Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: tFIEh61JU/xkSY4/GynXshj3WALUWyjCdeDHTWHaxs8=
Subject key identifier: D5:4F:3F:A9:27:D9:9A:71:3B:2F:CF:D8:B7:69:A6:DC:86:1B:90:D1
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 019A533F41F39B5EE6B847222CFE95B331A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 09:00:45 +0000
Manifest this update: Wed 05 Nov 2025 09:00:45 +0000
Manifest next update: Thu 06 Nov 2025 09:00:45 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: SDx7fXIDUw17KJO+ohDA6fDzxo4Juhhfv8dIoZyiqME=)
2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:41:f3:9b:5e:e6:b8:47:22:2c:fe:95:b3:31:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Nov 5 09:00:45 2025 GMT
Not After : Nov 6 09:00:45 2025 GMT
Subject: CN=d54f3fa927d99a713b2fcfd8b769a6dc861b90d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:0c:e8:83:d3:ba:56:0a:17:93:fe:00:79:
6c:0a:b3:15:fa:1f:5b:42:ea:bb:31:9b:f1:84:e6:
03:57:e8:aa:3b:a7:a3:15:67:21:7a:04:ab:e7:70:
7b:45:5c:b1:83:35:d6:b3:5c:1d:0a:a8:03:74:17:
e3:3f:ee:09:69:e6:3a:cd:09:cc:78:4e:8f:d8:24:
e1:6f:80:88:a2:86:38:56:f5:f8:f7:37:fd:85:6e:
84:8c:a0:b0:78:72:03:92:a8:fe:df:f4:98:7b:be:
f9:65:8b:57:fa:c7:1f:33:af:84:f2:8f:27:1a:87:
d5:7b:c2:ee:c3:d8:18:cb:45:41:5a:02:b7:a7:bc:
77:26:c4:6c:df:12:bf:1a:44:46:2a:c0:5f:c4:fa:
41:d7:e3:2c:e2:7e:6a:5a:bc:25:9d:d9:82:40:fc:
53:04:0e:2a:80:02:97:d2:b3:3e:17:53:fa:99:c0:
ee:53:f4:42:76:64:89:97:52:7e:91:b7:52:e5:f3:
97:06:10:77:fe:16:8b:17:b5:79:b4:ea:cd:b3:12:
aa:66:3e:37:46:5f:9f:7e:ba:81:9e:02:4c:df:b2:
e1:8e:76:ae:17:1a:01:8d:8d:de:48:31:b3:ae:82:
12:a6:a2:86:98:e0:c3:25:79:34:e8:14:3a:c8:b0:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4F:3F:A9:27:D9:9A:71:3B:2F:CF:D8:B7:69:A6:DC:86:1B:90:D1
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bd:db:82:34:b2:19:9a:29:f3:92:1f:3a:40:b7:52:2e:ca:
81:e3:46:67:20:27:aa:ad:43:c5:23:31:01:ea:60:e8:a9:75:
e5:ff:53:37:24:19:2d:fa:97:e9:c7:35:d4:bd:4f:6f:c1:32:
5d:84:60:20:ec:c7:11:59:a2:69:b4:f6:d8:e7:53:22:f7:68:
cb:de:29:b4:b3:c4:c8:86:79:05:a5:b4:91:3c:38:f7:1b:b3:
72:f2:0e:bb:a4:26:f1:7f:e2:8f:74:d5:b9:a7:15:60:16:dc:
7f:8b:c4:c3:0e:d8:e3:6f:f6:3e:3e:dc:e2:78:19:ae:f2:98:
c4:06:ea:59:26:a3:ac:47:d5:74:ae:80:27:87:dc:c1:c9:03:
65:aa:98:3d:86:0a:ef:bd:f1:45:06:8f:06:e6:63:2c:33:38:
2c:49:d1:2a:10:92:a1:b2:43:5f:c1:6f:f1:66:48:51:8a:75:
74:63:c6:e0:11:5d:ec:5d:bc:3e:57:2a:93:9c:67:d9:d3:1a:
4d:38:19:7b:6b:89:7c:ac:de:22:0a:f3:90:4f:ab:0d:1f:c2:
d0:c8:dd:f2:18:9a:4a:81:26:eb:9e:69:04:bc:5b:6a:74:92:
01:2f:0f:51:12:b2:d6:66:60:df:06:40:fc:5e:a3:0e:15:52:
f5:67:ce:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP0Hzm17muEciLP6VszGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5N2UwNTUxNmZjODc5MzQwNjg2OGI4MTA5ZTNjMDQ0Yjcw
MjcxNmMwHhcNMjUxMTA1MDkwMDQ1WhcNMjUxMTA2MDkwMDQ1WjAzMTEwLwYDVQQD
EyhkNTRmM2ZhOTI3ZDk5YTcxM2IyZmNmZDhiNzY5YTZkYzg2MWI5MGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRsM6IPTulYKF5P+AHlsCrMV+h9b
Quq7MZvxhOYDV+iqO6ejFWchegSr53B7RVyxgzXWs1wdCqgDdBfjP+4JaeY6zQnM
eE6P2CThb4CIooY4VvX49zf9hW6EjKCweHIDkqj+3/SYe775ZYtX+scfM6+E8o8n
GofVe8Luw9gYy0VBWgK3p7x3JsRs3xK/GkRGKsBfxPpB1+Ms4n5qWrwlndmCQPxT
BA4qgAKX0rM+F1P6mcDuU/RCdmSJl1J+kbdS5fOXBhB3/haLF7V5tOrNsxKqZj43
Rl+ffrqBngJM37LhjnauFxoBjY3eSDGzroISpqKGmODDJXk06BQ6yLDi9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVPP6kn2ZpxOy/P2LdpptyGG5DRMB8GA1UdIwQY
MBaAFAl+BVFvyHk0BoaLgQnjwES3AnFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQt
MzBiZWNmYzFiMzExLzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQtMzBiZWNmYzFiMzEx
LzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADL3bgjSy
GZop85IfOkC3Ui7KgeNGZyAnqq1DxSMxAepg6Kl15f9TNyQZLfqX6cc11L1Pb8Ey
XYRgIOzHEVmiabT22OdTIvdoy94ptLPEyIZ5BaW0kTw49xuzcvIOu6Qm8X/ij3TV
uacVYBbcf4vEww7Y42/2Pj7c4ngZrvKYxAbqWSajrEfVdK6AJ4fcwckDZaqYPYYK
773xRQaPBuZjLDM4LEnRKhCSobJDX8Fv8WZIUYp1dGPG4BFd7F28Plcqk5xn2dMa
TTgZe2uJfKzeIgrzkE+rDR/C0Mjd8hiaSoEm655pBLxbanSSAS8PURKy1mZg3wZA
/F6jDhVS9WfOcg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:35:55 2025 by rpki-client