Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: UarWLP960ccOj74GKtP7EUPlClBx3Mp9TGDL8m0RjYc=
Subject key identifier: 95:68:30:FB:5F:EC:6B:C7:B0:56:25:85:16:48:A6:46:B0:BC:68:F8
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 0199FC58A3DFF4DC386F0243CC2A7910C9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 146F
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: 1WqJ/y8GyqVgB6ZH1TuMpU3q2lCB+Z24uYTVpDrvGD0=)
2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a3:df:f4:dc:38:6f:02:43:cc:2a:79:10:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=956830fb5fec6bc7b05625851648a646b0bc68f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d0:9a:d3:da:12:97:f2:7b:d8:fc:dc:2e:04:
b2:e1:fb:b6:6f:b3:56:9e:6d:cb:8e:43:27:6e:77:
ad:0e:65:b7:a5:74:e6:09:18:31:05:d7:61:25:38:
f7:2f:89:fe:5d:b8:ba:7d:10:6c:e9:e1:82:7e:36:
08:21:c2:6f:50:9d:e0:95:05:d5:a3:4a:cb:73:33:
ce:b2:9f:c4:32:95:33:fc:4e:07:1a:be:aa:03:0a:
72:49:97:37:c1:dc:e4:c2:c8:5d:8f:49:a3:e6:a6:
fe:6b:81:58:da:e1:bc:9c:02:c2:31:c5:3d:d5:62:
a6:dd:27:c3:c5:34:7f:59:b0:36:e6:89:a2:4a:c3:
3b:97:d0:c2:e2:5f:04:dc:88:6c:77:f7:8a:f2:73:
37:77:e6:c8:e2:fc:22:6c:26:96:fd:a2:bb:a7:6a:
3e:94:3e:68:db:ba:63:77:63:92:1e:7c:60:9c:60:
ea:36:82:3c:f1:11:f6:d8:9f:ab:2d:9f:8c:c5:0e:
40:39:42:10:04:c4:1c:6d:20:ae:6c:c4:4e:8a:2e:
9e:70:f4:ca:f2:38:a0:3f:d9:8a:71:7a:40:21:aa:
ba:35:30:67:7f:9f:0f:42:c3:3d:ba:3e:76:59:c4:
80:82:01:f7:08:45:af:65:f3:f7:96:fe:2f:19:ac:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:30:FB:5F:EC:6B:C7:B0:56:25:85:16:48:A6:46:B0:BC:68:F8
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ee:14:21:6e:d2:2c:eb:9b:41:a9:67:65:3f:de:5e:2c:3b:
82:a7:8c:f0:ff:b9:85:87:9b:3b:bf:8b:ef:b0:ce:bc:62:0d:
1c:0b:0f:bd:09:29:08:a6:8b:04:d2:a7:19:2f:86:69:cb:0b:
e3:16:4b:bb:21:9c:2f:a9:7a:3d:38:a0:8e:f7:5c:bb:9a:56:
77:4e:2c:35:e1:74:dd:39:3f:be:9b:99:d5:8f:17:85:7a:b1:
48:51:0f:84:72:c3:a7:b3:08:6f:94:3b:f3:ea:34:76:16:85:
12:dd:bf:00:cd:24:c6:6b:07:84:32:6a:05:57:f1:49:46:88:
56:9c:c2:9f:fb:5e:30:87:ce:0e:ae:52:7a:42:22:43:79:ae:
cf:9d:74:c1:6e:94:de:52:c2:8e:8e:fb:10:c3:50:e7:aa:df:
99:5c:de:c2:46:a6:da:da:a2:59:0c:2f:29:e5:e7:44:81:ad:
56:73:80:78:68:c7:ab:b2:2e:f3:e0:54:da:72:3b:5e:e7:af:
a5:bf:31:4b:c1:dc:8a:dd:e5:d2:00:a9:0a:56:58:85:c2:54:
4a:31:8c:f3:b5:8b:77:8b:e1:76:4d:53:4d:90:a8:00:bb:c6:
5e:56:66:28:67:94:98:6b:88:65:d6:f3:61:5b:a0:72:50:a0:
59:f6:05:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:14 2025 by rpki-client