Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json)
Hash identifier: V/5/dj0EZUmVxw3EszKpObcKZgl0j3GlNBHgcObuUB0=
Subject key identifier: 5D:14:08:CF:C6:6F:20:BF:5F:D2:15:07:17:4E:41:E0:67:FC:2D:58
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial: 0199FAD8184EE3DAD39BD353978657D7BB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
Manifest number: 1235
Signing time: Sun 19 Oct 2025 05:01:29 +0000
Manifest this update: Sun 19 Oct 2025 05:01:29 +0000
Manifest next update: Mon 20 Oct 2025 05:01:29 +0000
Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: wJ4v0PYzhJT5rWmPiGbs5H5Qmi2fc3x1x2n4iadfaKs=)
2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:18:4e:e3:da:d3:9b:d3:53:97:86:57:d7:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Validity
Not Before: Oct 19 05:01:29 2025 GMT
Not After : Oct 20 05:01:29 2025 GMT
Subject: CN=5d1408cfc66f20bf5fd21507174e41e067fc2d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:06:77:89:d2:29:7d:e6:1a:d4:dc:d3:fb:
85:ec:ca:aa:6e:4c:85:eb:2f:01:2a:ce:31:19:12:
49:1c:ba:1a:0f:38:37:2f:46:f7:7c:47:54:45:41:
b1:b3:06:eb:84:9f:45:94:6e:43:d8:66:d1:cb:3e:
19:9c:b6:9d:47:cb:21:2d:9b:71:6e:f5:85:94:b5:
bb:b2:8a:68:24:73:01:11:74:19:e0:1a:37:32:8f:
65:57:c6:6c:7b:eb:08:7d:e4:d2:1e:e0:9f:c0:04:
fe:56:06:95:14:f6:da:8b:43:fa:37:3e:24:bd:2f:
5c:38:0b:72:fa:7f:66:01:27:7d:0b:42:2a:27:31:
ee:a2:db:18:6c:3f:a2:b8:c5:cd:63:26:23:13:85:
c6:ea:06:ef:0b:e6:90:9d:6a:cf:27:eb:8d:47:63:
c5:ab:9d:54:7b:3d:ff:9e:69:0f:68:29:8f:1a:40:
53:2c:c6:5d:33:52:eb:8f:01:94:2c:1c:87:96:27:
fc:7c:fc:d4:7c:24:3b:3d:01:ff:d6:85:0e:1a:b3:
83:02:3e:ad:9e:b4:0f:e5:4b:70:70:5f:2d:ab:8e:
20:91:3c:68:42:e6:c5:ee:65:85:fd:8d:d3:55:49:
c6:52:84:c4:0b:c6:86:22:39:ed:ab:32:e6:17:0d:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:14:08:CF:C6:6F:20:BF:5F:D2:15:07:17:4E:41:E0:67:FC:2D:58
X509v3 Authority Key Identifier:
keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f3:45:25:b8:20:09:e6:fc:0f:38:1e:0f:0a:ef:bb:24:ab:
e7:ab:d3:91:43:1b:53:3e:d4:f4:1c:95:2f:6b:36:be:15:3d:
9a:b8:6e:20:cf:1e:bb:50:04:2c:1d:25:6c:49:0d:22:3a:40:
cd:ef:3e:00:b6:d7:b6:ea:33:8c:26:87:ba:6b:82:d2:80:65:
26:b4:8b:dc:5c:91:74:9a:13:ba:ed:f9:81:d5:de:34:4f:07:
07:f8:1a:22:50:d8:c7:49:e3:3f:1b:06:6f:cf:07:31:a7:59:
6c:c4:91:42:af:8d:d4:2d:a8:1f:31:1b:e8:e1:61:c2:73:32:
1a:42:b8:54:d0:2c:b1:22:7a:bf:cc:07:f4:9a:d4:ff:40:c9:
e8:96:9a:59:eb:cf:73:67:4b:62:b1:ee:b9:24:0f:d9:e5:0e:
a5:40:99:cf:de:8e:ba:3f:8e:aa:31:61:be:ac:7e:f7:bd:d8:
8d:b4:0b:1c:64:2f:12:89:1b:09:a6:67:9b:28:f7:41:d2:a3:
fd:a1:02:2f:e8:9d:00:cb:cc:ad:a0:16:3d:a6:5e:9c:6c:1c:
10:ad:0a:10:c5:ee:80:e1:fe:93:dd:f7:86:19:85:5d:8a:fe:
8a:18:ab:70:5b:bb:41:99:09:13:11:09:8e:71:e6:22:35:a2:
0e:d0:0c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:21 2025 by rpki-client