Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: gCGFNOM3SVTTmm794wX7S6yd2exM3kGOxgA0+4m+PWc=
Subject key identifier: 36:45:C5:FE:91:9F:EB:F7:99:BE:70:51:17:1D:86:91:62:68:09:DB
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 019A52D24A0C3DD0B31E2DC513CBE5CE2A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 08AA
Signing time: Wed 05 Nov 2025 07:01:44 +0000
Manifest this update: Wed 05 Nov 2025 07:01:44 +0000
Manifest next update: Thu 06 Nov 2025 07:01:44 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: RPOT75hpR8uIe8Aphd4ktaaVnFxNwTVkjeopDz85lww=)
2: vQYaMoR9txyndSYv7p8Vy1-ysWo.roa (hash: q7GID5FIOuixp8y5Io1pyufdLHt0l/VDVy3RytUEJPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:4a:0c:3d:d0:b3:1e:2d:c5:13:cb:e5:ce:2a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Nov 5 07:01:44 2025 GMT
Not After : Nov 6 07:01:44 2025 GMT
Subject: CN=3645c5fe919febf799be7051171d8691626809db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:39:f9:04:73:a4:a2:8b:30:df:4f:d9:4d:
0f:77:b0:12:51:31:a3:55:ac:be:8e:02:51:e4:df:
7e:db:11:58:06:9c:b8:27:22:93:39:fd:39:b8:8c:
65:9b:ef:e0:80:6a:c3:93:6e:d3:34:88:cc:aa:aa:
d4:c7:4d:35:ed:58:2f:d7:e6:76:bf:1d:58:3f:f2:
26:3e:3c:21:31:76:ca:d5:15:e6:f4:fd:3b:94:a7:
a7:1e:51:a7:f6:6d:ed:ec:42:c1:19:8e:37:ab:e2:
85:c7:36:63:af:f4:62:4c:c1:56:7e:ea:10:bf:ce:
8b:02:3a:ff:5f:d4:7f:7a:98:9a:7e:04:e7:3e:c9:
e3:0a:c8:9c:d7:f2:f3:cf:5b:0b:64:94:75:49:94:
f5:3b:f1:27:d7:df:14:61:14:02:85:1d:b2:6f:4c:
88:20:1a:c1:7c:d2:b9:f7:3d:39:ff:e7:f0:2a:93:
e5:d2:50:52:fa:99:09:9a:4b:11:7b:cf:34:6b:22:
18:9e:9e:e4:c4:a2:f0:5b:3b:56:66:ef:77:26:3b:
a9:e4:4a:46:e4:a2:b3:7a:4a:c1:5d:58:48:25:e6:
2f:7e:c3:50:1d:b1:ff:6e:63:70:c1:14:f0:74:ec:
1d:6a:a2:a3:8e:5f:c4:b2:50:59:11:08:d1:3e:c3:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:45:C5:FE:91:9F:EB:F7:99:BE:70:51:17:1D:86:91:62:68:09:DB
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cb:ba:2d:4e:dd:79:23:52:86:0c:29:c9:55:c9:a9:57:60:
b9:77:1a:e3:eb:20:1e:b9:a1:fd:c2:ad:2b:0b:bf:47:5c:4e:
8d:a4:4b:88:bf:45:83:2a:10:5f:84:8b:a2:f1:de:db:ed:0b:
f8:48:1e:ec:93:70:f8:5d:86:d5:5b:a4:43:c6:57:17:b1:25:
cc:31:01:01:3f:dd:87:88:ca:3a:24:54:b9:b2:4f:85:f1:ca:
ee:eb:e0:19:e6:43:e2:af:2a:f1:84:22:d6:33:01:44:45:6b:
59:55:9e:d3:f2:37:46:9f:b9:a9:85:cd:41:5d:fd:ac:0f:50:
d3:8e:d2:20:c5:8e:19:ff:e2:86:d4:90:51:9c:4e:5a:b8:01:
5f:7a:37:27:e4:d4:1a:e4:35:1f:12:75:68:8f:8c:4f:01:15:
be:6a:65:e8:31:eb:6b:3f:13:2d:cf:a2:43:5a:b3:db:83:60:
77:cd:24:05:aa:df:ce:a2:28:a8:21:1e:e6:c0:b6:bd:f1:13:
8e:61:8a:12:c3:15:14:5b:16:f4:d6:33:f3:39:f4:66:70:5b:
02:64:1c:31:e6:c5:f8:35:32:30:a5:9e:7a:3b:46:99:44:29:
64:27:7a:ed:a8:a9:32:a8:78:a5:0b:58:7a:bf:8e:52:de:0b:
d1:e8:25:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:23 2025 by rpki-client