Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: bGXUPFLzFpqIVMvzHEvSa0HzR+uwKw5L/a0dAfMxZ80=
Subject key identifier: EB:25:FE:09:F6:55:5F:95:F3:15:BA:8C:4E:EC:58:90:F1:AB:6B:4A
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 0199FEB479122ACBDA76727A5CE1CEF53083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0CF8
Signing time: Sun 19 Oct 2025 23:01:04 +0000
Manifest this update: Sun 19 Oct 2025 23:01:04 +0000
Manifest next update: Mon 20 Oct 2025 23:01:04 +0000
Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: u7v7vcUH2Bqf3DcfsVYQV46zifN9LNgSBWLuzymnupI=)
3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:79:12:2a:cb:da:76:72:7a:5c:e1:ce:f5:30:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Oct 19 23:01:04 2025 GMT
Not After : Oct 20 23:01:04 2025 GMT
Subject: CN=eb25fe09f6555f95f315ba8c4eec5890f1ab6b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:26:84:b8:cd:c9:d6:31:04:b1:fe:4c:40:e7:
49:06:16:1d:2d:97:60:0f:96:00:92:6c:85:4b:41:
6a:57:e3:f6:9b:3e:8b:55:b4:6f:e9:e8:ec:8f:b4:
b2:a9:7f:a6:68:3a:aa:9d:9d:d8:2b:d9:9e:f8:80:
22:90:1d:79:65:23:2d:f8:a3:47:63:3c:f0:c1:f9:
18:07:ab:92:8a:78:72:ce:4a:95:fc:ce:0a:bb:8d:
f5:f1:e2:d9:c5:84:af:9d:ff:88:db:c8:7c:7f:8b:
7a:7d:68:ad:df:a3:e9:35:00:33:1c:7f:3e:ff:34:
e0:97:2d:53:03:71:d1:b7:10:4a:ea:3b:3a:06:2e:
a4:a1:e1:c8:bc:9c:71:26:b4:d8:2c:c5:f6:d1:f8:
4d:bf:51:93:64:d1:16:b7:4f:ad:97:24:a7:ad:2e:
32:87:41:3c:cb:e3:1e:d8:04:36:94:92:3a:e4:d5:
4c:07:ca:14:6f:06:d7:bf:e1:59:96:48:90:e2:58:
a1:4e:fa:a5:4d:a1:21:67:1a:dc:9c:d7:8c:ef:4c:
ee:ee:17:02:9c:72:4f:1a:aa:85:7d:b1:3d:e1:c6:
73:a8:6b:31:d4:60:35:5b:55:87:1b:4d:50:04:dc:
c8:7f:60:21:76:cf:e1:08:ad:01:04:b5:35:0c:86:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:FE:09:F6:55:5F:95:F3:15:BA:8C:4E:EC:58:90:F1:AB:6B:4A
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5b:66:8b:85:cb:3d:0a:5b:1a:bb:ce:d7:ec:6a:94:bc:ed:
b3:77:5b:70:99:98:51:f5:c7:3f:76:78:dc:64:88:c8:3c:4c:
cc:70:53:e2:d3:d3:29:c4:85:e6:7f:c2:2a:f2:50:e3:2d:40:
17:dd:87:27:84:b5:e3:dd:a3:9a:92:2e:7b:47:01:e9:4f:9e:
d5:32:30:04:42:d1:29:f1:48:69:fd:cf:bd:55:5a:ec:a5:e2:
ad:18:a3:6c:8d:7b:8e:c4:e1:c6:42:77:92:ea:76:3c:13:80:
b5:c0:b8:4e:f2:f3:6c:15:a8:b8:1e:32:24:3f:6b:89:68:6a:
b3:bc:00:22:e4:6f:82:25:07:ce:77:f5:48:f8:2a:bf:ea:f2:
2d:07:9f:88:11:e2:b0:a0:e8:01:be:77:ab:cb:06:d7:77:2f:
bb:e2:6b:0e:d5:f5:f8:b7:4f:89:b0:43:13:f4:84:ac:72:02:
ba:78:bc:1c:c6:79:07:3a:4e:35:f9:17:b4:a6:ca:f2:26:a5:
38:12:2d:06:d6:87:b2:f9:b6:93:d1:9e:11:fb:5f:60:c3:19:
bb:72:35:23:8e:20:36:70:39:cb:53:2e:e8:db:fd:d0:9e:30:
c9:d5:24:d6:4b:8c:b9:27:3b:a7:e6:f5:7f:a7:d5:b2:0d:7b:
4a:4c:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:33:38 2025 by rpki-client