Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: O2fktQyt/YeAxjGY/PB9WZSuEYtmxPDupNhJN60HGMQ=
Subject key identifier: AC:24:86:06:05:27:CD:6C:C1:00:A3:AA:CA:25:AD:6A:D3:63:A8:B0
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019A52D27482B09EEDFC15EE8C83487D13CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0A52
Signing time: Wed 05 Nov 2025 07:01:55 +0000
Manifest this update: Wed 05 Nov 2025 07:01:55 +0000
Manifest next update: Thu 06 Nov 2025 07:01:55 +0000
Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=)
3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: wj6OVC8aMOuqrn1SXq18cqJBdVpR8SITU298FxYr2Xo=)
4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:74:82:b0:9e:ed:fc:15:ee:8c:83:48:7d:13:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Nov 5 07:01:55 2025 GMT
Not After : Nov 6 07:01:55 2025 GMT
Subject: CN=ac2486060527cd6cc100a3aaca25ad6ad363a8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:28:36:7b:a7:ee:f9:9e:63:fd:9b:10:17:
8b:3c:dc:5d:7c:15:f1:a8:84:83:ac:8b:74:8b:fe:
2f:ea:2e:65:02:86:19:61:23:0a:44:b0:0b:10:f5:
11:1c:ee:3d:9c:cc:27:1f:67:e5:f6:0d:78:aa:0e:
a7:6d:1b:0b:93:2a:e3:12:fb:9d:2d:c6:8a:cd:cf:
a8:ba:af:fe:23:71:48:35:e6:3a:ec:54:e0:77:fa:
27:f4:ac:5f:22:52:b3:c2:26:cc:40:55:22:43:1e:
a1:16:9c:4b:72:bf:7c:5b:33:ad:92:f8:e9:4f:26:
76:83:c9:4d:51:2c:9a:0f:d8:6e:ab:db:14:48:21:
07:ea:f2:ef:90:99:f0:dc:f5:cb:87:92:f0:6b:e3:
5f:51:b7:de:97:36:11:85:dc:89:7a:7a:87:cd:7e:
60:df:c3:29:d2:68:d3:b4:40:c0:83:5f:0d:41:22:
a2:b2:96:fe:5d:03:1e:d7:e6:43:f8:59:10:fb:26:
0c:cd:84:a5:da:57:b9:88:8b:fc:88:45:06:b3:aa:
7b:5a:b9:cb:5c:e0:b1:d2:43:3d:a5:c4:05:9d:fd:
d8:d7:e8:d9:c7:d8:cb:9b:b9:7e:79:f1:2d:f4:3f:
25:ec:df:65:95:16:0b:0e:06:98:29:23:1f:86:8f:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:24:86:06:05:27:CD:6C:C1:00:A3:AA:CA:25:AD:6A:D3:63:A8:B0
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:58:20:44:4c:cd:3d:9e:a6:79:fa:72:ad:c9:e7:57:8b:15:
81:aa:16:bb:5f:8d:50:1b:15:da:ca:81:0e:fd:ad:16:4c:29:
f8:b0:f1:b7:14:eb:8b:45:89:b2:e5:b2:af:f3:d9:88:ef:95:
97:01:9a:ee:73:f3:4d:88:dc:4a:6b:e6:95:b1:20:d4:77:73:
3e:b0:c4:84:12:bf:ae:d1:fd:39:93:9f:c3:47:f5:36:19:af:
93:00:a4:df:d7:f1:2e:c1:75:f9:c4:e7:e2:28:af:4c:a4:8d:
83:49:15:64:8b:a5:de:a9:09:44:ac:cf:c9:51:8f:e6:3f:62:
40:fc:6b:29:25:c8:b2:09:00:8b:69:8d:3b:fb:fb:90:16:27:
69:6e:bc:c1:b5:fc:58:69:bb:25:ea:bd:95:1b:a1:63:17:64:
43:88:ae:bb:35:10:c7:5e:e0:55:5e:22:70:99:10:54:1f:22:
55:e3:3a:92:69:a3:e2:8c:e0:dd:52:76:f0:18:5b:0e:11:d7:
63:87:26:87:c8:a4:62:5f:5f:15:f4:c4:be:4f:4d:57:2d:b2:
fc:13:bc:3c:bf:83:72:3e:49:8b:98:30:4c:22:5d:85:47:aa:
d2:bc:f8:45:a6:ac:c3:bc:30:e6:95:f0:4f:83:87:90:07:00:
80:3b:25:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:13 2025 by rpki-client