Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier: SatKiK4TBvBVie5U8Ipv108yya3PbSsbBGNVk6QAWiQ=
Subject key identifier: 0D:A3:04:F1:2A:E3:96:79:3D:6D:3A:54:49:D3:29:FA:D8:62:AF:5E
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 019A4EF50A4050E43C716F0D4D619CD6F9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number: 0AF8
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: lAUiOjE9GKRQKMFOowv6kXMGJq2Y7ncoML9ddexF95Q=)
2: tX_eiSv6b9gWuAzQ90obdliFuqM.roa (hash: ZiFHzPJvZH9N84EKs/55J2Q6VVzMS4porN9rlx3w+2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0a:40:50:e4:3c:71:6f:0d:4d:61:9c:d6:f9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=0da304f12ae396793d6d3a5449d329fad862af5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:4f:c3:45:8e:71:9b:48:2a:71:a7:6c:75:
09:78:49:35:2d:ba:29:de:56:10:a5:f9:c3:aa:7f:
f2:e3:41:59:54:f8:60:22:9e:0a:f6:dd:a7:83:2c:
6b:18:68:ce:4c:ce:0b:c9:38:fa:0a:0d:33:41:64:
15:d5:6c:0f:09:81:4a:12:9b:36:00:59:f0:63:5c:
7b:ef:58:c5:a8:c8:f5:44:86:48:24:03:ca:45:d4:
17:e9:ab:32:47:4f:ff:4c:34:f9:6b:44:3e:b2:03:
0d:26:36:5c:46:b6:b7:dc:e0:31:bd:ab:d8:e7:27:
af:0f:71:38:81:09:97:2e:14:5b:fd:28:18:8c:99:
8f:bf:19:61:ed:b1:2f:62:49:ba:aa:04:e8:02:41:
19:3a:bb:d0:a8:d0:fb:12:66:61:51:22:ae:f8:84:
ce:85:fb:e0:07:46:39:0e:22:8a:ff:d6:b5:15:93:
97:45:4c:f3:d5:4a:db:e0:86:80:12:b0:ee:0f:6d:
90:ff:1f:80:9e:1d:9a:e9:f1:9c:4c:8c:21:f4:c2:
3e:94:b0:92:69:b6:dd:37:2b:f7:ed:9a:fc:e0:3a:
d0:85:ce:ca:61:f7:a8:f0:9c:ab:93:92:aa:f1:bb:
da:65:51:05:e4:8b:9f:6e:02:a4:2d:65:ed:b7:21:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A3:04:F1:2A:E3:96:79:3D:6D:3A:54:49:D3:29:FA:D8:62:AF:5E
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:68:22:8f:9b:2a:4a:9e:2b:00:af:82:92:a0:cf:ad:45:9d:
22:7f:17:35:9f:ce:4b:1f:c9:59:c3:6b:b5:a0:21:c0:a3:2e:
07:24:7a:22:0e:1c:85:2a:70:dc:1d:65:e8:1d:3f:d0:83:ca:
94:8c:66:89:15:7a:f5:cc:70:27:8a:a4:4c:1a:e1:46:b2:0c:
12:a7:16:f2:d4:8d:57:be:26:30:00:6c:ea:82:38:61:16:64:
5e:c4:d1:b5:b7:5a:57:4f:cf:6e:0b:1a:ba:65:49:88:5e:d6:
78:a4:07:4f:a9:b3:66:71:84:09:66:e7:29:97:d5:ae:68:2c:
4d:65:ee:ec:01:d2:4c:8c:ba:91:79:90:2e:f7:e0:e7:41:de:
ba:77:ff:c1:72:b0:fe:ff:55:bb:7d:e9:9a:95:62:c2:07:b1:
7f:4e:db:2a:c4:aa:7e:f8:df:6b:e9:f4:3e:83:fb:84:41:00:
58:52:79:f5:7a:26:2c:b3:ca:da:51:2e:0f:9d:96:6e:26:85:
56:d0:74:75:fc:9a:ea:bb:9f:a3:be:b1:b2:1c:cc:2c:37:f2:
28:6d:be:62:ff:5a:8f:ea:41:ef:74:23:b6:27:78:17:a0:38:
a0:f7:1c:78:0d:b2:e8:23:0b:3b:c7:38:61:26:6e:d8:74:49:
29:c2:03:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:04:42 2025 by rpki-client