Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: W28RWy/fur8kBCe/k/f8y0xJk0B0T2weDtFHD/bf/5k=
Subject key identifier: 31:3E:27:16:5E:4D:44:90:42:7C:E4:F9:2C:4E:0C:AA:DA:C8:69:9C
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 019A4E4FD2C57F44BC20A699491701235441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0B4B
Signing time: Tue 04 Nov 2025 10:00:45 +0000
Manifest this update: Tue 04 Nov 2025 10:00:45 +0000
Manifest next update: Wed 05 Nov 2025 10:00:45 +0000
Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: nbogQDxQ0UnH+i1EkPuD/5goKIGFsU/hur1ViYQyEGM=)
2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d2:c5:7f:44:bc:20:a6:99:49:17:01:23:54:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Nov 4 10:00:45 2025 GMT
Not After : Nov 5 10:00:45 2025 GMT
Subject: CN=313e27165e4d4490427ce4f92c4e0caadac8699c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:5a:0a:24:e1:e9:6f:1c:ef:4a:99:ed:81:
45:23:1b:55:0f:34:0a:81:8b:f6:90:44:d9:39:66:
8f:97:3a:1a:cc:0f:81:26:6f:91:04:c5:0b:2d:f2:
70:1e:5f:11:1d:52:12:ab:5b:b9:14:30:b7:15:5c:
cb:3d:9c:41:12:a9:41:ab:c9:83:fa:e2:23:36:5c:
f4:db:6e:e6:c9:a7:b1:10:2c:83:a3:01:52:b4:bb:
9e:6b:5d:c3:77:4c:b9:c3:ca:22:27:9a:23:c6:89:
d1:94:a6:f4:f9:a5:2d:68:7a:2a:aa:f7:b8:ff:74:
0b:54:ca:73:66:17:7d:dd:2c:ab:f0:62:d3:f2:ac:
bc:1e:77:64:06:55:75:3c:5b:78:d3:63:f1:b0:eb:
88:27:c4:1e:ed:30:1c:24:4f:1b:09:7f:b1:60:ab:
17:aa:1f:1e:10:fe:c2:98:8f:d5:1b:93:0d:ec:8a:
5b:1f:c4:17:9e:b2:13:36:59:de:37:6e:3e:db:ba:
cb:63:f5:cc:90:c0:d5:df:8d:ca:dd:7c:e6:57:0c:
e4:81:ad:da:0d:b0:c4:1a:48:0e:35:f6:2e:1a:36:
f4:6f:c5:fc:d9:04:4b:82:26:b6:69:36:c6:15:21:
92:06:7d:67:87:15:af:20:1c:35:1f:ac:77:98:4f:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:27:16:5E:4D:44:90:42:7C:E4:F9:2C:4E:0C:AA:DA:C8:69:9C
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:88:99:8d:26:3c:50:37:98:06:59:9a:36:52:40:f8:a4:6e:
01:6b:ce:4a:14:90:32:ec:c6:1d:08:da:e6:f2:80:cf:b1:98:
c4:63:99:b4:10:90:82:57:9f:9d:59:f8:4e:d2:3b:64:1d:54:
00:c6:3f:c9:71:53:67:38:3d:45:e0:f2:73:dc:0c:9e:a6:0e:
f4:6e:23:da:2a:08:80:b8:fc:89:81:f1:f0:1f:39:08:41:e8:
21:b7:41:6d:10:62:57:58:14:a5:2c:f7:61:a7:c0:18:59:3b:
d5:f4:44:e4:f6:ee:7f:04:c1:58:9b:56:f7:52:9f:93:af:db:
c2:f3:01:ef:af:bd:c5:79:ee:5e:46:53:42:92:4c:11:84:d3:
56:ab:36:ff:e5:4d:64:a3:ea:17:6e:5a:d6:b7:d9:ce:9b:e9:
3b:cd:cc:7f:09:a4:61:3a:88:97:1c:41:eb:39:2b:02:6d:99:
e0:bc:90:a0:9d:2d:5e:44:d9:6f:90:c5:ed:70:52:43:cc:4c:
f6:0b:dd:14:bc:b1:f9:89:d7:64:dd:1b:85:57:a8:13:c4:aa:
02:e4:0c:39:64:5c:57:0c:b4:29:31:d7:da:85:5e:c5:43:7a:
34:bd:9f:9c:e4:3c:e6:ca:1c:68:9b:a4:8b:34:cf:39:3e:d7:
a5:21:e5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:36 2025 by rpki-client