Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
File: x5CPU-RRfc5MdMouMJgniJEMQDM.mft (raw, json)
Hash identifier: lTd9cBj2i+5Ah2tOpPS6ywAIyjxwbr0786HNGE0yD3U=
Subject key identifier: 0A:58:A0:77:97:11:84:85:DF:38:31:2A:D1:09:42:5C:4F:97:78:66
Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033
Certificate serial: 019A4E868F97899F8904E8B516778C14487A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
Manifest number: 11F1
Signing time: Tue 04 Nov 2025 11:00:32 +0000
Manifest this update: Tue 04 Nov 2025 11:00:32 +0000
Manifest next update: Wed 05 Nov 2025 11:00:32 +0000
Files and hashes: 1: 1-oMFTx8B3lukMNBvWfS47n97CmA.roa (hash: m9rVIDnRYZoBIXBcOLquTYp9zMM2moDhJAmWdarMX5o=)
2: x5CPU-RRfc5MdMouMJgniJEMQDM.crl (hash: gpYVnw73zolHVqGjSD8mT65P9R+LWzHf2wgLKJUoSbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8f:97:89:9f:89:04:e8:b5:16:77:8c:14:48:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033
Validity
Not Before: Nov 4 11:00:32 2025 GMT
Not After : Nov 5 11:00:32 2025 GMT
Subject: CN=0a58a07797118485df38312ad109425c4f977866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:04:39:1d:52:74:63:3d:3f:b1:77:da:c0:
de:55:01:38:f9:3c:e8:be:99:23:06:53:65:c6:98:
36:6e:72:ca:3f:b8:82:b7:40:3f:5a:12:48:23:1c:
d3:59:c9:00:f7:4e:2b:5e:1b:67:63:8b:48:e0:07:
b6:b9:d4:5e:d9:87:73:31:3c:45:94:62:8d:ad:a1:
21:0d:fe:d1:34:c4:e8:24:71:35:a2:0f:04:c4:21:
74:2c:3f:9c:c6:66:05:0f:98:1b:fa:e2:4f:c4:ef:
88:a2:b1:93:f2:df:4b:df:ff:7e:68:c4:07:53:54:
b1:9c:8d:96:e9:d4:82:f9:e0:39:94:dc:dc:fa:f8:
45:40:d6:97:8b:72:ea:14:59:41:f2:da:f1:41:42:
71:62:9f:0b:46:71:ea:5b:5c:6e:4b:26:0f:09:de:
6d:7f:32:6f:d4:48:a6:4c:9b:c5:77:e5:e9:ea:16:
98:f4:e5:6b:ee:38:5b:3c:38:15:d1:50:be:cd:84:
55:cf:f6:0b:89:b6:7c:3a:9f:94:7f:04:ce:1b:c6:
3b:5b:4d:eb:73:56:af:ac:9d:fb:5e:70:f5:66:78:
35:8e:b9:dd:2f:4c:b7:1e:74:9a:77:86:40:42:9b:
aa:df:cb:f5:3f:ec:6f:1a:b5:dc:44:b9:41:b4:3a:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:A0:77:97:11:84:85:DF:38:31:2A:D1:09:42:5C:4F:97:78:66
X509v3 Authority Key Identifier:
keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2c:9e:54:d5:c2:df:8e:c5:e6:14:a2:8e:91:1c:e6:a1:b7:
9a:d1:4f:65:97:95:2a:ed:ca:fb:95:71:08:7d:5b:17:c8:ad:
96:ef:67:f9:50:dc:01:5e:50:ed:86:44:b0:ca:2f:ab:93:b7:
