Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json)
Hash identifier: oogrQd4lnigZdlEWZU7Lpca4GLs9P082a/vUkO0tGWk=
Subject key identifier: FF:9C:68:EB:73:F6:85:50:93:40:75:13:B4:14:D3:12:C2:81:B9:E0
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial: 0199FC21A0238F692D4BA96F952EEB6C149F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
Manifest number: 08A5
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: 4NykHTKnfSIJ0q7_RZtsAwpsqKA.roa (hash: w55fxLVLcagKRRaTKAUle3eBEN7JDI5LPLVo9zNJXVU=)
2: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: He7UHHY2rATytkJcOHIhPfquaqovJS8QS/vXUJos3l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a0:23:8f:69:2d:4b:a9:6f:95:2e:eb:6c:14:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=ff9c68eb73f6855093407513b414d312c281b9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:4b:04:0f:80:c0:c7:68:41:22:40:28:57:
be:12:f7:2d:52:b0:c8:27:94:e8:08:49:47:d8:76:
d8:fe:a6:1a:b9:41:46:be:38:a7:55:88:a7:20:2e:
a4:a7:da:c3:15:9a:c0:76:ed:d0:1a:19:9f:3d:f4:
1f:87:ae:67:eb:a3:33:b7:60:21:36:4b:46:d6:80:
cf:e0:9f:19:0b:b3:a2:9f:e7:7e:d0:eb:f2:a9:aa:
08:d0:d7:73:3d:aa:1e:cb:58:6e:9c:7c:d4:f9:4a:
b4:5f:33:5b:e1:17:d3:0e:c5:8c:0e:c5:d6:37:f0:
a4:2d:e8:25:7e:db:9c:21:5a:53:70:7a:f2:2f:97:
be:50:71:ba:26:8e:22:2b:c3:a1:1c:4b:43:0a:1c:
54:ce:77:85:80:6b:56:52:29:bf:dd:4f:e7:f6:9a:
40:c6:03:5d:47:95:b7:f1:75:a9:a1:e2:96:46:d3:
a0:ab:5e:c0:59:12:47:33:73:3b:f1:3f:7e:52:39:
40:4c:c3:ea:cc:c3:2e:3d:4b:d4:76:e4:18:ce:ba:
33:7a:4e:a3:d2:77:ee:c5:8f:6c:f5:d3:6a:b0:be:
9f:6b:dd:9e:3a:58:3e:9a:8e:10:e3:8b:64:3c:95:
80:1e:2b:00:46:0d:5e:54:cc:81:4f:60:1c:18:33:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:68:EB:73:F6:85:50:93:40:75:13:B4:14:D3:12:C2:81:B9:E0
X509v3 Authority Key Identifier:
keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:09:d7:3d:98:3f:ce:e9:85:26:cc:35:93:71:90:de:d1:54:
20:72:6d:13:0a:f3:1a:9e:a5:83:42:94:93:e2:74:7d:a2:8e:
04:8b:8e:67:8c:59:9c:c8:f3:25:9e:a4:b9:f9:be:96:8f:ab:
56:a4:67:e2:e5:9b:c0:6f:0b:49:f7:cf:ae:0d:56:c1:86:f4:
a8:61:72:2c:69:3d:2c:99:66:b2:8d:f7:8a:a5:0d:87:a9:03:
a6:cd:e5:55:ce:2c:eb:9c:e7:9e:f1:ad:94:47:2b:d9:da:e7:
29:ea:38:d1:82:ab:2c:54:e9:ee:b8:94:85:7c:3a:76:f5:a2:
b4:bd:c3:17:cd:6d:fb:b5:16:d4:25:3d:9a:bf:2b:30:04:d1:
5b:fa:e9:03:7e:cd:39:ce:ae:3a:91:bb:0e:65:f8:31:6e:72:
6c:46:ee:6a:de:82:53:02:9d:63:60:79:da:fc:ad:ca:bc:7b:
b0:05:f6:58:36:e9:21:74:ce:dc:a8:9c:f7:9f:b8:13:99:86:
a9:0c:95:b9:f3:b0:7e:1a:e1:15:5b:03:51:a0:5b:f7:f0:23:
51:0f:84:59:f5:18:1c:de:60:e6:7a:43:35:e0:b1:ef:11:8f:
a5:77:94:7d:39:a7:35:dd:60:cb:d9:36:fd:93:70:58:46:b0:
65:30:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:17 2025 by rpki-client