Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File: CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier: RzktHviAdd3FwFZLt1gbjmnJyThdKZXFOjP9dvtAzLo=
Subject key identifier: 01:F8:CA:4E:09:93:4B:74:76:00:E3:B6:D1:EA:88:C4:00:96:9F:D4
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 019A4DE1CF76040C3A666D8AE15A5EC919B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 08:00:35 +0000
Manifest this update: Tue 04 Nov 2025 08:00:35 +0000
Manifest next update: Wed 05 Nov 2025 08:00:35 +0000
Files and hashes: 1: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: 5a6FvztUijb7K08/G7zMul8d2qdtF5KNxnQ7T2ytGw0=)
2: GONoBaS0nACGnEjc-yHuqDoDlew.roa (hash: eVcWG363H9IPwj/aWLR4h7Mq2fdRg0ul16LrmgLPOaU=)
3: kSa4_sqr5-NiqBRmmF4fkyu-chg.roa (hash: nw6nn6yk21XAzxXJuVEoChD6KrMH42rDNZdSGxHsW0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:cf:76:04:0c:3a:66:6d:8a:e1:5a:5e:c9:19:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Nov 4 08:00:35 2025 GMT
Not After : Nov 5 08:00:35 2025 GMT
Subject: CN=01f8ca4e09934b747600e3b6d1ea88c400969fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:b1:b3:72:71:ce:a0:9a:0d:52:1c:88:66:
f9:9d:df:fe:d5:ca:98:4e:5f:9f:81:52:e0:9c:4c:
45:a9:63:3e:62:10:2c:2e:b3:5c:1c:82:5f:79:59:
a9:00:26:0e:3d:11:72:6c:fd:ec:ce:8b:c8:95:02:
76:70:57:48:ec:4d:7e:6c:e6:31:3a:bc:65:78:26:
1f:55:c7:f0:1e:49:f8:c7:a7:f7:c2:20:1e:fd:0e:
a1:68:1b:70:27:ad:da:a5:71:41:e6:2e:6c:b4:e3:
17:26:86:51:92:bb:81:63:f2:5f:b2:2b:f9:3d:be:
d7:4d:6e:54:1d:37:7a:12:9e:2c:08:5f:f1:eb:70:
47:44:8c:12:c6:57:d4:5b:57:dd:90:78:13:f1:92:
d2:8e:85:ba:2f:9c:c9:89:38:87:6c:cf:c3:a5:0d:
1e:bd:fb:0a:06:94:5c:b7:77:7c:95:0b:e1:63:fd:
10:70:d5:95:17:8f:bf:dc:40:f4:4c:ff:5c:90:34:
01:c5:d5:5e:00:3d:31:bc:d9:bb:39:9e:78:48:e5:
b3:fd:25:c0:53:eb:5e:8e:58:eb:b1:64:9d:0e:0c:
ed:2a:43:7b:99:7d:17:cc:71:1d:a0:99:c8:da:a5:
08:dc:12:bf:e4:79:bf:43:1c:9b:71:24:c9:bb:03:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F8:CA:4E:09:93:4B:74:76:00:E3:B6:D1:EA:88:C4:00:96:9F:D4
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:93:89:6a:4a:aa:a6:89:0c:e0:94:66:38:38:2e:62:fb:05:
ce:a7:e5:d4:3a:80:52:cd:01:46:84:3e:98:b8:77:ad:62:d1:
ed:13:57:fa:34:01:bc:a3:f7:77:64:63:b5:42:f3:fb:13:b5:
82:5c:37:e8:99:70:47:5d:0e:3f:e7:f4:ac:2c:b0:4a:6b:cb:
bc:cb:9a:fa:ac:c7:04:cc:c9:ab:25:c2:aa:41:9f:c0:b3:8b:
07:94:71:31:85:0e:36:4b:b5:73:fc:31:d5:92:59:5b:ac:a2:
17:1e:e9:7b:95:39:7e:1d:19:46:05:47:08:24:18:c6:94:61:
75:c3:f8:b6:18:1f:2d:a0:84:ab:b2:05:46:4e:4d:92:11:50:
21:c4:d7:13:97:f0:0f:f8:f4:27:68:45:56:f1:3e:fd:f5:96:
f0:da:ad:30:fe:50:e9:ed:b0:69:70:4d:12:d8:53:f1:c1:f1:
34:5e:51:8a:a1:f9:04:c0:92:3f:0d:03:a9:f3:2b:26:49:a8:
2e:a4:c7:54:7f:56:a6:ed:ef:16:7a:a4:4c:69:37:f1:95:99:
bb:9e:64:29:d7:08:30:15:ed:ce:54:79:96:14:ac:b1:e0:91:
39:42:73:8f:29:1a:5e:fe:17:5c:d0:08:90:fb:a3:56:9a:0d:
85:65:10:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:29 2025 by rpki-client