Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: AxT2wC4mE0C6hwZcrd6BO2u1y+1naXjBnrWuER/irOM=
Subject key identifier: A0:32:F2:38:73:E5:95:D4:5F:0C:74:7A:0B:68:D0:DF:34:E8:C8:2A
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 019A706DE20F99D86A0266A97481AA6139CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 0EB8
Signing time: Tue 11 Nov 2025 01:00:40 +0000
Manifest this update: Tue 11 Nov 2025 01:00:40 +0000
Manifest next update: Wed 12 Nov 2025 01:00:40 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: 6/S/G9B1SowYQOPmpkyggMENq7lycbdKvTei3pL2l1o=)
2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:e2:0f:99:d8:6a:02:66:a9:74:81:aa:61:39:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Nov 11 01:00:40 2025 GMT
Not After : Nov 12 01:00:40 2025 GMT
Subject: CN=a032f23873e595d45f0c747a0b68d0df34e8c82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:26:93:5b:02:dc:91:86:58:52:af:c8:ac:
63:9c:cd:9c:3f:52:47:8c:bd:f3:25:ce:8d:91:23:
75:b1:3d:55:c9:30:2f:66:f2:b6:ba:9c:65:04:26:
1b:b2:79:74:cb:3a:f4:fe:a3:5d:1d:79:b2:10:3b:
07:ce:04:c6:bd:2d:77:42:78:8b:7d:a1:49:d1:f6:
db:c0:dc:83:16:27:05:56:8d:dc:bc:f8:88:79:09:
0e:9d:c7:58:9a:e2:6d:52:9a:05:8e:c0:41:38:d0:
7a:8d:b8:f5:94:49:6b:15:1c:15:64:93:f6:71:cb:
e2:4b:49:d2:bd:c7:a8:c5:4a:38:f9:69:02:3c:07:
cd:da:3a:32:84:bc:ae:4e:56:38:24:a6:b0:cb:ed:
b2:d2:a2:c8:ad:73:56:2c:1e:36:1a:9e:75:0e:43:
d7:54:11:95:5e:7d:c1:bb:ca:16:01:26:69:15:8c:
62:0c:49:da:30:84:89:10:e9:6a:ee:1f:59:5b:11:
4e:66:59:9f:40:27:25:7a:31:46:f2:3e:97:40:42:
ea:d4:18:d0:ab:4e:53:61:82:97:3e:2d:fa:8d:00:
9f:d2:c4:8e:0d:30:ba:4d:aa:52:7a:e6:c2:b9:ca:
c2:10:ba:c6:f1:68:20:cb:c5:22:03:37:96:18:26:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:32:F2:38:73:E5:95:D4:5F:0C:74:7A:0B:68:D0:DF:34:E8:C8:2A
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:77:01:5f:1c:05:46:7c:9e:4f:aa:b4:3f:d8:5f:25:c2:5d:
a4:08:fc:0d:c5:62:83:4a:55:b7:62:c2:cf:d9:b6:9d:d2:bc:
4f:9b:4b:26:f9:e5:7c:76:cf:b0:cc:fb:45:56:34:1e:38:ca:
9b:5e:7a:18:4a:8c:62:38:ec:5c:a4:26:52:49:1e:4c:60:ce:
9e:6b:52:87:db:ef:bd:8f:6a:4b:34:2a:5e:8f:5b:fa:eb:ab:
c1:de:69:57:f3:e5:0b:0b:44:40:3b:1a:45:6e:16:67:54:d9:
98:cb:af:38:43:5a:f3:c9:50:a4:b3:e2:16:92:24:45:19:bf:
a5:2e:02:41:bb:0b:05:66:27:e8:a5:83:2e:e6:17:02:c7:c7:
3f:90:32:48:70:43:8a:1d:1a:33:e8:dc:d7:72:c5:e2:c6:e6:
68:66:28:61:4c:5b:28:f7:13:2a:54:35:2e:51:58:d9:d3:58:
b2:fb:ce:4d:84:1a:50:93:26:20:0c:ea:1a:2f:b5:48:4b:c7:
44:31:e4:ff:0f:96:a9:88:53:77:3b:08:d4:38:d7:59:9b:03:
8b:98:dc:ba:93:6e:10:33:a5:e4:90:73:c8:57:72:87:2f:fe:
05:9e:c9:89:7b:dc:ca:f1:b0:42:54:9b:53:4d:52:ae:2c:6c:
83:13:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:55 2025 by rpki-client