Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier: Zkm6makPQD/IX5m++DARGP/E01PCDWenUka4xGBMKqw=
Subject key identifier: B8:5A:90:69:44:52:14:5B:72:38:7A:2F:A0:70:91:D2:06:45:04:6F
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 019A5375C8AB5927DE957F27A2AA1D042BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number: 099C
Signing time: Wed 05 Nov 2025 10:00:19 +0000
Manifest this update: Wed 05 Nov 2025 10:00:19 +0000
Manifest next update: Thu 06 Nov 2025 10:00:19 +0000
Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: VKXk23FpFbo2Q8TDBmmr2hOCrFW/c6ZWtCiZotUmtv8=)
2: Lh4J1VP02-oTK-HxM-W2DuWref8.roa (hash: W28vw4gwp9YROhgcttiVHyEse6JN5PCY1Q1d5LlTtlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:c8:ab:59:27:de:95:7f:27:a2:aa:1d:04:2b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: Nov 5 10:00:19 2025 GMT
Not After : Nov 6 10:00:19 2025 GMT
Subject: CN=b85a90694452145b72387a2fa07091d20645046f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:c6:a8:c9:1f:49:ce:58:71:95:ea:53:69:
95:bd:7f:af:49:c0:00:ec:72:c6:14:13:4a:e9:46:
6f:08:c4:e5:55:75:cd:84:04:e9:c7:24:50:52:de:
05:1d:47:a4:67:38:7d:e4:84:d7:24:4a:45:b8:a1:
ea:38:41:fb:d8:34:64:e5:7b:d0:44:fe:9b:d9:cc:
85:00:38:f6:24:d2:74:aa:52:9e:a6:4f:77:78:da:
d1:99:04:c8:59:e8:e2:7f:1f:ad:2b:09:33:63:4d:
e5:f3:42:ee:1e:87:ba:3b:f6:2e:58:e4:e3:96:7d:
ad:c1:04:f0:d9:31:dc:6e:b1:0b:55:4a:ae:49:80:
66:7a:9c:74:27:c7:e5:bf:47:95:f8:09:9b:49:00:
02:79:26:30:0c:a3:c8:dd:b3:73:2f:2a:06:69:30:
0e:9c:5d:3f:7f:2b:43:b5:b8:f5:0b:d9:1e:0d:14:
2b:06:48:fb:a3:8a:91:14:6a:2b:fb:af:3f:f4:28:
99:fb:23:b6:1d:aa:26:93:ea:0d:19:1b:ac:bd:39:
da:59:a5:01:7d:1a:e1:56:33:88:bb:4b:22:27:5c:
7f:a2:64:8b:26:e2:44:8b:42:00:9f:43:cd:4c:9c:
69:49:b0:e3:39:b5:af:d6:13:9f:f8:88:6c:4d:de:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5A:90:69:44:52:14:5B:72:38:7A:2F:A0:70:91:D2:06:45:04:6F
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:89:fd:0a:d4:b3:14:e0:e2:47:ee:fa:97:53:33:29:8c:b0:
f8:ce:0c:8c:ea:db:a6:b5:a5:d6:e5:dc:26:95:b8:10:5d:9b:
26:cd:51:75:e5:6e:05:18:83:9c:1c:65:1e:a0:37:ca:68:28:
dc:34:a9:6c:a0:6b:20:03:3f:df:a1:fa:94:e2:4c:dc:e1:41:
29:d3:b6:e6:91:2d:fa:21:1d:e3:b2:99:5f:cd:1d:2c:98:70:
30:f7:51:12:fa:46:7e:f6:e8:62:e1:2f:f2:36:6f:0c:a6:6f:
b6:cb:87:b0:17:95:dd:6c:9b:bf:a2:04:75:57:1b:b5:8e:25:
d4:a5:c7:74:92:db:04:fa:c0:2a:85:3a:53:bd:d3:af:e5:24:
7e:23:02:b7:5d:e9:3f:d7:a5:8b:fe:64:e1:c2:4e:3a:7c:44:
b3:fe:25:3d:c6:b9:52:22:ce:2d:cc:f3:13:dd:be:5d:74:28:
5d:b1:fc:39:84:86:b4:64:78:ca:d4:34:94:b8:99:d4:9d:bf:
9c:f4:bc:d1:dc:18:b3:7b:4b:15:ad:94:ee:32:1e:ac:09:0b:
71:d1:37:e0:c8:d6:2a:22:69:20:fc:07:11:25:d0:e4:98:4a:
00:cd:12:cd:03:6f:75:29:fd:61:9c:55:72:97:71:5e:8e:ef:
7e:7d:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:13 2025 by rpki-client