Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: QBdpxEJQRYaTgUd9ZLpd3LEAUwnHXk8EZ1VKmhfXM50=
Subject key identifier: 3A:E6:1D:70:6E:44:27:5A:F8:AF:2A:FC:7F:34:69:2C:54:D2:DC:CA
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 019A51510FE123C353E9A3525B6D4C9EA649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 0FF8
Signing time: Wed 05 Nov 2025 00:00:58 +0000
Manifest this update: Wed 05 Nov 2025 00:00:58 +0000
Manifest next update: Thu 06 Nov 2025 00:00:58 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: PaBYKYW/PWJNZRrM0FOP6LgtTmucJXmh3SH0Z2qEuX4=)
2: DNwk8XqqsVx_0XVNBxGEv9s46iw.roa (hash: o1R3IO/6fSn30zcJzkwKmtL71+61TdQ+fmzf6z93EPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:0f:e1:23:c3:53:e9:a3:52:5b:6d:4c:9e:a6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Nov 5 00:00:58 2025 GMT
Not After : Nov 6 00:00:58 2025 GMT
Subject: CN=3ae61d706e44275af8af2afc7f34692c54d2dcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:2d:84:23:7c:89:2f:34:5c:82:17:de:83:
e5:69:5b:71:ff:03:03:48:4e:6b:ca:90:02:22:87:
02:4f:c3:7d:25:ad:7e:fd:29:29:f5:bc:ba:7b:15:
73:95:93:83:ab:27:ea:3b:4d:d6:2a:3f:ab:aa:34:
c2:69:8c:25:80:1d:1f:14:e4:b2:fc:99:6e:ec:01:
62:f3:d2:6c:23:6e:df:0a:bd:ee:d4:08:d6:58:7c:
ce:78:84:6f:4d:2b:10:ca:64:96:ab:f4:99:ca:5e:
5e:16:de:57:fb:e6:34:de:7e:1a:f1:ca:a6:cb:cf:
ff:63:96:28:f5:b1:de:70:97:0e:a5:c5:f2:cc:98:
da:48:85:d1:c7:75:8f:ba:17:79:df:aa:ea:24:9b:
5a:28:48:59:aa:6a:55:43:fd:a7:9a:48:1c:a8:5b:
2f:4a:51:58:6b:71:93:02:0e:c7:f1:d2:b4:06:88:
8f:f4:85:3f:70:d4:4e:5b:2f:61:15:39:c8:bd:10:
06:ac:45:68:cd:e0:4e:c5:81:30:ad:e9:dd:b1:4e:
6b:b5:e8:2c:44:9c:37:48:3d:42:b8:84:67:87:20:
d7:4d:26:18:8c:e4:6a:dd:a4:ed:43:61:10:ea:9d:
03:a1:82:3d:96:14:eb:74:51:82:a2:17:97:15:72:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E6:1D:70:6E:44:27:5A:F8:AF:2A:FC:7F:34:69:2C:54:D2:DC:CA
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fb:ac:e9:b7:9c:80:08:4c:e5:2d:00:8e:8f:65:8d:7a:69:
21:70:30:75:28:8c:66:56:f0:5d:2e:bb:50:65:44:b6:6a:df:
6b:47:a5:22:8f:16:b5:a0:5b:65:9b:69:e8:57:f5:8c:d4:0f:
57:4d:96:c9:36:f9:73:d6:a5:44:5d:f7:71:e2:a4:6a:4d:52:
ca:4a:75:69:91:7b:ea:46:f2:88:20:dc:b7:3e:46:56:77:7e:
66:93:9f:76:04:40:ca:d1:4c:8b:56:ad:6e:65:12:7a:7e:77:
e6:a9:29:ba:f5:95:8e:c1:23:67:7c:2f:2d:06:b3:09:01:03:
d8:70:d9:ca:76:70:7a:fd:45:33:03:5a:a8:ad:e1:4e:e7:f8:
19:c9:6b:1d:2d:8e:fd:85:13:fb:ef:ac:5f:dd:5a:ba:30:9d:
49:42:d9:a9:92:0a:4b:79:7b:af:9c:41:71:37:02:31:ee:3d:
b3:a7:89:81:ec:ac:76:fc:4d:f6:9a:0a:af:b4:9a:e8:61:eb:
30:7a:c1:97:ee:cc:aa:8e:f2:2e:e2:85:8a:57:ac:63:f9:a8:
d5:af:9b:54:6c:f9:59:ac:55:c7:d9:34:da:6a:7c:d3:ed:4e:
df:a2:64:d4:ab:47:eb:46:0a:90:68:44:49:49:ba:e0:a8:d6:
d7:2d:55:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:31:14 2025 by rpki-client