Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File: CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier: L+SAI3yQP+HGftqWBjQC9dSlRd+ozxsLosYl1FNRnzI=
Subject key identifier: 9A:96:24:22:BF:F1:BF:24:DA:FB:8A:53:F9:18:25:DE:DF:02:BA:FC
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 019A7225F5C7FCA2A117829176B2C393DA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number: 135A
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: 6EDyve1AwD6Dr7yLTuNbN-Xy4o4.roa (hash: Emdh1wPq8o8m6XW7TGUMCluD0dAa1SuqkmrugOmuj5g=)
2: B6w_Bpuc6_z55rNlhPmO1YuLCzo.roa (hash: gyaIKII6sdza0Xvl0rqRN4WgM4TU/WIjbt0SjsyjCnk=)
3: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: A08lAmLFebP5g4TwiVslTD3k/bw8DsGwNrfi9Dhucn4=)
4: LbY04jClTnB29OPcKu4Bkiugyi0.roa (hash: hepXeBmznAcYftZ3FnIy8dUsak3JCi9NiUxbjUAx2gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f5:c7:fc:a2:a1:17:82:91:76:b2:c3:93:da:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=9a962422bff1bf24dafb8a53f91825dedf02bafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:e2:a1:18:18:c5:8a:24:9d:c2:a0:52:b6:
83:18:31:2d:26:ca:6d:f1:cb:cd:fa:92:f5:aa:a0:
1e:2d:26:b1:50:2b:e7:0e:99:2a:62:c6:5c:9b:2d:
43:ad:0d:51:2e:27:fd:ec:51:12:8e:b8:3f:ab:de:
97:2e:3f:c0:1a:92:17:5c:ea:b8:1a:03:6b:b4:e7:
8b:a4:da:5c:42:a7:91:e7:39:ac:46:94:e2:ba:e3:
28:ec:49:ef:aa:71:a7:69:f5:de:9c:27:12:a1:e3:
81:4b:46:90:44:17:93:b1:a5:33:0b:77:8d:99:60:
6d:7a:d6:dd:d0:3f:68:dd:97:00:70:df:a8:47:6a:
f2:06:eb:c3:0e:6c:ee:b3:ff:e9:d8:82:3d:d7:e8:
3f:89:b0:0f:d6:43:08:cf:e0:01:95:36:f4:ec:02:
e9:ef:7c:2d:31:69:9a:bc:0f:c1:7b:e1:f7:87:0d:
96:7b:5f:2e:22:17:23:fd:6e:05:6e:b4:bc:19:8a:
02:d9:15:1c:c5:9d:a6:78:db:ea:d7:78:bb:a3:9e:
b4:c4:ca:c4:44:06:3d:40:82:a5:f4:b1:46:44:b0:
57:f8:8f:a4:7e:8d:41:0a:c1:79:2c:47:13:44:1b:
c6:3e:5f:3a:2b:8f:f7:c4:53:79:97:46:31:3f:f4:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:24:22:BF:F1:BF:24:DA:FB:8A:53:F9:18:25:DE:DF:02:BA:FC
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4e:47:5b:60:a1:84:9b:11:18:75:08:ea:3e:12:c7:ed:48:
53:c6:22:33:14:bb:ee:48:79:4a:6f:9f:b7:22:df:ef:23:32:
16:c2:00:ab:c5:64:45:33:78:b5:5e:a0:9a:d9:d7:91:80:26:
77:c2:a8:01:3c:7e:cf:14:77:82:36:05:94:95:bc:f0:17:53:
98:cb:80:73:ee:29:af:df:d7:18:6b:2e:dd:0b:1c:d5:e5:a3:
6a:9e:ef:47:5c:7e:29:f8:30:a1:b9:cd:0f:1e:7c:6c:33:1d:
89:f5:a9:a2:f6:c6:18:eb:2d:2c:1b:a3:35:0f:d3:a5:cf:c4:
7c:53:2d:ab:59:5f:65:48:e6:c7:67:11:65:b9:40:d3:a5:f4:
09:83:8e:1f:59:f8:10:c8:54:56:bd:e8:a0:5a:57:89:dc:fc:
81:5e:f5:91:30:33:56:e4:06:bf:de:60:74:7e:c1:fd:e1:58:
4d:b5:d9:7e:31:79:75:81:75:0f:cb:67:b2:c8:36:a2:1b:4e:
69:15:94:0a:1a:69:7a:67:1a:63:bf:37:47:74:09:88:7c:6a:
9b:e3:b8:8c:98:68:45:82:d7:d0:0a:e0:7a:d9:8a:ee:97:df:
65:2a:fd:40:b0:70:70:55:40:a0:7c:3f:8e:a0:5e:6a:07:6e:
60:5f:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:32 2025 by rpki-client