4a:42:6a:f7:b3:05:6e:20:51:ed:fc:01:c5:6b:d9:25:61:a4:
97:6d:86:5c:3e:e7:7a:32:3c:4f:33:4c:be:c0:b7:17:b6:86:
5d:4a:44:32:c9:ff:23:6e:c8:71:04:01:be:63:f1:8e:0a:b3:
db:c7:2e:38:1b:6c:84:20:ee:eb:c2:70:05:55:52:2b:e8:49:
4a:f8:77:eb:9c:fe:74:65:1b:44:6a:a6:ec:dc:f6:a9:1c:3a:
08:e0:5c:b2:44:f7:c0:79:d5:da:63:53:ec:5a:b3:8a:9a:16:
9c:4e:6c:03:2b:4e:14:78:df:a0:a0:4f:46:06:83:89:f0:8d:
a2:59:1a:75:5e:30:4d:d8:8c:c5:6d:4e:73:2e:dc:cb:34:db:
e8:84:4f:35:4d:d8:27:6d:c4:6d:75:1f:cf:ba:f5:f7:3f:df:
2c:81:4d:54:f4:b9:f1:17:81:1c:52:42:7e:ab:de:72:ea:ab:
80:f0:c1:a2:49:7f:cb:15:75:41:48:36:2c:ba:a6:a2:66:6f:
2e:ca:60:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOho+XiZ+JBOi1FneMFEh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OTA4ZjUzZTQ1MTdkY2U0Yzc0Y2EyZTMwOTgyNzg4OTEw
YzQwMzMwHhcNMjUxMTA0MTEwMDMyWhcNMjUxMTA1MTEwMDMyWjAzMTEwLwYDVQQD
EygwYTU4YTA3Nzk3MTE4NDg1ZGYzODMxMmFkMTA5NDI1YzRmOTc3ODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRcEOR1SdGM9P7F32sDeVQE4+Tzo
vpkjBlNlxpg2bnLKP7iCt0A/WhJIIxzTWckA904rXhtnY4tI4Ae2udRe2YdzMTxF
lGKNraEhDf7RNMToJHE1og8ExCF0LD+cxmYFD5gb+uJPxO+IorGT8t9L3/9+aMQH
U1SxnI2W6dSC+eA5lNzc+vhFQNaXi3LqFFlB8trxQUJxYp8LRnHqW1xuSyYPCd5t
fzJv1EimTJvFd+Xp6haY9OVr7jhbPDgV0VC+zYRVz/YLibZ8Op+UfwTOG8Y7W03r
c1avrJ37XnD1Zng1jrndL0y3HnSad4ZAQpuq38v1P+xvGrXcRLlBtDr+mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApYoHeXEYSF3zgxKtEJQlxPl3hmMB8GA1UdIwQY
MBaAFMeQj1PkUX3OTHTKLjCYJ4iRDEAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDVDUFUtUlJmYzVNZE1vdU1KZ25pSkVNUURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNDI1ZDgtZjc4Ny00ZjI0LWJhMmIt
MjhmZTY2MTQ0OTgxLzEveDVDUFUtUlJmYzVNZE1vdU1KZ25pSkVNUURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lNDI1ZDgtZjc4Ny00ZjI0LWJhMmItMjhmZTY2MTQ0OTgx
LzEveDVDUFUtUlJmYzVNZE1vdU1KZ25pSkVNUURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyyeVNXC
347F5hSijpEc5qG3mtFPZZeVKu3K+5VxCH1bF8itlu9n+VDcAV5Q7YZEsMovq5O3
SkJq97MFbiBR7fwBxWvZJWGkl22GXD7nejI8TzNMvsC3F7aGXUpEMsn/I27IcQQB
vmPxjgqz28cuOBtshCDu68JwBVVSK+hJSvh365z+dGUbRGqm7Nz2qRw6COBcskT3
wHnV2mNT7FqzipoWnE5sAytOFHjfoKBPRgaDifCNolkadV4wTdiMxW1Ocy7cyzTb
6IRPNU3YJ23EbXUfz7r19z/fLIFNVPS58ReBHFJCfqvecuqrgPDBokl/yxV1QUg2
LLqmomZvLspgTw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:26 2025 by rpki-client