Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.mft (raw, json)
Hash identifier: CDm2kFDZqtTNQpC9iXQNN4abk2WQ065ZkNAf9oDelL4=
Subject key identifier: 91:71:94:B3:19:3C:6E:98:B3:0F:6D:80:D9:B4:C5:03:5E:58:FA:EB
Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
Certificate issuer: /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Certificate serial: 019A530864E21AD9643D0383A7578D25E755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
Manifest number: 0AF7
Signing time: Wed 05 Nov 2025 08:00:50 +0000
Manifest this update: Wed 05 Nov 2025 08:00:50 +0000
Manifest next update: Thu 06 Nov 2025 08:00:50 +0000
Files and hashes: 1: _cHyXKV_M_2E0mZg6CMFhW1P9U4.crl (hash: waDOqX0ptzCnAltpOs5nuWXxGGJ2Yvmy4E8r7qmutnk=)
2: wnJRh-4CUXkPHnOwTdcWOQViBQs.roa (hash: +Cv+ZEGLAnj74mF/vlyspj0D6dG5P9lPHFBp/dI5sxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:64:e2:1a:d9:64:3d:03:83:a7:57:8d:25:e7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Validity
Not Before: Nov 5 08:00:50 2025 GMT
Not After : Nov 6 08:00:50 2025 GMT
Subject: CN=917194b3193c6e98b30f6d80d9b4c5035e58faeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:5b:8d:f1:02:45:a5:9b:87:0f:0d:ae:f4:
26:7f:a1:7d:f2:2d:bc:1d:b7:65:e1:53:00:64:54:
0c:c0:f3:46:1b:8c:f9:6d:48:a0:b6:bb:0c:3d:7a:
d7:3e:cb:1a:52:07:4c:0b:ff:52:4d:c6:e3:c4:9b:
1a:41:14:e3:b7:58:f1:cb:92:48:33:d8:d0:0c:8f:
ec:85:fd:f4:ad:d2:0b:ce:65:af:6e:36:91:7e:2b:
12:97:da:eb:15:0a:b9:0e:aa:3e:c4:1f:73:ce:ed:
85:e8:92:bd:a9:c6:8d:be:98:ac:20:45:79:29:11:
54:11:df:1f:09:51:ea:ce:e5:7a:1e:5e:74:54:6f:
e4:f6:1c:3a:29:39:67:b3:7a:37:21:a9:67:6f:2b:
3a:b5:f1:e6:37:e9:79:51:0b:f8:ed:d3:ad:d5:7f:
71:93:18:cd:02:35:67:48:8b:ad:c2:bd:d3:a8:26:
f3:e7:87:51:0f:a6:e0:f7:60:78:92:c2:4d:64:d6:
28:8e:71:c7:da:0d:0d:30:49:60:e5:b3:de:38:3e:
13:be:95:f9:64:ae:f9:58:5a:51:a8:1c:93:60:5e:
39:63:a7:79:45:a5:7b:d0:86:2a:fd:5f:ad:d9:f5:
ac:70:c9:e8:93:49:18:bd:a0:6c:a0:9a:c1:a5:81:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:71:94:B3:19:3C:6E:98:B3:0F:6D:80:D9:B4:C5:03:5E:58:FA:EB
X509v3 Authority Key Identifier:
keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7e:1f:4e:06:7d:82:a6:35:46:d2:1f:fd:68:90:75:7a:0c:
2b:3e:b9:5b:65:c2:76:d0:8c:8f:b9:a4:a5:a9:a1:18:56:11:
da:b5:83:f4:06:d5:bc:f3:32:0e:44:95:44:67:b1:57:6d:62:
d4:5a:50:d1:ca:4c:9e:ab:83:6a:a7:5b:75:60:9f:33:5d:48:
df:29:3c:9a:0f:ea:29:d4:a6:f7:1b:c9:6b:fc:1a:59:5b:a5:
6b:95:0b:39:60:6b:65:39:ed:89:69:f6:5c:49:00:aa:e8:39:
a9:02:16:27:a8:5f:cb:a0:9f:32:20:ac:5b:93:5a:33:78:3c:
71:90:ed:05:85:30:45:e0:26:c9:69:7e:89:0f:55:50:27:75:
60:dd:e0:69:23:3a:06:7a:f4:48:00:f9:ea:ee:fb:cb:af:f4:
ea:d3:a2:1f:44:18:e2:f9:3c:ed:60:a8:c2:73:15:99:bb:bf:
39:8c:e1:dd:ad:99:59:d0:ef:46:14:b6:aa:b6:32:be:10:91:
4a:6f:e6:26:f3:ec:09:f7:9a:1d:2d:fa:fa:7e:41:3a:51:5e:
5f:93:ec:70:a6:f3:37:d8:d8:fd:fe:97:3a:7e:7a:f6:a2:e5:
be:ca:aa:a9:cf:7d:e9:b2:47:29:4f:01:cb:c9:8a:8e:df:a5:
34:99:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:06:36 2025 by rpki-client