Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: 45yFFGtzZkyOwinL4RARI6umDEyxruiHVobO1EU9Dgg=
Subject key identifier: F2:0C:0D:27:55:0C:77:D6:96:13:E0:2F:4A:FF:DF:AE:6C:A8:CB:3C
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 019A68B4EE7303106956F3DE68AAAB029294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 0490
Signing time: Sun 09 Nov 2025 13:01:19 +0000
Manifest this update: Sun 09 Nov 2025 13:01:19 +0000
Manifest next update: Mon 10 Nov 2025 13:01:19 +0000
Files and hashes: 1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=)
2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: SOAzG3dB5kM8lVHuZU+Vs/zWYBu3EUCXuZBRJWClHEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:68:b4:ee:73:03:10:69:56:f3:de:68:aa:ab:02:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Nov 9 13:01:19 2025 GMT
Not After : Nov 10 13:01:19 2025 GMT
Subject: CN=f20c0d27550c77d69613e02f4affdfae6ca8cb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:8d:23:a7:64:ef:9f:c2:2c:91:9f:41:e0:
e8:2a:53:8c:78:81:bf:16:aa:41:b0:e7:4e:df:a0:
ee:0c:31:09:1e:3c:d6:59:f6:a7:72:6a:28:29:c1:
3d:b1:30:28:10:f4:95:c8:92:a6:5c:5b:61:cc:83:
c0:4b:3d:92:2e:e5:23:0a:b5:ec:4d:06:cd:57:e5:
32:6e:29:84:35:e1:cd:67:64:ef:ff:67:96:a8:bd:
5d:7c:45:ad:08:bf:4c:76:cc:ec:fc:d5:ae:bc:35:
58:a6:15:c4:95:06:9a:73:44:4b:6d:5d:cf:e3:a4:
17:94:38:14:64:97:e2:a4:ea:5a:cb:70:f2:f5:61:
dd:f4:84:bd:43:00:d9:78:d4:82:ce:98:ff:28:50:
ef:54:7c:90:14:73:0b:91:d8:36:60:26:9d:f4:bd:
82:b0:ff:8d:95:84:f4:fa:39:9f:fd:0e:c7:fd:10:
5b:f8:75:1c:01:92:29:1a:21:ae:16:d7:64:a0:40:
7b:a6:9a:69:91:2c:93:18:b4:4c:0a:99:13:3f:f4:
db:1a:e3:82:5e:9f:5a:6e:d2:30:d9:d9:ef:87:89:
9c:78:b4:5c:c4:e3:33:aa:d7:fa:ce:0e:9f:5c:18:
d3:e9:9b:47:fe:18:69:5a:fe:60:d6:ac:84:7d:16:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0C:0D:27:55:0C:77:D6:96:13:E0:2F:4A:FF:DF:AE:6C:A8:CB:3C
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ab:ac:f0:06:c1:60:0f:e6:f5:56:0a:46:d0:5d:74:67:8e:
9d:25:b0:43:25:e0:5b:31:6c:cc:55:b7:bb:b4:cf:74:cc:37:
e6:ae:96:c0:6a:d1:c3:c8:9d:7e:df:9c:cd:c0:11:87:09:a2:
83:53:95:10:a3:92:c6:bf:e7:f8:90:b9:00:d3:b0:85:86:2c:
98:7f:6e:cb:61:b6:45:8e:f5:c4:b6:d4:78:0d:2c:06:e5:e0:
7c:d8:71:ea:ff:87:84:87:a5:94:31:8d:17:6e:6b:9a:77:bd:
76:f5:36:b4:bf:d3:74:2c:60:d4:4c:3f:8d:48:5e:99:ef:86:
62:04:ce:05:f6:05:1e:7d:4b:47:21:b2:ad:7f:44:13:7e:3c:
0f:10:a1:b7:b6:f3:c5:81:f1:e8:c6:41:06:ae:33:cd:71:6c:
bc:09:62:5a:31:27:6c:74:17:fd:67:87:d6:54:ec:d8:49:e7:
23:22:23:1c:00:f0:f6:4d:5c:fa:be:37:a4:91:35:40:f6:42:
fc:7e:75:ec:f2:f4:85:65:3b:50:11:58:ee:0e:2d:57:c0:3d:
16:a2:0f:11:fd:a4:63:a7:32:cc:45:a8:8d:20:0c:09:b9:14:
3c:21:90:5f:55:fa:03:60:1e:a4:db:0b:5f:5a:55:51:57:42:
2e:25:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 19:41:59 2025 by rpki-client