Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
File: cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft (raw, json)
Hash identifier: 8LbdPGV383X1EVN6rhyVuDf5Qrly40Cd0NsuKhLvdQo=
Subject key identifier: 2D:36:FB:E4:EA:98:1B:0C:64:F6:18:49:81:E7:2B:8E:5E:65:D1:BA
Authority key identifier: 70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
Certificate issuer: /CN=709a8efafa785401012c4590da63440a3456d0ce
Certificate serial: 019A4C981EE104C728868CA74E1DA434DC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
Manifest number: 04C4
Signing time: Tue 04 Nov 2025 02:00:29 +0000
Manifest this update: Tue 04 Nov 2025 02:00:29 +0000
Manifest next update: Wed 05 Nov 2025 02:00:29 +0000
Files and hashes: 1: cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl (hash: DNQcnOvh++zWwdayD1I0vUWlj5Hi7rS0CDHaJbpi0aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:1e:e1:04:c7:28:86:8c:a7:4e:1d:a4:34:dc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709a8efafa785401012c4590da63440a3456d0ce
Validity
Not Before: Nov 4 02:00:29 2025 GMT
Not After : Nov 5 02:00:29 2025 GMT
Subject: CN=2d36fbe4ea981b0c64f6184981e72b8e5e65d1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:a0:86:55:3e:03:6e:32:26:7e:c6:11:2b:
c0:f8:af:77:74:1f:ca:5e:74:7d:a8:2f:1f:2e:2f:
a7:64:26:cd:2f:80:00:2e:75:13:9c:03:c6:8c:35:
93:e3:dc:93:f8:dc:d2:01:76:59:e3:90:20:0d:17:
c3:a5:53:f7:ab:5f:01:b2:dd:17:ad:99:da:7f:aa:
99:f2:c9:d2:e0:2f:4d:51:e2:34:73:ea:07:cb:67:
59:8a:b4:ee:a0:2a:c9:d4:7f:7a:42:e4:4a:29:d0:
a6:c6:95:a0:7a:40:7b:6b:bd:35:f7:13:73:54:91:
78:44:89:b5:87:e4:50:ac:da:11:2c:8b:4d:04:23:
64:aa:c0:03:bd:fc:a7:5d:56:fd:49:cb:22:86:a9:
56:94:c2:fa:4b:74:09:36:4c:ea:5a:ed:6c:6a:6b:
68:52:33:5a:4b:95:d5:57:f0:9f:d5:03:e4:f5:61:
41:04:50:47:0b:19:20:f7:a7:1f:86:ec:8c:7a:ee:
97:3c:66:df:3e:ba:03:6c:8b:3e:6a:87:2c:3f:f4:
79:c2:19:14:31:6f:c1:c7:95:da:8e:dc:f4:0b:99:
37:7a:98:fb:86:ce:b4:e4:4e:43:c3:4d:55:f7:a0:
a9:9b:18:19:67:8f:3d:0e:0d:1b:32:05:fd:6f:08:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:36:FB:E4:EA:98:1B:0C:64:F6:18:49:81:E7:2B:8E:5E:65:D1:BA
X509v3 Authority Key Identifier:
keyid:70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ec:00:fd:57:bd:c2:95:a9:f8:a3:c2:fa:5e:fd:fd:a9:82:
83:7a:5d:7d:c8:f4:50:ac:8a:db:6d:4f:b0:09:15:d9:9b:c8:
64:4e:0d:a6:d1:30:ff:31:58:cb:2a:07:77:34:49:18:0c:11:
c1:64:8b:0e:6b:39:f6:f0:fa:01:ce:33:c2:d6:ba:7e:28:44:
22:ad:9e:ba:28:10:48:67:a4:c3:a1:8d:66:84:31:51:b0:19:
b9:6d:14:20:5f:0e:ca:5d:ee:c4:dc:12:f7:0a:95:4a:20:66:
bc:cd:38:3d:6e:b8:6a:0a:f6:73:c7:8f:60:8d:83:54:a7:21:
3e:4c:47:1b:9b:b7:27:95:5f:3d:2f:46:cd:8d:62:74:de:99:
26:ab:f5:cd:1d:14:54:c8:9e:6d:2c:56:59:94:69:92:d9:fc:
1b:3c:dc:49:89:05:2f:a9:5a:24:ca:f9:0b:83:71:df:b3:20:
e0:65:a5:b9:b9:19:e1:e1:22:4c:e0:bd:4d:18:97:1f:ad:0d:
d3:21:1b:84:b1:d2:9d:c6:95:c7:8c:26:ac:c9:0f:14:a8:85:
42:2a:20:3d:3f:e9:b3:2c:07:4b:87:eb:98:e3:b6:d3:e1:e8:
5a:99:89:96:26:4a:3a:75:82:96:96:80:9a:73:90:e7:18:9d:
ec:52:15:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:39 2025 by rpki-client