Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: BOpxE9KugOVyIFhrvDdcUY5egEvrEAWGP64qmdPquVw=
Subject key identifier: 3F:2A:9E:54:AC:A6:FF:7D:F7:63:AD:14:C4:BF:FE:02:72:5A:D4:E7
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 019A4D07873A0431BB23B1B0CD818C9F5A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 0392
Signing time: Tue 04 Nov 2025 04:02:10 +0000
Manifest this update: Tue 04 Nov 2025 04:02:10 +0000
Manifest next update: Wed 05 Nov 2025 04:02:10 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: QE2V6Q6zbFdPpOFjjKjCBl+D9s8heN19MZmpe346MzI=)
2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:87:3a:04:31:bb:23:b1:b0:cd:81:8c:9f:5a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Nov 4 04:02:10 2025 GMT
Not After : Nov 5 04:02:10 2025 GMT
Subject: CN=3f2a9e54aca6ff7df763ad14c4bffe02725ad4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:43:7f:db:b5:87:00:17:23:73:e8:8a:a1:
2f:24:5d:0d:3a:96:50:29:f6:41:30:75:5c:83:07:
7c:50:e6:0a:08:4e:9b:98:16:dc:3e:5e:e5:c3:2f:
dd:f1:79:fd:dd:5f:e0:67:8a:77:c9:75:a4:e9:1e:
51:a4:0f:97:1a:a6:0c:b5:89:d7:6f:d2:c4:7f:7c:
ff:6f:80:a6:2e:56:ef:6d:f4:72:da:8d:f1:42:84:
41:91:2d:61:4f:ee:3b:b0:df:ed:8b:d7:2b:fb:4b:
0e:1a:1c:7f:a4:b4:f4:c7:7c:b2:23:7c:c0:44:27:
e9:ac:ad:ab:ea:1e:9a:93:04:23:eb:0c:d0:87:7d:
13:34:67:21:96:a2:4e:0d:66:b5:36:99:0b:4e:49:
23:d4:2a:d5:1d:35:3e:3e:14:2a:0f:d4:01:ea:50:
ae:53:75:31:a1:16:9d:f0:45:ac:f4:3f:7b:4a:1f:
10:9e:23:4c:b8:9e:a9:d4:60:92:09:59:ec:4a:db:
0b:38:09:dd:d3:1c:bf:59:87:60:0a:3a:de:54:26:
81:a6:a5:ab:33:70:64:2f:02:3a:da:c3:d5:19:4a:
46:4a:ff:18:da:eb:dd:70:f8:4a:bf:c5:b3:97:af:
d3:d2:63:85:db:d3:7e:e0:aa:76:42:45:6f:75:a9:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2A:9E:54:AC:A6:FF:7D:F7:63:AD:14:C4:BF:FE:02:72:5A:D4:E7
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b4:45:78:7e:d4:99:01:01:ea:6c:cd:8c:49:03:9b:20:5f:
df:37:7a:f5:56:0c:54:51:8a:08:2f:fe:72:e6:1a:72:9c:95:
6d:ba:72:cf:bf:51:d0:86:0f:fa:fd:eb:21:29:5d:4a:f2:e1:
06:9c:7a:21:6c:c2:f3:37:1f:e9:0f:1f:96:cb:a9:26:07:4d:
ee:8c:79:a4:07:d6:81:52:1f:ee:b1:2a:0f:63:80:9c:9f:81:
bd:fd:83:37:dd:bf:6e:9d:a3:7d:33:3e:ef:9f:59:e3:84:6b:
15:cd:ac:89:c9:1a:a2:b6:92:80:e9:03:21:14:09:e1:26:74:
fb:fc:26:2f:b7:08:ef:7b:c8:53:70:f8:5d:8d:d8:28:5d:44:
68:6d:5b:41:aa:29:73:5c:80:db:fe:8b:a1:d3:21:bc:cd:a9:
3b:3e:cb:fa:5a:d3:f8:5e:8d:b1:7f:6a:5d:03:4d:a0:1f:8d:
6b:ef:db:8e:32:bd:17:62:f8:1b:a1:2c:b1:c8:d7:e2:25:32:
f5:f4:d9:99:86:c6:99:c1:a7:6d:d9:25:a9:4c:95:db:dd:7b:
a4:59:a0:bd:8b:31:56:e1:9a:49:ca:1f:35:50:07:d2:3e:a1:
0e:eb:a5:6e:60:f0:e3:f1:bf:13:c8:f3:88:50:0e:5f:a9:d4:
b1:e3:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:23 2025 by rpki-client