Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: EMiAy+xNpRz5U9lnxXeyM//fIILMDwDIJ2UkC7fQTzM=
Subject key identifier: F3:5B:5E:06:D1:F0:4C:F5:CB:F1:6E:3A:AE:B7:AA:40:B0:B9:10:88
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 019A4EF48FD05A652B3F125981D1B35D3996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:41 +0000
Manifest this update: Tue 04 Nov 2025 13:00:41 +0000
Manifest next update: Wed 05 Nov 2025 13:00:41 +0000
Files and hashes: 1: 4tKIyKN2LpGytONfG9Wwzb3sMh8.roa (hash: So7qtpci+LVeK7KYvgn0X4FAkS3oDmYxiev+fG5cuSs=)
2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: C7cx1MAK+Zhn/Iswv4KIW077DSTbV/WCVEAqv+xdfNA=)
3: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (hash: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=)
4: rjFAvFxrdSB0H68aH_zK0lS1GcA.roa (hash: iKO/ulWqGpWzjwhANl857sDa0g01+J+R36f50OBJrb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8f:d0:5a:65:2b:3f:12:59:81:d1:b3:5d:39:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Nov 4 13:00:41 2025 GMT
Not After : Nov 5 13:00:41 2025 GMT
Subject: CN=f35b5e06d1f04cf5cbf16e3aaeb7aa40b0b91088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:6a:ca:59:c1:39:7b:d0:32:f3:01:48:80:
cb:47:37:b3:7e:a1:1a:e3:de:ce:22:b1:e1:bf:84:
3c:cb:d6:45:25:0c:16:c4:d8:13:5f:e5:81:8f:9a:
5c:8f:eb:19:2b:a0:3c:3c:9a:02:2e:3a:6d:35:87:
e3:a1:7c:52:c1:18:6c:25:55:78:65:81:26:d2:ce:
86:66:e1:47:5b:24:6f:88:27:1e:9a:b4:89:05:42:
a2:41:9d:82:76:e0:5d:21:eb:17:d0:f9:4f:60:81:
f6:06:bf:bc:51:53:67:e1:d3:7a:6a:03:85:1f:8f:
b4:c4:ba:de:07:e4:52:c9:8e:56:c4:d5:04:35:69:
b2:82:e8:ba:f1:7f:9b:4d:13:ea:b8:64:37:4e:5f:
cb:a6:29:85:f7:57:a5:34:61:98:23:2e:44:a2:f0:
1b:a0:dd:5e:dd:a8:7e:5f:70:5d:2c:9c:cc:fc:24:
70:5e:9f:c2:24:98:4d:b0:8d:4a:c1:15:19:e2:ae:
28:8b:2f:3f:ff:cc:72:03:39:bf:33:65:45:4a:28:
26:6c:91:db:18:d4:b4:4d:20:9d:0c:52:75:8d:c2:
8b:11:98:de:32:90:27:00:9b:31:2c:a0:a5:6f:32:
bd:ce:54:ea:00:f6:3b:48:d0:f2:49:93:da:6d:1a:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5B:5E:06:D1:F0:4C:F5:CB:F1:6E:3A:AE:B7:AA:40:B0:B9:10:88
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8a:6c:f0:78:89:3e:ea:07:b7:7f:28:af:f4:be:d1:1e:86:
7c:4d:85:91:5f:b8:9b:53:f7:a6:4b:9c:6c:05:8c:4c:4b:70:
b0:51:fa:a3:67:76:76:f8:c6:12:19:b0:64:28:15:1b:e9:56:
22:5d:5e:e8:cc:50:e5:a1:15:cf:ad:91:a4:46:db:bc:de:d7:
17:3e:b8:a8:a4:2b:45:4c:3e:3f:95:27:b4:09:cd:4e:61:2e:
7f:ab:b2:d9:58:86:87:2c:fa:28:20:ee:13:f2:34:e5:5e:3f:
51:58:e4:1b:a6:a0:f3:8f:c8:00:76:e2:80:a5:f3:6f:81:08:
0b:a1:c7:14:4c:2f:24:4b:38:bb:e4:54:d8:70:39:42:5d:58:
d1:11:3c:2b:5f:77:03:b1:f1:c8:01:df:ae:24:a1:97:b0:90:
cc:20:4e:fa:fd:8f:f3:c6:b4:c0:44:70:66:68:90:8b:6b:1b:
4b:c6:50:f9:99:d2:6f:73:de:82:02:b2:66:8d:93:1b:cc:ec:
77:e7:5a:01:ed:d8:0d:e0:aa:15:da:24:0e:38:47:64:2c:c3:
b4:3a:e6:bb:4a:31:db:dd:91:93:f6:cd:ff:2d:44:1d:e2:9e:
a7:ba:5e:b2:76:27:3c:26:d2:e2:94:9a:85:db:fa:18:e4:8e:
f9:33:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:55 2025 by rpki-client