94:a1:48:bc:b2:77:05:b1:d7:69:3b:66:7d:ce:4f:
4a:d5:ce:dd:08:8d:9e:e4:c4:7e:e4:cf:3e:0c:df:
f0:ec:dd:f6:09:d7:08:90:44:be:3e:8a:ee:ea:d7:
86:3b:4a:e4:4e:dc:52:8f:28:51:1a:b6:56:cc:4f:
7f:4a:f7:28:2b:e0:51:cb:ec:3d:ac:b9:21:f1:00:
92:f7:95:be:47:f2:46:8a:e9:bb:27:f6:cf:6b:aa:
5e:59:9d:29:09:48:ca:47:7c:75:d3:8a:5f:0d:27:
63:ab:63:ac:66:cf:55:eb:03:f2:19:9b:fc:56:7e:
20:f3:00:52:49:35:b5:5e:5f:d2:bd:e8:79:a8:3b:
87:37:2e:99:6a:06:02:45:df:c3:44:a6:b4:16:19:
df:e1:16:95:7c:48:75:c6:35:a3:c1:f6:b1:28:c2:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A4:8C:1A:84:6A:8F:22:A5:6F:26:DF:29:32:E6:29:0B:D3:67:C1
X509v3 Authority Key Identifier:
keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ad:d0:79:ce:b8:f2:65:39:9b:1c:37:31:bd:b0:3a:af:b0:
d1:b9:07:91:a2:67:8a:82:84:db:9e:73:6c:05:13:37:35:cd:
00:0f:55:5b:c3:06:8d:23:b9:84:aa:f0:60:12:ae:b5:88:ed:
b7:27:48:b5:f0:c5:34:4d:85:74:75:36:e6:13:07:79:d8:88:
f3:a8:54:84:ec:2e:5a:bd:f2:c7:57:dd:e7:85:aa:38:6a:63:
57:eb:8b:4a:50:7d:83:e2:d0:57:50:d1:0d:80:48:1f:db:6d:
75:1b:4f:74:b7:23:d0:7f:05:b8:b2:d4:b4:60:14:d1:82:a2:
88:31:cb:4b:40:e8:f9:07:cc:d4:56:a0:f0:a3:c9:c6:b0:03:
7e:36:46:7d:53:0a:18:ac:74:bf:92:40:05:f1:09:b7:7e:12:
0e:d0:aa:d8:e9:52:8f:d3:5f:b1:0a:74:89:bb:db:0e:ef:5a:
e1:c9:65:32:e1:22:17:ec:04:78:4b:db:e0:f3:d5:64:5c:3e:
db:59:99:01:85:8e:bf:d8:eb:5c:41:14:47:b9:63:c1:66:87:
19:12:51:ea:7e:29:00:b2:86:be:2d:82:b6:41:3e:76:50:41:
f0:65:4b:3d:28:7e:67:bc:9c:b1:36:c7:c4:20:33:fb:f5:83:
f3:62:0e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:18 2025 by rpki-client