Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: pbmlIshLh7zQg7G00jskBcxfT8UhddFXpN2m8pqhsjo=
Subject key identifier: D1:7C:88:9E:66:7B:C9:E3:C1:4E:77:DC:A5:2E:0D:E2:C7:E3:9C:D3
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 0199FBEC511E8E4657421025405338EFEF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 0368
Signing time: Sun 19 Oct 2025 10:03:12 +0000
Manifest this update: Sun 19 Oct 2025 10:03:12 +0000
Manifest next update: Mon 20 Oct 2025 10:03:12 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: b+Xr4UVO7nKEAzO+jBcHbARUpnu2JxLt4Tne+53wmZY=)
2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:51:1e:8e:46:57:42:10:25:40:53:38:ef:ef:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Oct 19 10:03:12 2025 GMT
Not After : Oct 20 10:03:12 2025 GMT
Subject: CN=d17c889e667bc9e3c14e77dca52e0de2c7e39cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:26:9c:f5:76:86:3e:b3:6e:c0:e7:80:a7:
a4:78:eb:7a:48:32:18:72:fb:50:8f:63:ea:5a:7c:
af:e7:d2:0a:0e:26:96:bc:a3:2b:4b:44:b4:62:88:
fc:12:a2:ad:ec:6e:f9:37:33:50:ce:d0:cb:8e:70:
d7:11:df:67:bd:ab:63:0b:70:68:5f:7c:c0:c8:56:
61:96:3e:b8:a4:f8:ef:9f:1b:69:18:f3:87:a7:d7:
46:9e:b7:10:89:17:bd:e1:0b:30:21:f2:f1:aa:23:
f4:5c:6f:a0:15:7f:77:46:e9:9f:88:66:b5:12:8d:
5f:cc:af:1d:a8:08:4b:a4:cc:0c:a2:c3:14:e1:7b:
50:50:41:00:bc:3d:b5:3c:50:06:2c:bf:f5:43:85:
97:ef:8f:64:80:83:13:cb:65:48:1e:60:84:86:19:
8c:bd:a3:3e:58:3b:39:5c:56:d5:16:2a:3a:cc:03:
06:24:f1:18:32:cd:41:4e:39:b5:4b:be:08:c6:e4:
e5:0b:3f:e9:77:9c:74:57:fd:f2:f6:25:3d:2d:d7:
2f:49:ad:6e:58:91:0c:79:0a:f8:10:bc:6d:6a:3c:
3a:bd:9a:4b:10:3c:e0:cf:b3:0e:8a:7c:28:a8:9a:
e3:7a:7c:41:e0:74:3f:c3:8f:b2:2c:f2:36:c3:14:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:88:9E:66:7B:C9:E3:C1:4E:77:DC:A5:2E:0D:E2:C7:E3:9C:D3
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3d:ab:86:0e:4a:bf:ab:2d:f8:97:83:3d:1e:82:8f:de:be:
11:00:41:c2:db:7c:d0:76:95:5b:ba:5f:86:c6:69:c3:21:d1:
f6:b4:5f:76:d5:3f:70:ae:1b:e5:ba:1a:99:01:52:6c:0c:8c:
e5:8d:11:02:98:ed:fd:42:72:c5:3d:5b:6b:99:d6:be:47:5f:
f2:9b:79:94:d1:6f:36:3e:3f:2e:e9:b5:1b:db:bd:3f:a1:f9:
7a:fc:ba:29:4f:6d:1a:21:d3:e0:ba:35:6f:7a:01:fd:e9:41:
61:32:72:07:75:27:80:c1:d6:7d:e7:dd:ac:fe:fc:cd:f3:8e:
30:bd:0d:d8:e3:06:9d:2a:48:13:8a:75:e2:f8:41:9b:b7:b5:
73:23:a3:75:de:7b:cd:01:09:0d:3c:9b:21:3f:06:55:c4:67:
ef:16:d7:6f:d6:08:c3:6b:95:9e:cd:f6:79:cf:bd:b9:2e:2a:
b7:2f:f6:64:15:64:bf:f2:93:46:7a:d7:d5:13:95:43:5a:97:
2f:74:63:3f:58:5c:ef:9b:4a:8d:53:6b:3e:19:85:2e:f3:d5:
d2:8f:22:d7:a5:fb:c9:08:13:92:38:8e:f7:20:a3:98:b8:48:
22:aa:41:35:51:36:c2:e6:9a:af:4d:ca:e7:4f:94:0c:70:a0:
58:ab:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:39 2025 by rpki-client