Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: Redw9gTfK/N5ZTZKT11oPycKs9j+jSlRnUQzZje2mI4=
Subject key identifier: 5F:94:04:93:3B:90:EA:06:31:33:E8:BD:FB:3A:73:7A:26:D1:DC:70
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 0199FCFDB4DCBE61EB1112633B22B4AFFD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 13CA
Signing time: Sun 19 Oct 2025 15:01:49 +0000
Manifest this update: Sun 19 Oct 2025 15:01:49 +0000
Manifest next update: Mon 20 Oct 2025 15:01:49 +0000
Files and hashes: 1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=)
2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: a4kj5+joZaUCbnLFOtt9Vbjt5lTVUaTEg7lCNxGF22w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b4:dc:be:61:eb:11:12:63:3b:22:b4:af:fd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Oct 19 15:01:49 2025 GMT
Not After : Oct 20 15:01:49 2025 GMT
Subject: CN=5f9404933b90ea063133e8bdfb3a737a26d1dc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:f1:bd:55:55:12:b2:e9:a9:1f:3c:32:f6:
5a:9d:30:8e:d8:16:9a:fa:0d:14:5b:73:07:61:6c:
d2:24:21:1e:7d:f3:b5:1d:bc:10:92:4e:91:74:48:
5f:77:55:de:ac:d5:1d:8c:a0:66:0c:4b:c7:a3:2b:
93:f9:c0:10:99:6c:df:54:ef:b3:13:9c:f0:62:09:
1c:6e:e8:b1:13:fe:61:d5:4f:65:ad:cd:ee:41:79:
0a:bd:12:55:5f:9a:71:19:35:ce:f7:6f:dc:df:28:
cd:aa:24:82:47:0d:32:85:83:23:dc:bb:cc:03:80:
2f:c6:3d:0c:11:82:de:f7:e6:53:df:33:aa:36:ba:
27:6e:aa:62:0c:cc:d8:aa:9e:c2:5d:c9:c4:31:cc:
ca:08:c7:d1:ae:78:9b:f0:c8:80:6b:73:e4:7a:2b:
f7:2c:ef:6f:63:bf:dc:7f:4e:c6:95:9a:b5:c6:18:
0c:46:5b:e5:e0:5f:1d:12:4c:70:a4:13:c0:6f:95:
b9:9a:6b:5c:fb:85:87:72:5c:fd:b5:4b:3c:82:e1:
96:f0:68:ae:04:ca:91:f4:be:f5:f0:9e:0d:f6:d6:
6f:ca:f3:22:03:1e:79:d4:a6:e0:2a:8c:b6:d2:d4:
24:2e:36:5f:2d:2c:f2:bf:d0:41:84:2c:b1:90:bd:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:04:93:3B:90:EA:06:31:33:E8:BD:FB:3A:73:7A:26:D1:DC:70
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:79:9c:a8:35:f8:2f:be:c1:4e:40:8a:6b:07:b9:08:27:4b:
42:d9:b8:8f:d5:34:90:46:d0:a2:a1:3c:53:5d:a0:fb:38:33:
a6:ce:2c:c7:71:e6:2c:9a:93:d4:d2:47:19:8e:a1:0e:6a:f4:
4a:10:a2:c7:6f:8b:1d:80:85:31:2a:3f:c6:98:6c:76:9a:e1:
9a:da:59:b2:0c:2b:06:49:a3:5b:99:d2:5f:4c:42:c5:bc:7f:
01:50:65:3f:86:e6:5b:f9:0e:90:7d:25:60:97:b2:23:e6:a8:
1e:88:a4:1f:65:88:11:84:55:fb:c6:15:da:99:61:38:10:01:
74:ab:41:7f:37:43:9f:31:34:4c:e9:2f:fc:0f:37:c4:f8:87:
9a:15:f8:df:c9:46:b6:f8:73:1b:de:cc:65:bf:5f:01:5c:5d:
ac:1f:5e:d6:b6:24:41:45:12:68:72:5e:16:37:fe:7a:b7:65:
19:69:97:80:d1:ec:6f:ec:b2:51:aa:ef:3f:05:08:a7:ff:af:
89:0e:54:15:fe:68:9a:ce:7f:f0:a7:34:d0:88:21:d2:62:08:
bc:fe:51:ec:06:a1:27:13:ca:6c:04:f7:f4:27:d2:fe:61:e2:
25:ef:c7:f7:58:4a:dd:68:c2:7e:88:b3:fd:db:42:24:fc:f4:
5d:72:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:24 2025 by rpki-client