Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: 0GY3avYbgGhh43LB8lszvOBnF4NScwuduGUP4sQqiQU=
Subject key identifier: C9:7A:05:0B:CC:86:27:D9:7F:57:50:71:47:93:52:74:69:A2:B3:3A
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 0199FC21A09E6E032E129D16FD73DB22B71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 1146
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: HuTx2wTT0XFYI2EByI1mIScs+ykzDH2QBlLJV4o3pX4=)
2: aZ04YotwMN5NF6QJ2ZcHvh79g-w.roa (hash: dZyQQffGI8dAk3Ily2WBsTj4NOYJ+9MtNaWUE01PNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a0:9e:6e:03:2e:12:9d:16:fd:73:db:22:b7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=c97a050bcc8627d97f5750714793527469a2b33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:04:c3:3e:9f:46:70:8f:f1:da:04:59:74:
78:82:23:8f:90:22:4d:c8:62:67:75:37:ec:79:9d:
f6:c9:ef:40:40:92:10:b9:77:af:ce:14:a9:95:d9:
47:a6:78:2c:cb:37:7d:77:40:2e:b9:16:5d:54:4f:
a5:04:06:73:74:37:33:8f:24:d7:ab:39:61:55:5f:
05:ff:57:bd:bd:d5:f9:61:d5:4b:d4:0d:a2:d6:3f:
cc:c1:11:62:bf:39:7c:83:97:fd:9e:97:49:7e:f8:
62:45:8d:1c:ed:fe:33:32:e1:68:58:fa:31:47:a4:
61:5f:20:7f:20:4d:6f:8e:e7:9d:24:96:74:c1:d8:
62:c3:26:99:12:e0:ac:97:ff:37:4d:71:a9:c8:4f:
11:f0:6a:38:90:3f:c2:bb:28:69:51:31:01:b1:a3:
da:2b:ec:23:1f:8a:9b:b8:6e:e3:4a:c3:98:e1:84:
99:e4:40:8c:9b:f9:0a:86:ed:9f:68:53:c8:b6:0a:
80:16:e3:24:09:d5:4d:d6:25:40:c5:d8:6f:b1:ee:
8d:31:2d:0e:39:da:a4:f0:09:81:52:08:fd:d4:95:
e4:7b:10:89:a8:d0:d6:87:04:da:23:0d:2e:dc:88:
ed:8b:22:ce:26:ac:5a:e9:1d:f6:ac:55:a9:4e:6d:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7A:05:0B:CC:86:27:D9:7F:57:50:71:47:93:52:74:69:A2:B3:3A
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:99:5a:f0:97:67:6b:db:2c:bb:ed:fc:68:cf:53:fd:6f:09:
d0:2a:8b:19:00:5c:29:50:d7:16:a5:1d:3c:59:da:d0:e2:3c:
e1:cf:f2:34:4a:40:65:70:c1:a8:46:69:60:3d:1f:ec:a1:fb:
f5:1a:20:72:12:34:68:26:0f:d1:96:4c:43:c3:62:e6:4e:6c:
82:9d:67:ae:26:62:50:f6:f7:51:c3:18:91:13:8e:7d:03:7d:
d8:b5:27:2a:b3:6a:94:76:2a:0b:e7:58:b5:7d:7f:23:b8:c5:
c9:b5:ea:84:75:5c:8c:1d:32:44:31:15:59:2c:de:31:30:e6:
56:1d:67:67:f1:cc:3b:d2:fa:c0:a9:17:48:99:c3:a3:0b:06:
ac:82:fd:b7:f5:ea:f6:c8:37:ef:e6:43:1a:3f:a0:0a:92:a1:
a0:d2:02:78:0f:31:ea:fe:d4:ba:f1:f5:ac:3a:60:c5:8a:d3:
07:1b:07:ac:93:40:b1:b5:2d:32:74:3e:85:09:b4:53:01:45:
69:25:e8:c9:1c:e6:50:b2:50:a3:bf:7c:21:d9:37:86:0c:fe:
28:bc:1d:6c:0e:1f:47:ef:01:9e:24:1a:22:a1:2c:65:2f:33:
74:ba:85:4d:e1:15:51:7c:73:a4:53:ea:51:98:87:c5:d1:a4:
60:a7:fd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:20 2025 by rpki-client