Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: z4ENPcYGOVNrZpnNH4/qLLhEzSmeQyGVamTtq5ALQbM=
Subject key identifier: 3F:40:CE:5C:18:6D:15:2C:52:B1:DD:7F:1B:CD:AC:59:AA:66:5D:C9
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 019A00DA15186064B76F1692B93FA7DA9364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 09:01:23 +0000
Manifest this update: Mon 20 Oct 2025 09:01:23 +0000
Manifest next update: Tue 21 Oct 2025 09:01:23 +0000
Files and hashes: 1: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: 3QrTYS48iE68GOY53jHJHrJyAD5nC9cdMSuDl/Gvm7w=)
2: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (hash: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:15:18:60:64:b7:6f:16:92:b9:3f:a7:da:93:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Oct 20 09:01:23 2025 GMT
Not After : Oct 21 09:01:23 2025 GMT
Subject: CN=3f40ce5c186d152c52b1dd7f1bcdac59aa665dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:c3:0c:0d:bb:7b:9c:cf:ce:c9:c9:70:ea:
e1:1f:89:16:88:47:92:39:56:df:ca:29:e9:df:e5:
c2:2f:b1:fe:7c:2a:0c:a0:0c:48:0c:15:ed:66:54:
4e:16:cd:be:88:67:83:11:24:43:54:6f:1d:a7:38:
da:98:3e:19:3e:d3:b3:5e:5a:ff:04:66:3a:59:9f:
3d:a3:82:bf:4e:8b:ec:95:e7:9c:64:46:ec:0e:18:
46:52:cb:87:57:48:d0:5b:a7:6e:61:16:5d:99:14:
37:5f:68:3d:38:e9:b5:57:61:90:5d:fe:e0:29:75:
02:a9:67:a4:4e:85:f6:a8:63:13:88:8b:e5:3c:9d:
d4:09:03:cf:8e:5c:e9:aa:18:4b:2b:7f:8c:5e:c7:
b9:f3:1b:50:61:a3:77:24:1a:af:a7:fa:99:72:8c:
05:6a:f0:d0:65:7a:0b:94:c0:b7:a4:2e:73:d7:e0:
63:ba:77:29:cc:b3:49:b7:79:9b:44:8f:0f:95:07:
ab:20:c7:9d:f0:1d:9a:42:17:d7:1c:b4:3e:f7:03:
bb:f0:d5:f8:0c:c6:7a:c8:7a:a2:7d:46:ae:dc:1b:
66:dc:af:5a:e3:81:db:87:bb:5a:6c:c4:bb:77:5c:
6c:2c:34:fc:ff:8a:55:07:05:4e:d6:e6:94:fe:c5:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:40:CE:5C:18:6D:15:2C:52:B1:DD:7F:1B:CD:AC:59:AA:66:5D:C9
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ce:27:da:7e:e0:20:e9:70:10:38:75:6c:9f:16:2c:34:a2:
23:44:ff:6b:7a:e1:0d:2d:44:d1:91:b2:cb:56:b7:ba:f2:8f:
eb:eb:9c:64:5c:2c:10:a8:46:0e:12:63:2c:6b:5e:c5:f8:e4:
fa:87:0e:78:37:16:f0:ae:97:1e:a6:f8:91:e1:72:35:e9:1f:
19:c1:e9:73:1a:75:c3:98:63:82:df:71:8b:4e:29:ce:9a:fa:
b4:88:7c:4e:35:75:56:69:55:36:13:33:a2:b2:1d:95:76:7a:
a8:b4:c5:84:ec:ca:79:5e:50:93:19:4d:86:02:c5:b2:8d:de:
a8:4a:dc:ea:10:96:c6:86:15:c7:b6:5b:ec:e8:fd:b4:f6:d1:
c8:ff:4d:92:8c:02:da:29:00:e3:68:af:d2:6e:99:62:79:06:
47:1d:20:1b:3d:df:5d:a5:65:1d:4c:52:6b:9b:58:3c:d4:6b:
6c:d7:c1:c8:59:59:58:61:72:30:e8:a2:34:b2:83:fc:2c:c0:
a0:92:9b:ca:ea:4f:c3:56:5a:25:0b:6b:44:82:64:df:fa:3c:
aa:71:c2:df:08:4d:ec:6b:be:7a:f2:3a:44:64:40:d4:59:75:
09:b7:26:ed:5e:40:c5:40:d2:8a:6d:1b:96:72:7a:81:99:5b:
cf:ed:91:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:58 2025 by rpki-client