Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: lpMmgYGUUV4jjwPZnfalkKflGYc19GFxReatEqLUY0o=
Subject key identifier: 7C:71:0A:F0:DE:09:CD:1E:C6:4A:C1:2D:72:30:FA:30:CC:B9:3E:C1
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 019A4F62420CAC9BA37E1032941999580240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 149A
Signing time: Tue 04 Nov 2025 15:00:30 +0000
Manifest this update: Tue 04 Nov 2025 15:00:30 +0000
Manifest next update: Wed 05 Nov 2025 15:00:30 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: TNhNDUKFKicTCVw/Qhk7vppNm09+0Nk+pw6rOHrQRag=)
2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:42:0c:ac:9b:a3:7e:10:32:94:19:99:58:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Nov 4 15:00:30 2025 GMT
Not After : Nov 5 15:00:30 2025 GMT
Subject: CN=7c710af0de09cd1ec64ac12d7230fa30ccb93ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:df:d5:83:08:7d:51:3f:2e:62:98:74:23:72:
ef:58:41:6f:3c:1f:1f:09:a3:9c:aa:83:c9:7d:12:
8f:51:c9:52:5a:e1:2b:24:75:71:17:46:b5:9c:56:
6f:2d:07:a3:e9:c9:03:62:59:ad:03:bb:58:2d:68:
61:a4:ce:20:9b:15:3d:27:00:cf:ba:8d:7d:3f:6d:
ce:0d:99:b3:5c:eb:38:5c:2d:a2:93:e7:27:60:62:
e6:34:76:63:fc:62:5a:8a:ef:bd:74:06:37:23:05:
31:be:82:18:16:ba:84:b2:e0:b9:b9:68:d5:83:85:
7f:af:84:4d:8b:c8:42:de:38:97:ca:68:58:08:19:
8e:75:87:01:cb:c3:b0:4c:78:5d:24:8d:de:f7:cf:
3f:34:b9:24:0c:72:80:f8:c5:7f:ef:3e:64:6d:c6:
2e:d4:ea:56:98:28:f9:3c:f3:19:7e:a7:1b:c0:da:
90:b6:ec:7f:5c:14:67:06:80:8f:a4:6b:0e:1b:07:
e7:c0:cc:c2:54:06:f0:8d:49:84:ed:d8:11:75:c4:
6f:3d:5f:be:2c:51:45:79:63:1c:97:c8:5b:5d:3f:
39:f7:6d:fe:e5:79:9c:f4:36:29:28:98:0d:3e:24:
0c:a2:52:d2:60:4b:7c:74:40:df:dd:a7:4b:f3:9f:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:71:0A:F0:DE:09:CD:1E:C6:4A:C1:2D:72:30:FA:30:CC:B9:3E:C1
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:35:d3:7d:cb:e8:c6:34:23:e6:e3:93:21:01:af:05:a7:95:
d1:6e:9a:e2:3d:6a:ac:a5:f2:90:94:bc:90:81:d3:c0:29:a8:
60:e7:56:b3:72:cb:e7:0c:1d:f0:3c:7d:09:b3:09:99:42:fa:
ac:62:2d:c4:73:a0:1b:b4:fc:99:8d:3e:f4:42:0f:6f:c6:32:
0c:96:e6:92:c2:5b:b5:d1:3f:40:68:10:03:c6:86:82:6a:b0:
64:da:f6:af:88:6a:dd:93:b7:82:ce:0d:c0:ff:1c:46:9c:2e:
8a:2f:5c:fc:ed:85:03:93:7e:4b:7f:5c:9f:c4:a9:40:1c:97:
43:aa:f6:ea:b9:b1:0e:cd:94:f1:7b:de:19:60:4e:cc:5c:1a:
9d:ee:71:5f:e7:41:ec:22:e4:dd:50:c1:5c:b0:d8:bc:61:54:
4d:12:67:de:bf:a0:e8:89:01:6a:21:0b:ed:4a:a2:71:ce:f9:
ca:6b:28:b4:88:07:db:ba:45:7c:6b:6d:8c:ac:29:78:4e:10:
87:72:63:c0:7f:35:de:9b:47:79:21:30:7c:b3:b4:8a:fc:53:
c3:c2:30:00:88:4a:bc:64:54:c3:58:0b:46:1e:30:b7:8f:07:
26:85:7e:21:d3:78:bb:7d:55:20:59:8b:76:ef:89:c9:9a:13:
78:d6:72:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:27 2025 by rpki-client