Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: OlZ/7oBO3LVdj4zW6aj7Bey/tftOiH7YwNNtS/V2oZE=
Subject key identifier: 66:AB:31:9D:00:74:22:5A:50:A8:78:BA:62:58:80:1B:0E:9A:D3:DC
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 0199FAD8085BC2923279AF77EF7604C6501A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 0F23
Signing time: Sun 19 Oct 2025 05:01:25 +0000
Manifest this update: Sun 19 Oct 2025 05:01:25 +0000
Manifest next update: Mon 20 Oct 2025 05:01:25 +0000
Files and hashes: 1: 5bzk29WC2HSF9C0WZb2ngqPQ56o.roa (hash: fHgyyYyWXqEUztNgt56ZVo1FPxKD7CyfYBjgqkUt9TI=)
2: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: 9LcQuJsAzMjG8GTJhTiMC6Md/kKvZ7o0Aml0qnGrnTQ=)
3: VYOb-2PB3WKsCUYPT2j-nf80wMs.roa (hash: YpnMPKkA2P+LHKT+FLRfK5zKYPPPwWgoJKnxE9kTcx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:08:5b:c2:92:32:79:af:77:ef:76:04:c6:50:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Oct 19 05:01:25 2025 GMT
Not After : Oct 20 05:01:25 2025 GMT
Subject: CN=66ab319d0074225a50a878ba6258801b0e9ad3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:38:18:3f:a4:a2:ce:23:fe:c2:27:e4:57:
58:61:4c:10:c6:e9:9f:75:79:9b:d7:25:0b:bc:da:
b6:35:f3:7c:d6:f0:81:ba:53:de:9b:6a:a1:6c:63:
97:c0:41:37:59:a3:01:a1:d9:12:ab:d5:47:fd:0d:
ba:78:fc:27:ad:64:c5:74:8e:4a:b5:0a:c8:ab:f6:
b7:e4:24:4d:95:5f:2e:0b:64:2c:16:da:92:f7:e1:
b5:06:7c:0b:35:bd:ad:54:eb:d1:dd:7a:7d:d1:0e:
bb:23:52:96:8e:c7:7b:ab:dd:4f:cc:12:e2:06:1d:
ab:b4:31:ac:e5:4b:5c:cc:64:e7:36:1a:b8:55:01:
88:fd:bb:97:1a:30:dc:a3:f0:ef:57:a2:68:b2:d8:
fa:b6:a1:81:1e:4a:c2:01:4a:a8:45:38:9e:14:a9:
2c:57:7d:5b:8c:be:f7:27:66:ae:b9:70:57:15:8c:
01:a7:80:e5:07:a7:b4:97:80:ba:60:ad:dc:b4:f5:
ca:db:50:cc:13:b2:7b:71:94:a9:a0:6f:a0:89:13:
83:1a:b7:d8:34:ca:c4:c2:8e:69:c4:57:09:c9:7c:
d8:e9:33:63:a7:10:cd:74:44:07:d4:f9:98:38:e6:
d2:6f:a0:bb:2f:a9:1c:97:a6:85:07:50:0e:2b:f7:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AB:31:9D:00:74:22:5A:50:A8:78:BA:62:58:80:1B:0E:9A:D3:DC
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:36:4f:f9:d2:2c:e2:d7:1a:68:5f:7e:20:4e:33:42:e0:e4:
40:76:22:9f:30:f3:ab:dc:9e:e1:53:a5:e3:7a:7c:d4:e6:b5:
ca:a9:00:83:b6:fb:b5:cf:64:86:4c:28:63:be:91:b4:e6:62:
d3:89:27:b9:23:5b:1a:6f:6c:7a:71:32:89:6b:9f:f6:54:35:
e6:e8:11:58:93:30:f9:fc:02:82:0b:02:97:68:2b:ec:b4:e7:
f5:e5:d0:bf:e5:8b:db:f3:09:9c:52:10:0c:28:b6:39:43:6c:
43:ce:be:ca:81:86:d9:20:1d:85:59:82:9a:5d:d3:35:80:ea:
d4:3d:14:16:dd:73:43:e7:49:21:52:a1:37:02:2b:c9:ef:8a:
26:a1:a1:77:5c:e5:dd:84:10:a9:b4:85:c7:9a:e4:ed:17:b1:
8d:46:df:d8:c2:7c:7f:8f:11:25:8f:23:6a:aa:29:9b:d7:2b:
ed:2f:5a:20:3e:49:22:b6:03:bb:8f:47:37:db:f6:a8:36:20:
60:31:6f:38:96:cb:15:ef:66:e1:8d:92:f4:75:9a:62:13:b2:
e8:fe:7a:70:03:aa:ee:ce:06:fa:46:67:bc:36:18:2f:30:6b:
41:66:9e:75:30:16:0a:cd:72:37:f4:5c:20:06:53:bd:84:15:
af:be:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:33 2025 by rpki-client