Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: vQ2w8wK6ObRX3AnXVgkHCUdcd6jzWU1fxAy1JjoGeRw=
Subject key identifier: F5:33:02:35:D6:59:4A:AB:81:F2:76:8E:23:7D:55:E0:77:C5:6D:E9
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 019A4E18F0E81985FC577205D20D700E4381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: qjOdl3NZ+3nCL0ryjPKZURwnfMJKmIEk48p9SQgUCeA=)
2: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (hash: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f0:e8:19:85:fc:57:72:05:d2:0d:70:0e:43:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=f5330235d6594aab81f2768e237d55e077c56de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:38:68:c9:dc:c3:85:7c:be:9a:e2:89:b5:
92:b9:79:7b:39:2d:96:3f:d1:3a:99:65:df:99:c8:
33:73:ea:50:f1:72:47:53:50:26:1f:08:f0:31:19:
b4:91:d7:e0:12:b4:19:3b:da:71:ad:e8:fe:8c:82:
58:b4:1f:5b:6c:93:9f:9e:3a:74:fc:34:33:ad:06:
0a:58:36:e7:bf:11:70:ea:e5:3e:cc:30:69:77:7b:
0b:e4:9f:74:6d:24:4b:7a:2d:3f:91:57:4a:7d:9c:
77:22:f2:a3:86:ad:ad:51:ed:38:22:d5:7a:61:a0:
39:df:5a:be:ac:39:1f:57:ed:d4:47:e4:fe:ab:5b:
06:9f:77:3b:75:4e:52:e9:5d:ae:fc:11:19:2f:c7:
a7:83:b0:6e:b5:d1:2e:43:76:d2:77:21:04:ff:82:
83:32:2e:56:cb:bf:5b:94:be:77:70:dd:5c:0f:ac:
55:c8:84:6b:3b:6d:1a:80:57:e5:3e:cc:16:06:19:
cf:90:55:f6:96:ef:9d:a5:55:d6:30:05:d0:6d:03:
52:0c:de:f9:0a:a2:75:11:8c:3f:b4:9d:f8:78:ed:
09:89:cb:d6:77:13:6f:db:2c:4f:78:c4:cf:23:fe:
05:0c:c0:b0:6e:95:23:a4:4e:84:1a:fd:60:a3:0a:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:33:02:35:D6:59:4A:AB:81:F2:76:8E:23:7D:55:E0:77:C5:6D:E9
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:00:e6:a2:2b:5c:03:57:4f:30:dd:f6:a9:20:24:eb:11:e8:
e3:06:20:88:3f:82:dc:9a:8c:5b:80:1c:fe:a0:c3:17:85:86:
7a:54:a8:5b:97:e4:e4:1f:2f:75:43:01:a6:25:fd:3d:be:e6:
ae:89:13:e6:17:70:e2:59:21:7f:fc:24:18:ef:c4:c5:b4:cd:
f3:1d:ca:0d:79:15:f0:25:42:69:5d:ae:9f:19:98:0a:54:e6:
66:d7:82:8f:d6:95:38:e6:4a:3c:6e:52:21:a3:1b:4e:9c:1b:
71:b0:9d:a4:8d:00:eb:5e:96:38:8d:20:ec:64:9c:63:7a:17:
09:ac:d3:d0:60:d9:15:27:90:fb:25:e0:32:2d:a7:d9:98:c6:
82:ca:39:ff:5e:0d:7b:43:fb:52:04:6c:79:66:ac:49:0c:d5:
3f:0c:66:ac:7c:7a:f1:11:a6:2c:a9:a5:8a:53:04:bd:da:d1:
cf:2e:00:df:52:c5:42:ef:82:e3:51:f4:00:08:1f:ff:79:d8:
c5:a3:23:52:98:41:d0:00:d2:c5:76:4e:fc:21:c3:5c:8d:05:
e6:88:bb:7a:dd:b9:47:52:41:3b:0e:4b:0c:71:c0:18:0f:0c:
ad:59:6f:79:5b:68:c2:55:bf:b5:52:70:42:1c:59:f6:52:58:
9e:9e:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:27 2025 by rpki-client