Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: VfgbzujcPWUrpP8BuMSds5RMjCCdY246Zia3bbj2Cbs=
Subject key identifier: 08:60:DC:B3:DB:C7:43:51:32:50:64:E3:D7:7D:94:D3:6E:4D:12:8A
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 0199FC5899136769686B4B614AB48BC1F13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 120A
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (hash: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: QUY+9VrW9gKsoh17xQrlfQXs0PJokcyl8bk8eC4mX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:99:13:67:69:68:6b:4b:61:4a:b4:8b:c1:f1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=0860dcb3dbc74351325064e3d77d94d36e4d128a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:34:eb:88:b8:93:b2:40:77:3a:6b:4b:49:94:
5f:88:85:86:54:96:05:9c:38:21:57:8f:0d:a4:c6:
67:e8:00:dc:6a:e8:47:e6:3f:46:cb:5b:45:4e:ec:
93:70:2f:4d:94:0b:21:0e:ba:90:89:6a:d7:1a:74:
3e:f1:1b:b6:11:92:19:54:30:36:1b:80:ea:ab:fa:
34:65:a3:b5:58:0c:1a:e0:d5:1c:c8:fb:f4:1d:14:
63:d3:c0:ac:b3:65:be:6a:55:75:f2:81:9c:c1:fd:
c2:e8:be:ae:c7:89:8e:22:2b:57:23:ba:dc:65:dc:
d8:36:38:c1:0f:d5:82:ae:d9:d8:56:04:a6:e2:a5:
4b:3c:2e:5c:da:f3:31:62:ce:0c:2d:7b:61:90:3d:
c5:23:ef:b5:39:c8:5c:d5:01:eb:ea:0c:65:76:e4:
b4:15:dd:e2:44:cc:4c:12:8e:31:d7:18:39:4e:16:
13:de:c4:ae:4f:a7:48:0b:7d:c2:1c:b8:ee:85:90:
62:dc:f8:ec:a5:3a:40:fb:7e:f3:c3:f1:7f:fb:e4:
bd:5d:42:00:cd:c1:da:af:25:05:cb:0f:7f:5e:88:
4a:4a:56:9b:0c:42:c5:5e:37:49:f3:26:45:6a:dd:
a7:d5:d0:f7:45:b5:ab:f8:94:c4:cd:9d:c5:ca:78:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:60:DC:B3:DB:C7:43:51:32:50:64:E3:D7:7D:94:D3:6E:4D:12:8A
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:41:c2:50:d5:aa:4a:79:e0:b5:b0:8a:9e:a8:71:e3:be:54:
e8:08:24:fb:57:3d:1b:38:b2:23:6e:ce:c5:94:4f:57:28:99:
d0:12:39:0a:31:ec:37:e9:3f:f4:88:05:24:5c:09:24:f2:4c:
66:17:d0:97:7f:84:b6:5a:90:f2:dc:71:12:4a:e2:f4:f1:2a:
df:30:51:9e:0e:37:2b:80:2b:e1:c0:a9:fc:2c:ba:09:10:30:
3d:9e:b1:30:30:85:db:52:70:44:b1:93:72:dc:8a:7a:0b:14:
55:ad:7a:39:9d:01:f6:7d:f9:8c:6f:d8:02:07:fe:03:30:94:
25:7e:8e:6d:9b:82:f4:2c:32:df:c5:f3:c1:dd:dc:a9:e1:27:
a7:4f:8d:42:bd:17:e9:e3:14:ac:ab:a6:e3:f2:63:a6:2f:8d:
d7:02:93:32:38:87:c4:eb:45:e7:29:70:e8:ac:86:da:a7:6c:
a3:d3:43:74:3f:c6:d4:c8:b5:a3:37:4d:f2:fa:7b:2b:88:cd:
fa:af:99:02:52:3d:67:75:0a:9c:6d:04:c9:56:19:66:74:26:
99:f0:91:44:ec:a4:95:0b:10:0f:0f:5e:2a:94:33:31:70:2e:
dc:2f:9d:be:20:9e:3d:c8:51:bd:a8:05:a7:fb:cd:b3:03:2a:
bd:ab:87:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:40 2025 by rpki-client