Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: wHCroaKxNt/fjx1TpxcOr1dab83sr2Jud5LCw9SnzlA=
Subject key identifier: 66:FF:50:09:31:63:89:93:85:D7:59:D2:BC:77:03:42:3D:CC:A1:02
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 019A5564AECA91ACE395FF0240D5E79944E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 0AA4
Signing time: Wed 05 Nov 2025 19:00:52 +0000
Manifest this update: Wed 05 Nov 2025 19:00:52 +0000
Manifest next update: Thu 06 Nov 2025 19:00:52 +0000
Files and hashes: 1: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (hash: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=)
2: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: pG4M4jB6PnCi3a6EOqQ1TGkQszjX/oCga5cuuV5UO6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:ae:ca:91:ac:e3:95:ff:02:40:d5:e7:99:44:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Nov 5 19:00:52 2025 GMT
Not After : Nov 6 19:00:52 2025 GMT
Subject: CN=66ff50093163899385d759d2bc7703423dcca102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:f8:a8:b7:11:cf:d4:ec:b7:b8:2e:5b:12:
d5:29:f5:a0:37:88:ef:9a:15:c1:01:3b:f6:c2:a9:
85:5c:87:be:e3:65:51:9f:9a:a3:18:88:e7:c6:58:
0f:cd:44:86:2d:87:31:51:c5:78:05:5c:98:8a:85:
fd:13:e4:d9:f7:9e:fe:62:32:cc:aa:61:16:bc:e1:
81:9e:62:ae:59:2a:af:80:6c:fd:e0:c6:b7:56:de:
45:fc:f0:06:25:2c:9d:ec:93:b2:97:02:d1:a6:08:
41:54:1b:20:0f:19:d9:da:35:b8:da:6f:e4:f9:a4:
93:b9:f8:95:c7:1f:2a:44:4f:51:7f:6e:18:68:a2:
e3:9e:4a:ae:6b:8e:a4:52:4b:ff:73:6e:65:16:f4:
e6:01:51:65:68:64:aa:7d:40:f4:8e:f3:5d:c9:7a:
2e:a2:95:76:57:18:e5:9e:7e:a0:69:58:18:ef:c1:
47:61:49:2e:c9:37:91:fd:09:08:ed:bd:06:ae:16:
31:dc:d0:60:b5:21:14:59:77:e2:f9:d4:c7:f4:86:
fa:80:fe:ae:a6:55:8e:68:3f:88:e4:a8:e7:1f:58:
6c:dd:ca:d5:81:d4:87:fb:50:b4:77:6b:3e:bb:7f:
36:c3:7a:ee:37:91:0d:02:9c:cd:f2:7f:02:ff:20:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FF:50:09:31:63:89:93:85:D7:59:D2:BC:77:03:42:3D:CC:A1:02
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1e:4e:57:21:e1:60:0d:58:37:30:00:36:30:b8:43:e5:82:
79:60:34:a7:aa:c3:4e:c8:95:57:76:25:41:5f:60:79:8a:00:
34:0b:a2:6b:3b:98:eb:d4:96:65:5c:f2:16:89:6c:3e:f9:72:
c4:2b:e2:b9:bb:2e:c9:c9:4b:0b:1e:95:2c:ba:d9:47:70:c7:
52:9a:b3:65:62:bc:c5:d9:5f:6d:8e:3f:f5:fe:85:56:bb:3b:
0b:f0:2f:6d:30:60:fa:00:41:5f:08:f8:7f:c2:65:62:bc:3c:
6a:54:20:9a:0c:2f:50:e2:c6:b0:08:60:cf:d0:89:9a:0d:76:
88:a9:ea:a5:02:39:bf:94:ae:49:2c:18:da:2c:26:5a:00:20:
35:92:6c:ab:f4:b4:e2:02:0d:d8:ad:24:ee:a3:50:88:ec:6a:
63:39:d1:57:64:3d:6d:f2:0a:75:e8:c4:dc:ea:4c:2e:1e:63:
11:50:19:bc:c6:87:7c:b5:79:36:c3:46:65:84:8d:0c:26:03:
7e:f4:80:35:8a:cf:d2:e8:dd:f5:3a:04:01:f5:85:43:bb:cb:
f6:f2:6c:02:20:66:64:fd:cc:24:4a:5d:2d:3d:56:d4:1b:78:
81:ee:16:f1:7f:a6:11:65:ae:6a:d2:fb:0e:15:ee:f3:a8:26:
6a:ed:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:31:06 2025 by rpki-client