Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: oxkCHXq8K/shvmFhkoF0r4avIgo8RMvEIxDUuf1DEAg=
Subject key identifier: E1:15:48:8F:3F:12:DD:5E:B3:70:3D:42:C6:38:28:D4:B7:F6:B9:F4
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 019A4EF48F960A13C6D58591B93AB4AFC7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 124F
Signing time: Tue 04 Nov 2025 13:00:41 +0000
Manifest this update: Tue 04 Nov 2025 13:00:41 +0000
Manifest next update: Wed 05 Nov 2025 13:00:41 +0000
Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: 6j8I7cBXNf2swhRtQJr+bPo2VAty8S914ePLgSVJqRk=)
2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8f:96:0a:13:c6:d5:85:91:b9:3a:b4:af:c7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Nov 4 13:00:41 2025 GMT
Not After : Nov 5 13:00:41 2025 GMT
Subject: CN=e115488f3f12dd5eb3703d42c63828d4b7f6b9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:41:68:e0:13:d6:ec:43:d4:f2:55:ba:ee:
28:d5:ce:97:f2:64:81:e9:35:bf:00:5e:8c:11:d8:
91:9b:79:36:06:0a:c6:b7:70:82:a9:64:08:78:4a:
82:77:51:b6:23:fe:87:15:af:98:50:02:5e:06:47:
45:61:82:06:37:90:03:36:24:ef:46:3a:7c:2b:d4:
85:c7:97:9c:b1:a2:6f:71:e0:96:f4:f2:a1:94:ed:
fd:2c:87:ad:19:1a:5e:3e:c0:a2:73:11:75:3d:b2:
a6:87:44:34:62:d2:e8:5b:56:9a:13:60:16:cb:10:
50:74:7b:e8:13:e3:c8:9c:45:71:a5:79:97:f9:dc:
6c:a6:21:fc:ce:09:c9:a4:7e:32:d7:27:be:b5:50:
4b:c8:dd:00:17:46:03:16:a9:f8:78:a2:81:2b:c4:
5f:01:36:10:61:1b:66:70:db:b2:dc:1f:48:67:53:
d5:69:41:be:49:78:c8:11:f4:96:63:ea:86:87:47:
b0:0f:38:14:4d:e4:9e:26:eb:e2:34:27:1d:4a:ae:
d5:6e:94:05:41:c2:c8:93:f0:9e:b2:3a:30:4d:34:
c1:a5:b4:d9:7b:7f:36:4b:0d:07:e6:4e:47:6f:3f:
db:40:0f:75:2b:0f:1c:4d:d3:23:14:c4:2f:d5:ac:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:15:48:8F:3F:12:DD:5E:B3:70:3D:42:C6:38:28:D4:B7:F6:B9:F4
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:47:69:3e:5e:cc:0a:f4:06:8b:37:66:62:02:ba:05:99:83:
24:72:d7:41:1b:54:52:fe:41:b2:bc:9b:10:c9:f4:00:db:8b:
2d:e6:ad:e7:36:d0:e7:cd:ac:a1:9b:10:a2:93:06:10:8a:ad:
93:60:5f:49:0f:81:ad:f1:c4:b4:e0:37:02:ee:57:38:fa:96:
4e:81:12:8f:e8:82:b9:cc:6a:c8:c3:8f:05:d5:c5:70:c7:79:
0a:a7:5a:15:39:26:91:29:0a:41:a6:5a:c4:7f:21:d1:b7:36:
69:aa:dc:b3:e8:aa:04:4b:1f:86:b1:32:40:45:2e:89:00:c7:
bb:2a:fa:1a:2b:04:2a:ae:a4:44:20:99:fc:ca:6d:92:10:e6:
bf:7c:15:85:9a:05:44:c6:8b:69:5d:50:13:12:63:83:cb:fc:
d1:17:2c:9d:28:ad:6d:5f:48:a0:ed:52:d0:92:89:c4:0b:49:
51:06:03:d8:8d:70:34:9e:4d:3b:4f:98:42:16:35:4b:3c:75:
90:bc:c9:97:7e:06:c1:a6:ad:f5:d1:2d:a0:ff:3d:e6:93:5c:
1c:f0:a2:63:fd:cf:c5:02:46:1b:38:be:a5:98:03:f5:74:62:
a9:18:1a:70:45:21:c2:37:22:0c:8a:fb:1e:16:5a:22:34:39:
ec:fc:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:17:08 2025 by rpki-client