Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: Ctu6vVc7oEAbmNJAraee3s3GwbhG+ZSk5wU5BL0bjqg=
Subject key identifier: FC:E1:06:5F:5C:AD:53:A6:70:38:97:D9:50:6A:BB:D6:69:6A:33:D0
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 0199FE7E2DC7AAE210656F85B8472316B1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 0985
Signing time: Sun 19 Oct 2025 22:01:45 +0000
Manifest this update: Sun 19 Oct 2025 22:01:45 +0000
Manifest next update: Mon 20 Oct 2025 22:01:45 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: +tt+XbHnoE2aAVq6PzusXWf3yoT9ZeXWTULadf0qUlw=)
2: pltDgh5JbbEWSggwVXLGKtobVl8.roa (hash: XwQl2FIwqmmMyr6/rQAaXcZHJoaBjslDK7+U58bsYig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:2d:c7:aa:e2:10:65:6f:85:b8:47:23:16:b1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Oct 19 22:01:45 2025 GMT
Not After : Oct 20 22:01:45 2025 GMT
Subject: CN=fce1065f5cad53a6703897d9506abbd6696a33d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:7d:54:f5:78:a4:fc:d4:67:0d:6f:0d:75:
d2:42:64:3c:22:76:bb:7a:d8:3f:29:30:8d:72:ef:
58:ad:7c:57:05:91:5b:81:76:ac:22:2d:f2:3d:0a:
12:e6:54:1b:d0:ac:23:92:fc:15:6d:1a:8e:22:89:
cb:b5:70:45:6c:99:72:d3:72:b0:0d:cb:d7:fb:8f:
83:10:77:f5:c6:7e:be:e3:41:12:44:95:92:1e:07:
e1:8c:23:d9:80:90:b7:8e:1c:9c:66:ee:20:e1:ec:
ab:d8:dd:d6:c1:68:de:14:a9:39:52:5f:84:b6:21:
dd:d6:cf:77:84:9e:7c:b9:33:61:6d:6f:0e:25:16:
82:05:26:2d:12:13:82:5a:eb:04:71:ff:01:b1:5f:
5d:0a:31:e7:f5:22:b1:10:95:2d:c0:01:1d:17:51:
9f:80:de:c1:60:18:44:5b:1a:d7:d8:de:6f:29:4b:
d5:3f:5e:96:d8:65:a4:f9:52:00:01:0c:80:b4:78:
8d:d7:5b:51:d1:e2:bb:2b:6c:d9:f8:88:95:04:0f:
7c:a4:8e:59:67:a4:c1:61:05:fb:9c:8a:cc:c6:28:
c8:02:3f:64:3c:33:26:35:c5:2e:11:16:f9:ed:d8:
2b:ef:7d:1b:ed:77:a0:02:f7:ac:35:3f:59:b7:1f:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:06:5F:5C:AD:53:A6:70:38:97:D9:50:6A:BB:D6:69:6A:33:D0
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:02:aa:33:89:a3:9b:b0:5d:cd:b6:d9:07:b1:8b:39:50:5c:
a1:ac:e2:e0:aa:ab:27:d0:01:64:c1:98:37:a5:71:c8:63:07:
2a:19:e2:25:d3:cb:8a:c4:a3:f6:99:b1:aa:28:8e:f5:0c:70:
b2:d8:56:19:76:01:4d:78:09:d6:56:a2:85:8c:01:1d:25:ac:
22:e9:4c:c6:43:50:77:83:99:65:28:2b:f6:1b:16:8f:b0:03:
9a:da:22:af:ca:95:bd:a0:1d:29:0a:ca:ee:55:21:64:23:47:
75:0b:51:98:05:7e:53:91:33:82:28:b8:a7:cf:36:ca:77:5b:
cb:ad:82:9d:9e:88:a1:c3:7d:04:d3:2d:bd:90:3b:f2:5b:42:
f2:e8:a8:9c:c9:a7:3a:60:c9:79:fb:16:ce:a3:9a:61:c8:b1:
0c:da:52:b1:01:99:c8:02:58:e0:5b:05:c1:ad:52:e4:5e:b4:
74:d5:7f:e9:ac:d8:1b:ee:b2:05:2b:10:b5:d9:01:20:f3:08:
4b:bf:18:c8:d8:d7:c0:31:6d:74:34:31:d6:a4:05:2a:e7:61:
b6:ee:e9:5c:da:45:7f:e2:a1:0b:12:75:cf:40:8f:f0:48:10:
94:10:86:ec:99:f8:22:ff:5d:1a:b3:89:bb:a8:e5:5a:e3:c1:
22:83:d2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:01 2025 by rpki-client