Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: f/z0/UisIieH5v4ZM66/5QVV8KWwd5myCsA1r0BLvmk=
Subject key identifier: 5F:D3:34:7A:21:F7:96:8D:DD:8C:A7:7A:5F:09:A3:C0:B7:02:F8:54
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 019A500725EFCD3BA0073B32746AB00FE1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 13A0
Signing time: Tue 04 Nov 2025 18:00:36 +0000
Manifest this update: Tue 04 Nov 2025 18:00:36 +0000
Manifest next update: Wed 05 Nov 2025 18:00:36 +0000
Files and hashes: 1: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: 1FYR/dkH9ZtNszWeI2OotZ1QokrMbHGVjYJWlMy52G0=)
2: QEhnuw8ud1j9n62qQluLx43WHjQ.roa (hash: 1M0hr4yzSJjpoSUF2lAkNTs362XypkDSGbasmLEH2gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:25:ef:cd:3b:a0:07:3b:32:74:6a:b0:0f:e1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Nov 4 18:00:36 2025 GMT
Not After : Nov 5 18:00:36 2025 GMT
Subject: CN=5fd3347a21f7968ddd8ca77a5f09a3c0b702f854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:82:0d:77:41:50:33:8c:ab:48:cc:36:54:
84:db:d6:c3:47:ac:d5:7e:8c:89:b5:34:42:e6:06:
76:57:6d:58:2b:1d:95:c2:e3:c5:f3:85:db:fa:70:
c9:80:a0:17:ce:43:df:67:9c:0a:67:6d:1c:1a:0f:
df:bd:fd:a3:8c:3d:3e:a3:cf:d4:4d:b9:e8:09:f0:
57:23:f5:49:3e:61:43:66:9f:ef:25:d4:81:38:36:
20:c8:40:d5:d1:16:bf:f8:a8:cb:8e:52:06:5d:6e:
cc:82:fd:9b:d5:cf:7d:ed:81:5a:28:6e:10:a6:07:
b4:6e:d5:74:ee:42:f2:22:86:45:13:45:d6:91:d6:
14:70:d8:0e:4e:9a:ab:fe:1b:7f:c9:93:c5:76:bc:
39:75:d7:17:0f:16:20:ea:9e:ad:27:b4:36:37:b4:
bc:4f:e3:4d:d2:e7:64:d4:11:86:79:bc:6f:35:25:
d3:1a:fc:08:72:5f:61:65:4f:26:b3:a0:d2:0f:2a:
93:29:ac:5d:b5:bb:f3:19:82:4a:03:fc:f6:11:39:
7c:46:d6:5b:38:65:06:37:4d:da:c6:e8:4e:33:8a:
29:a6:26:23:3c:7d:30:34:fc:f1:26:f3:c5:3a:ef:
30:ca:ef:8c:da:ba:83:1c:5a:7b:ad:06:9d:89:e5:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:34:7A:21:F7:96:8D:DD:8C:A7:7A:5F:09:A3:C0:B7:02:F8:54
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ad:64:c6:af:24:e9:1c:34:6b:e8:0b:85:e8:54:6c:fc:b4:
72:51:5b:53:62:51:ec:41:13:c5:cd:3b:78:13:39:71:e3:74:
5e:19:6f:3d:b5:7d:0c:a3:95:e8:f7:a9:9a:d3:be:24:af:93:
bb:c1:ca:b2:02:05:5c:a8:bc:96:d9:a1:2d:b8:3b:d7:67:2f:
92:93:6a:e7:bf:bd:a4:90:66:f7:6f:22:64:9b:f1:32:fb:57:
e0:6b:12:35:0d:8e:26:f6:36:7d:16:d0:e4:a8:7f:35:65:fe:
2b:e6:d9:6c:e5:d1:90:97:4a:2b:cf:08:35:5f:a2:5c:82:52:
48:5b:76:43:b6:1c:af:39:c4:07:6d:12:fb:db:2d:c0:56:b9:
8a:60:7f:04:68:d6:eb:ff:a2:08:4c:0f:7a:aa:d6:92:24:24:
2d:40:b3:bd:c8:08:21:a6:17:67:4e:c5:ad:a1:94:21:94:12:
f5:8c:77:0e:10:d9:d6:2c:ef:a7:59:d8:45:a7:77:be:5e:62:
e9:70:5f:e7:a8:61:71:57:bb:98:cf:2c:44:9f:51:d5:a1:6c:
b8:04:58:4e:0c:51:67:7f:d9:2f:8f:6b:01:8b:84:2a:22:0b:
4a:56:18:4e:7a:d4:fa:32:2b:ab:b6:4d:a6:75:76:86:83:65:
6c:aa:95:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:43 2025 by rpki-client