Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: WDuyKP9+TkExKzvA9E4BAP48xjYAdW64frsIwI4ZMNk=
Subject key identifier: F4:CF:F6:84:FB:1A:7F:23:C8:A2:AA:0B:BB:DE:AC:AA:A8:20:5B:41
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 019A258A8C512EFEB0CC3C8CEC39B42BB768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 0F17
Signing time: Mon 27 Oct 2025 12:00:28 +0000
Manifest this update: Mon 27 Oct 2025 12:00:28 +0000
Manifest next update: Tue 28 Oct 2025 12:00:28 +0000
Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: Q/WYBfo1ZWZRGy6WsuHLoTqyVm88eHENVV/gfSv5fI8=)
2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:8c:51:2e:fe:b0:cc:3c:8c:ec:39:b4:2b:b7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Oct 27 12:00:28 2025 GMT
Not After : Oct 28 12:00:28 2025 GMT
Subject: CN=f4cff684fb1a7f23c8a2aa0bbbdeacaaa8205b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:f5:5e:5f:44:32:dc:d9:a2:79:1e:34:1f:
4a:23:b6:d4:8d:e8:a9:9b:cd:32:b7:1e:af:7b:77:
56:41:05:e9:30:b9:12:60:0d:57:47:92:b5:84:f6:
28:b6:cd:04:31:54:4a:5b:88:43:27:ba:05:e4:ce:
51:4b:f9:d4:19:26:99:1a:ba:89:ef:62:d2:0b:db:
4c:e6:d3:8c:23:6c:c2:1a:3e:1c:c1:04:ce:17:b8:
2e:b7:9c:c8:21:26:9e:1f:b1:70:90:36:dd:89:54:
ff:a5:b9:34:cb:22:29:99:16:d4:e9:4d:13:66:20:
ab:8a:9b:ce:da:2a:07:9b:b7:c3:d3:65:b3:57:37:
68:1c:e8:0f:3e:b9:be:e0:0b:42:e8:a3:16:12:5e:
f4:78:e1:1f:30:5f:4a:4f:68:d1:28:c4:ae:90:a2:
53:6b:2d:71:2c:d2:84:35:92:75:5c:f4:99:97:ea:
50:b4:76:6b:e6:33:80:95:01:94:cd:01:af:cb:e8:
b7:38:a8:b7:8c:90:25:a7:33:97:f9:b4:b5:34:6f:
fb:25:36:75:03:ea:c9:cc:55:15:ad:6a:51:62:cb:
04:dc:19:fb:7c:f9:b8:7e:a0:3f:63:76:c9:e5:f2:
8b:d7:1f:e5:00:ca:64:a0:84:5c:fd:3d:16:c8:a5:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:F6:84:FB:1A:7F:23:C8:A2:AA:0B:BB:DE:AC:AA:A8:20:5B:41
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:59:44:ad:45:9d:d9:c9:1d:08:77:1b:d6:3c:85:2f:bd:8c:
f0:c5:51:6f:4a:b9:8e:a3:46:25:5b:0a:68:9c:86:50:a5:3c:
b0:21:e6:ea:a3:14:b6:7b:e7:a6:e3:b9:62:8e:ef:4a:72:74:
1c:44:c1:b9:a2:b3:10:c8:a2:a7:1e:97:ba:a7:0a:29:a8:4e:
fa:c5:35:dd:7b:28:9a:41:19:68:c4:28:99:2c:d4:53:b1:01:
b6:60:d7:97:9a:4e:f1:21:12:97:de:07:ea:f3:34:11:ec:29:
e4:f0:d3:ce:94:99:6d:91:3c:ec:46:4b:c9:c6:49:43:18:03:
a9:7d:9f:1c:5a:3d:65:4a:bc:41:dd:f6:95:f6:30:b8:43:f0:
78:6a:7e:04:28:eb:cc:b3:6f:ec:26:b2:af:45:27:1a:f5:c6:
e2:2f:d5:fb:4f:a7:e2:97:f0:92:04:43:73:2d:8a:21:32:eb:
a4:ee:17:17:ef:3b:c9:ed:9c:7d:98:c8:e9:8c:c1:97:1f:54:
74:b1:c2:8e:7c:4a:04:2d:f5:1c:cc:02:df:2f:0a:c1:d9:4c:
38:ec:63:f2:9d:a6:35:16:ca:6d:50:cd:26:57:30:8f:fb:1a:
9d:58:cb:cc:a0:4e:17:01:89:a1:50:46:4f:0e:91:28:18:2a:
21:7c:08:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:27:53 2025 by rpki-client