Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: kQsk/i8dTnvxIMSJoY8IGBJOAuQzwmqI4Lclqwv11vE=
Subject key identifier: D0:6B:14:E3:6C:38:F8:40:D8:2B:A1:83:C3:CB:4F:94:DE:99:37:F7
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 019A4F99736D19E10ED3B92FFFBC656961CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 09AF
Signing time: Tue 04 Nov 2025 16:00:47 +0000
Manifest this update: Tue 04 Nov 2025 16:00:47 +0000
Manifest next update: Wed 05 Nov 2025 16:00:47 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: Jmmy/BJ7fIau3jEScnWCohpyAkLZJaA/h/77aifRsTo=)
2: pltDgh5JbbEWSggwVXLGKtobVl8.roa (hash: XwQl2FIwqmmMyr6/rQAaXcZHJoaBjslDK7+U58bsYig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:73:6d:19:e1:0e:d3:b9:2f:ff:bc:65:69:61:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Nov 4 16:00:47 2025 GMT
Not After : Nov 5 16:00:47 2025 GMT
Subject: CN=d06b14e36c38f840d82ba183c3cb4f94de9937f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:27:bf:1e:b9:73:92:5b:1f:c8:79:b3:48:
64:6f:07:ff:16:76:d8:3f:a9:cd:1a:a0:4d:b4:3f:
76:52:c5:ae:33:56:30:a6:97:67:22:1f:57:2e:1b:
bf:30:1e:a2:e1:74:36:b2:f8:55:d7:a8:1f:d2:1d:
b3:75:9a:9f:f0:22:65:8b:04:97:ae:f5:31:10:1e:
bf:71:21:10:34:97:0a:f8:f9:6f:10:6a:a1:74:2c:
a7:5c:ba:42:25:4a:6f:84:fa:a0:76:4c:b1:ef:8c:
ab:91:c7:e2:8d:61:0d:97:0b:e1:51:08:e1:31:19:
2d:6a:b7:74:87:6d:b0:37:63:24:17:ba:23:d0:a4:
2d:8e:49:e3:f3:a8:bf:bd:c8:77:01:b6:bc:d3:d9:
a7:2c:55:1b:b3:f7:d3:d5:00:63:7e:6d:c5:b5:7c:
be:42:f2:b1:41:82:eb:e7:46:c1:9f:94:10:a9:d4:
9a:a7:e9:37:31:b1:cf:1e:76:84:f1:6d:f1:c2:d9:
6c:2c:14:e8:74:90:40:91:4c:5d:30:ff:cf:f1:82:
35:b6:20:e8:45:e6:06:da:17:4d:9f:6d:36:3f:ba:
00:77:08:c9:fd:48:95:c1:1b:1a:f8:b7:76:93:92:
0c:b8:0d:2e:36:17:f8:99:90:b2:44:c2:ca:55:46:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6B:14:E3:6C:38:F8:40:D8:2B:A1:83:C3:CB:4F:94:DE:99:37:F7
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:81:59:9f:56:3d:7b:be:05:e3:69:b0:29:c5:54:2c:25:89:
cd:c7:6a:c1:1c:0f:8c:a7:23:05:06:18:58:63:01:42:0f:77:
a6:a6:03:d1:12:78:d4:16:65:75:9d:d6:b4:86:59:7b:cd:e3:
85:f1:ef:4b:f9:cb:cc:19:70:36:81:fd:27:99:9e:5d:c9:13:
48:35:33:1e:2b:94:43:33:95:6d:64:ca:d4:97:33:7d:0f:1c:
70:50:94:31:de:5c:c7:c8:47:a1:b0:3d:69:7d:ec:1a:ee:7a:
68:1a:9c:ce:ba:3e:7b:f9:79:34:b0:8d:00:c5:e0:61:b1:7d:
b8:80:23:aa:6c:5d:73:5a:3e:9b:2f:d7:73:ea:de:9f:14:8f:
df:61:6e:9c:c3:0c:6d:c9:ea:00:2b:f3:93:8a:26:72:69:59:
7c:e4:6c:02:85:e0:18:8e:5f:55:ce:91:82:1d:75:bb:bb:5a:
61:f4:30:d8:1f:f7:cc:ef:6c:11:d7:2b:6b:7a:a7:4a:c5:e7:
66:03:83:dc:85:4e:af:33:bd:b5:27:79:12:fe:73:e1:dc:fd:
98:b4:0d:86:f4:30:47:ea:eb:d6:78:98:a2:87:d4:45:db:71:
f4:fd:22:81:8c:b6:5b:56:13:8f:6a:82:2a:f5:01:4e:cc:6f:
31:f8:2c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:55 2025 by rpki-client