Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: SqgHcAL5Jn/2hLV/7x3uowXEBgcGk2mLBlGWv7vfEmw=
Subject key identifier: AD:80:5C:F5:49:D8:42:94:62:08:B4:0D:60:49:73:1F:1D:6F:3C:6C
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 019A71B808A61D3C20BC76FD268EFB6499FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 14E3
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: B/1MzwUJKyFYXpn1+fXJsSGObV51AT2xS2ixEbAHwJg=)
2: o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa (hash: ju/o7BILnihNNjEqI90onU7QdzoVAl2fjP/NUv+3xWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:08:a6:1d:3c:20:bc:76:fd:26:8e:fb:64:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=ad805cf549d842946208b40d6049731f1d6f3c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:a9:b6:f2:46:7e:d8:0e:77:a0:8c:51:60:
90:56:32:91:ed:f7:13:cb:98:49:0d:71:97:95:98:
ef:37:43:88:4f:ee:3f:49:69:dc:3f:47:2d:32:5a:
1d:c9:07:14:fe:b9:3d:d8:86:45:9f:a7:e0:8a:e1:
c6:ef:87:f6:d4:03:07:19:00:79:24:c3:b7:63:fe:
fd:3f:8f:27:d3:63:15:ea:0f:3b:91:da:12:4d:8c:
2c:da:8f:e1:fe:8e:06:20:6e:f1:d0:ee:81:0a:ea:
1f:24:83:34:97:32:be:6f:5d:c7:86:a3:93:ab:83:
33:77:df:e2:d3:6f:57:36:54:b1:11:88:f6:f6:01:
a6:e3:02:d2:16:15:97:19:86:1c:ea:dc:3c:bc:4a:
a2:6d:eb:24:36:8b:a5:03:bd:1c:4c:c3:b2:59:2e:
86:e4:33:ea:82:f6:77:4a:93:18:72:20:bc:1f:6c:
4b:6b:83:f6:68:2a:ec:6c:b1:45:ef:64:9c:57:11:
f1:f5:76:43:f2:e5:b7:b6:ab:24:fd:03:98:cd:c5:
e1:13:31:8b:6f:7b:86:fa:7c:a5:b4:b2:e4:58:22:
61:15:92:12:f7:8c:e2:55:c7:81:81:07:c9:54:6e:
8e:a5:b3:b9:25:84:73:7a:e3:8e:f2:5f:69:b2:1b:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:80:5C:F5:49:D8:42:94:62:08:B4:0D:60:49:73:1F:1D:6F:3C:6C
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2d:77:84:89:16:75:fc:e4:79:5b:47:d1:e4:25:3f:99:cf:
fb:ca:f8:68:36:3d:ef:f8:c0:a5:c7:67:b6:b0:a7:1f:8d:6d:
24:1b:08:a7:f8:b5:6f:55:09:43:ae:66:f9:91:b7:03:1b:fc:
48:44:65:cf:fd:e1:a7:96:76:7c:eb:84:9f:d7:a6:58:6a:43:
06:c2:c7:6c:26:71:5a:26:19:e0:21:98:8c:54:9c:ac:1d:74:
fc:1b:7d:c0:fa:17:7c:9c:03:94:f2:2c:73:13:4c:f8:56:29:
01:62:79:a4:16:d7:eb:2e:2b:c7:92:ab:49:8f:ad:54:43:29:
c6:df:dd:d8:bf:e2:e3:4a:6a:0d:26:8e:39:13:37:86:df:d8:
65:f4:f7:27:91:5b:60:29:6d:14:4a:43:51:78:5c:01:d3:c1:
3d:70:93:24:f3:74:55:8c:d6:d3:68:82:dd:36:24:b0:6f:59:
cb:97:be:ec:98:84:c0:88:a8:b3:bf:92:ce:4e:87:e8:30:83:
d5:c8:78:6f:c8:8b:ff:66:34:5a:6b:95:77:48:a4:5c:98:e8:
ac:df:e1:27:14:72:fb:78:1d:c6:18:d2:41:72:f4:49:79:45:
2c:f5:c2:a4:de:6c:cc:9d:6e:11:6a:69:f5:4d:ef:08:90:e0:
cd:3b:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:56 2025 by rpki-client