Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: FuKbzdHrSXQEJT8VDYjjpMq+7gJejNTeEdKnDW6FfMk=
Subject key identifier: 19:81:94:39:02:D3:BA:84:87:85:AE:D8:51:7F:69:63:30:34:5B:D4
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019A4E86AB9209D5CD96BAEE4A1B2324E610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 1097
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: 0znfpLqVeePrrfthZBEgDQonxAAZsShVi5D/fsU8ah0=)
2: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ab:92:09:d5:cd:96:ba:ee:4a:1b:23:24:e6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=1981943902d3ba848785aed8517f696330345bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:94:92:77:b0:66:9c:66:97:80:10:11:d5:
14:48:74:e9:48:4a:89:d2:81:a8:19:60:fd:7e:49:
2f:15:22:a6:91:47:9a:ae:ce:ac:22:73:a3:a1:b0:
ca:0a:fb:f8:25:03:17:44:48:8f:73:fd:4b:0a:23:
2c:91:6b:d7:50:09:02:d0:be:8a:eb:92:8b:2c:6c:
36:b5:07:3b:9e:38:6b:cc:0c:08:8a:9a:d1:99:b0:
de:b1:3f:c3:94:62:72:5a:a5:8c:8b:29:92:3b:52:
3f:a9:50:41:82:df:11:e2:60:b8:61:cc:f5:eb:90:
40:2f:5a:b2:54:1b:92:82:24:1e:ef:e3:7d:4a:82:
a9:37:ce:d3:c9:ed:46:c3:9e:2c:eb:22:e7:4a:59:
bd:6a:1b:f8:ec:98:57:6c:da:e5:43:6c:b7:0e:e3:
31:6f:a8:f7:fc:84:44:7b:98:83:aa:0f:05:d5:c7:
5c:02:a5:f3:0a:b2:64:1b:ce:a6:be:83:a8:68:1d:
a8:c2:a3:12:d3:0e:7b:7a:ea:4b:f2:c4:9f:c5:b2:
7b:89:41:49:db:49:54:7b:24:87:be:b4:fd:79:79:
97:4a:fc:62:fb:70:57:66:bb:13:e7:86:86:79:3f:
f0:30:8b:81:4c:b9:c5:c5:2c:f0:75:a2:e8:25:93:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:81:94:39:02:D3:BA:84:87:85:AE:D8:51:7F:69:63:30:34:5B:D4
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:60:b0:2d:52:e0:88:55:0e:8e:46:62:42:7f:ea:32:01:a4:
b4:43:67:49:7e:aa:fa:91:ef:57:f5:8b:b7:2d:51:ec:e6:19:
d5:93:c4:9e:d0:31:95:c7:ee:e3:5f:c9:f7:ea:27:44:53:d9:
98:4b:66:2d:0e:c2:c3:ad:c4:08:29:08:b7:57:b9:e5:d0:c3:
6e:5f:3e:95:45:f7:bc:51:a7:d2:14:3e:35:9f:e3:7d:62:63:
12:8d:73:85:bc:50:bb:28:00:cf:ca:2c:f8:cc:70:dd:39:43:
4a:2d:e3:30:b2:25:dd:d0:c6:1f:d9:c3:6d:42:b7:7c:43:c3:
2a:e7:17:63:a1:7a:10:51:90:58:c1:f7:04:58:a6:47:f5:4b:
41:9f:92:83:41:f1:11:bf:4d:0f:fc:a2:ff:7c:8c:e7:56:d9:
67:e9:96:2c:ad:0e:8a:9c:9d:27:55:f0:7e:30:7a:29:01:28:
b4:37:75:12:bf:b2:6b:1f:0a:ff:92:d1:27:22:4c:b4:2d:8f:
25:cb:c2:10:56:19:2e:06:7c:59:42:98:ac:c9:46:10:03:0b:
58:b0:ba:0c:25:b9:04:34:4a:bb:d3:bd:60:2a:72:e8:4b:a4:
9b:b6:23:11:53:e6:b6:4a:e9:f7:3d:ae:41:11:90:57:c1:ad:
b1:d0:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:21 2025 by rpki-client