Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
File: Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json)
Hash identifier: YkEsAtEJTI68YDn+8iiY9JMgqvYn/5x+uZoVnmDfOkc=
Subject key identifier: D2:23:51:91:A9:F7:28:37:3E:C1:F4:3B:44:3B:86:09:95:01:4D:5F
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Certificate issuer: /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial: 019A71809A1F656268F52F7F0E6D90BE51F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
Manifest number: 0BB3
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: 1uQ1tCXjbZiOFsjlre5xsM7S4TEFVB11om3z/oS+1UI=)
2: bscorJtE41igLaTAQbtgAQqBxz0.roa (hash: sGg8Ckzp0oPzFQ9Hy7BsC5B5QG6ZfSY1AxKv6j6SlLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9a:1f:65:62:68:f5:2f:7f:0e:6d:90:be:51:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=d2235191a9f728373ec1f43b443b860995014d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:1c:03:f6:05:ca:32:c5:5c:41:41:1a:10:
dc:65:a8:7d:1e:bb:83:8b:34:18:fb:fb:36:bf:ad:
37:86:74:4e:52:f1:c7:da:c7:0b:09:be:ad:24:a8:
7b:53:6b:46:c4:c0:45:2d:dd:f1:54:1d:09:7b:ad:
b1:de:63:e0:01:c9:31:0a:47:25:59:15:04:48:b2:
59:4a:72:f3:bd:31:91:3f:19:67:62:47:4f:78:98:
fd:9c:61:86:ba:cf:bd:5e:be:1b:b7:98:5d:62:4e:
10:4a:f6:56:cb:1d:1a:62:d9:1e:d5:1a:cb:9b:cd:
c6:1b:a4:6c:67:63:0f:23:30:84:f3:db:71:f5:40:
73:71:59:02:2d:fd:15:e4:10:45:44:7d:e0:64:b3:
91:73:42:f9:7e:7d:47:f0:45:57:1b:6d:4b:1b:da:
ef:70:97:8f:44:e8:53:62:f6:c0:dc:f8:35:25:06:
f7:56:b9:ef:ad:6c:c6:2c:67:d8:bd:ad:fd:3b:b3:
fe:b1:35:64:52:1d:da:f0:28:ab:a9:d2:55:d4:1d:
73:5c:55:51:27:c0:d9:53:31:a6:d4:c2:79:ad:22:
11:b7:7f:aa:d6:34:41:eb:60:61:1b:30:28:4d:46:
7a:99:a1:c7:06:8b:57:6c:e5:03:12:8c:70:ee:c3:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:23:51:91:A9:F7:28:37:3E:C1:F4:3B:44:3B:86:09:95:01:4D:5F
X509v3 Authority Key Identifier:
keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:82:81:5e:7a:5d:6f:49:90:8a:26:a7:ac:c5:a6:38:81:8f:
ee:e4:90:d0:c4:46:aa:37:51:59:59:91:e3:7d:18:a6:5f:2d:
61:3c:88:ec:74:c5:48:a8:32:7a:13:e4:5a:b6:a7:8b:2e:33:
a1:83:d0:90:98:d0:98:64:a6:71:85:b6:13:cc:c1:27:68:4d:
c2:ab:a4:b7:2a:b5:aa:81:45:9c:b4:8e:e2:6b:8a:e4:0b:43:
b2:a0:bf:92:fd:ba:9c:16:e5:76:b3:a1:68:5e:66:23:08:c3:
06:9b:c5:e9:a6:1c:98:1f:71:26:34:b9:fe:ca:b0:11:5c:78:
1f:3a:80:94:19:9d:34:47:8c:97:65:07:05:12:4e:5f:c7:c6:
dd:02:55:2c:04:e0:e4:2c:93:d0:e4:f1:71:56:09:c9:a1:ec:
75:85:eb:64:df:da:db:6a:2e:a2:66:b6:9e:1a:3d:f3:f4:60:
20:8d:01:a5:b4:4c:ef:84:0d:df:8b:68:70:61:7a:54:2e:77:
6a:ce:48:c5:be:92:1d:d6:a5:4f:31:c9:e4:3f:82:c8:cb:34:
1f:62:bd:d5:d9:9c:ea:a7:24:ab:2e:78:ca:e9:3b:c3:28:c7:
9d:5f:82:7e:e8:47:68:d3:5f:74:a2:e5:28:48:16:d7:5b:a5:
04:a2:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:08 2025 by rpki-client