Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: 5B2elPHz6y9YFRKyX2zbcWEXvuj3EGxEuF52edlsbSg=
Subject key identifier: 12:A3:A0:3D:0F:F8:BF:E4:4A:29:38:FA:FE:BD:FA:CC:A4:F2:1D:62
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 019A4F992BA28BB78357551A7490DE2A19F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 11EF
Signing time: Tue 04 Nov 2025 16:00:29 +0000
Manifest this update: Tue 04 Nov 2025 16:00:29 +0000
Manifest next update: Wed 05 Nov 2025 16:00:29 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: ULxn4162D5ujLTG9tJoOzikmHZZJgc4j8zNAuIEeaas=)
2: EaaXkbC8P0tMcWH8_B2AeHqJuik.roa (hash: Agyi8/XYUtn0V9u60ReeITYzaWhDJOT1A+JDHxK163o=)
3: iRncY0RPMdG6ZS1FNbvbNQvbM88.roa (hash: cZd3pDxm+3G7IN3N9+ceJiYJz5MHexdMYYiB+WqQjOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:2b:a2:8b:b7:83:57:55:1a:74:90:de:2a:19:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Nov 4 16:00:29 2025 GMT
Not After : Nov 5 16:00:29 2025 GMT
Subject: CN=12a3a03d0ff8bfe44a2938fafebdfacca4f21d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:45:99:8f:84:7d:d4:61:0f:6f:34:ea:5a:
e7:d9:f5:b7:97:97:1f:ac:c9:20:1a:50:dc:2a:ec:
e4:5b:0e:87:05:c8:14:4b:ef:ab:da:58:1d:77:66:
45:bb:4a:fb:e0:f8:30:80:4c:3a:af:0b:31:3e:57:
28:ac:7f:dd:67:7c:82:e1:f7:a1:96:78:04:1b:b7:
84:35:5c:3e:d3:89:36:9f:1d:0e:39:6e:e3:1a:72:
81:de:80:94:88:d3:5d:01:ea:59:f5:0d:2b:bd:af:
56:21:70:ea:bd:1b:a9:e6:11:a1:dd:1f:06:76:2b:
92:ce:d4:9b:ce:b8:52:3b:aa:27:44:6d:ed:42:2a:
9d:33:90:7b:bc:dc:a4:e0:fc:e8:d8:60:1b:d5:25:
3d:a8:55:95:46:ec:18:59:f5:e0:b3:25:6b:0d:23:
ff:01:c0:d0:e0:36:44:f0:bd:cd:3a:78:d2:29:04:
2a:ab:ad:ae:1e:0e:fd:52:af:fc:9f:04:98:d9:bd:
6c:9f:d4:0f:84:63:c6:3d:7f:43:6d:4d:76:d6:70:
f0:d9:61:a0:85:16:84:6d:e8:b8:79:66:2b:07:96:
66:79:58:fa:7d:f1:6e:e8:68:99:e1:3e:ef:29:cc:
8f:dc:31:f1:07:8a:50:46:6a:41:f9:40:a3:31:cb:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A3:A0:3D:0F:F8:BF:E4:4A:29:38:FA:FE:BD:FA:CC:A4:F2:1D:62
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:31:7a:62:73:40:bb:9c:c5:89:ff:a5:99:15:80:d4:14:b0:
e4:a5:69:40:cf:cd:12:5c:1d:70:e8:88:02:c8:99:08:00:52:
03:72:d4:76:7f:29:0d:b2:de:60:b6:2d:4e:c1:1e:99:56:e3:
77:ca:e3:07:c5:e5:8b:75:0b:16:e0:9c:c0:d5:5f:08:32:72:
e3:ad:49:18:60:58:5c:30:2e:1b:63:72:e3:0c:74:83:6b:3d:
65:ce:f0:d5:53:07:e1:e3:87:c1:67:f0:a9:fb:87:25:59:be:
7f:a1:84:dc:2c:87:fb:f7:49:2c:e8:58:67:cc:36:74:4a:77:
68:0f:3d:3f:f2:4f:6d:e4:00:8f:56:bc:5e:fc:f6:3e:4b:25:
1b:0d:a8:8d:cd:15:83:00:c8:5a:2f:da:af:b5:d8:a2:af:fc:
ae:4a:9d:6a:c7:72:30:1d:66:4b:62:19:56:b5:77:a7:9d:ed:
05:45:d1:12:37:f7:e5:ca:0e:9e:24:d3:7e:a5:1b:c8:24:e7:
47:0a:ca:36:10:13:80:1c:4f:2b:37:d3:cc:c7:97:bc:47:eb:
b6:01:c3:c8:af:25:c7:75:cc:17:70:2d:5d:7f:cf:ec:69:c2:
d0:2a:97:2b:28:da:03:18:5a:1a:d7:0d:5c:63:ef:39:f2:33:
8f:e3:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:05:26 2025 by rpki-client