Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: CeweC37TFZAxGqH+te1EqgignofKlMzyx/4NIJWhiwU=
Subject key identifier: 6D:81:B1:F1:CD:BB:D3:35:A7:D4:BB:40:F7:42:6C:D5:74:A0:64:35
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 019A71B809D3853C1C0E27E392307B894EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 03A5
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: kSkKdsT/tdYmUwlki4Cr4f/hegFmWBywkgoEpZSyqlY=)
2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:09:d3:85:3c:1c:0e:27:e3:92:30:7b:89:4e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=6d81b1f1cdbbd335a7d4bb40f7426cd574a06435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:8e:44:99:44:89:75:ce:42:7c:07:15:85:
32:69:60:63:0d:0c:9f:3d:90:22:66:a5:60:39:98:
e5:11:0f:9e:dc:c9:fc:4f:83:85:b9:ca:2a:d4:cb:
51:c3:09:e3:c2:cd:a3:17:3e:57:f8:10:01:ec:30:
2d:47:91:83:0c:80:6e:da:d5:9b:f5:0a:7c:fb:07:
16:60:2e:d2:07:bf:8a:47:3c:85:b5:5d:05:96:8d:
2e:16:3b:cf:74:3f:68:e8:97:e6:4a:8e:85:02:c8:
a7:d9:1d:68:1f:ad:bb:cf:56:3d:c9:d6:1e:38:69:
2b:dd:2a:dc:2d:26:97:e5:28:ce:a2:2d:04:2a:ed:
28:9a:f1:11:65:c7:6a:6d:82:48:13:a6:19:00:89:
27:16:cc:a3:f2:ae:28:0c:01:43:5e:2e:19:49:97:
32:84:b3:76:53:39:b6:81:8e:ed:de:2d:ae:dc:e0:
d0:85:9f:be:f4:54:0c:a0:21:28:c9:43:96:8d:ac:
74:3b:ad:08:9e:37:5f:8b:0b:57:4d:81:a9:27:ab:
63:73:f5:1f:14:22:7b:82:87:09:3e:59:18:57:3d:
96:de:44:91:c4:32:4a:c0:8e:7d:8a:a7:93:68:4d:
cb:fc:3d:14:57:ad:cd:e2:9e:d5:97:4b:24:76:1c:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:81:B1:F1:CD:BB:D3:35:A7:D4:BB:40:F7:42:6C:D5:74:A0:64:35
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ad:d2:0b:da:ac:69:76:02:94:c2:c9:e8:d4:12:35:df:a9:
6e:2e:08:20:39:79:79:9a:e9:88:18:e9:56:34:cc:c0:3c:fc:
ff:ef:7e:9e:db:ef:bb:cb:c4:7f:53:14:8b:f3:00:7c:de:f1:
cc:83:ed:86:95:72:6c:3b:31:f1:8f:a1:20:c9:a7:5a:8f:5a:
6a:f0:75:ad:63:07:df:63:ea:03:99:b7:eb:a7:c6:1f:4d:81:
c3:84:9a:03:48:c7:ab:fc:e5:a8:64:0f:5c:6f:94:69:d7:2f:
ab:e8:75:7d:fb:74:d1:3a:b1:fe:3d:ee:c0:23:76:30:0f:7e:
b1:ed:a2:0a:06:3a:62:86:d0:3d:be:81:8e:2c:49:fc:ae:36:
21:88:90:6d:18:40:2c:3f:90:a2:4f:bf:f8:22:45:36:1c:89:
1b:bc:6e:4e:8a:c1:a1:c5:37:48:cb:9f:26:81:1e:6b:fe:c8:
b7:36:47:f2:83:4f:92:fa:31:13:07:d2:fb:fa:36:b5:29:01:
16:88:34:75:05:d7:11:45:e6:d4:2a:86:81:4b:d6:a7:25:56:
e9:b8:eb:d5:a8:f5:ea:66:72:ed:c4:39:f4:52:63:78:79:9d:
44:94:b8:e1:e8:da:84:51:30:f6:09:b7:84:3b:23:62:02:ff:
d6:4c:75:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuAnThTwcDifjkjB7iU7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhM2UwOGVmM2Q3NTRiYzZhZmE5MWZhNmMxMDAyMGY1ODUw
NWMxNjEwHhcNMjUxMTExMDcwMTE3WhcNMjUxMTEyMDcwMTE3WjAzMTEwLwYDVQQD
Eyg2ZDgxYjFmMWNkYmJkMzM1YTdkNGJiNDBmNzQyNmNkNTc0YTA2NDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsKORJlEiXXOQnwHFYUyaWBjDQyf
PZAiZqVgOZjlEQ+e3Mn8T4OFucoq1MtRwwnjws2jFz5X+BAB7DAtR5GDDIBu2tWb
9Qp8+wcWYC7SB7+KRzyFtV0Flo0uFjvPdD9o6JfmSo6FAsin2R1oH627z1Y9ydYe
OGkr3SrcLSaX5SjOoi0EKu0omvERZcdqbYJIE6YZAIknFsyj8q4oDAFDXi4ZSZcy
hLN2Uzm2gY7t3i2u3ODQhZ++9FQMoCEoyUOWjax0O60InjdfiwtXTYGpJ6tjc/Uf
FCJ7gocJPlkYVz2W3kSRxDJKwI59iqeTaE3L/D0UV63N4p7Vl0skdhznvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2BsfHNu9M1p9S7QPdCbNV0oGQ1MB8GA1UdIwQY
MBaAFAo+CO89dUvGr6kfpsEAIPWFBcFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUt
NGQxZDM3ZGM4MWI0LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUtNGQxZDM3ZGM4MWI0
LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAna3SC9qs
aXYClMLJ6NQSNd+pbi4IIDl5eZrpiBjpVjTMwDz8/+9+ntvvu8vEf1MUi/MAfN7x
zIPthpVybDsx8Y+hIMmnWo9aavB1rWMH32PqA5m366fGH02Bw4SaA0jHq/zlqGQP
XG+Uadcvq+h1fft00Tqx/j3uwCN2MA9+se2iCgY6YobQPb6BjixJ/K42IYiQbRhA
LD+Qok+/+CJFNhyJG7xuTorBocU3SMufJoEea/7ItzZH8oNPkvoxEwfS+/o2tSkB
Fog0dQXXEUXm1CqGgUvWpyVW6bjr1aj16mZy7cQ59FJjeHmdRJS44ejahFEw9gm3
hDsjYgL/1kx1oQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:12 2025 by rpki-client