Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File: CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier: KWN0uTCcf9Dj+RhEcsVSz7KZd8HdxjpRc7XGZRp+wE0=
Subject key identifier: 5B:C2:44:9A:BF:84:71:1A:92:6D:06:9E:4E:90:E0:CA:92:52:A7:34
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial: 019A71B8182FFEFCB03930821E509E95995A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=)
2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: zqkD06XQXPwKi5Ava1j8kJfZF3EsWWJ/m35Xa5EXjfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:18:2f:fe:fc:b0:39:30:82:1e:50:9e:95:99:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=5bc2449abf84711a926d069e4e90e0ca9252a734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:23:bd:d0:ca:36:d1:61:f3:75:c8:2e:02:
f8:25:60:b4:2f:de:5b:49:c9:52:69:61:4f:58:3b:
f5:3e:08:16:29:4d:90:36:d5:af:73:2d:21:21:91:
60:5b:f1:fb:ce:57:a6:17:57:00:e7:03:50:ab:4f:
ba:ce:af:ed:77:70:5b:93:21:f3:97:03:a9:9c:82:
18:ed:34:95:28:00:52:9e:34:b9:c7:2f:71:7f:5b:
e6:31:da:db:1e:fa:55:37:37:6f:f2:bd:9c:85:e6:
4a:9e:f8:67:83:9c:1a:bc:4f:dc:95:17:a1:42:c2:
61:7b:67:48:b5:fe:f7:b6:0b:6a:f8:5e:35:be:2f:
ae:ff:23:0d:d0:bc:b3:aa:13:d9:f2:da:d8:d9:7a:
5d:60:ec:26:d7:c3:59:b2:6d:78:82:7f:19:bc:12:
3f:54:19:ba:15:bf:21:a6:03:88:3f:05:72:9f:f2:
54:1a:66:f7:49:8e:9c:d5:a9:99:62:c5:2c:c5:8d:
d5:7f:27:a6:08:17:84:91:c9:b5:8c:10:73:b1:70:
3b:18:ee:ea:23:96:e4:25:ec:48:0e:7b:1a:cc:a9:
d6:7c:77:10:89:1a:55:4f:e6:92:a1:d9:80:61:77:
54:94:30:eb:da:66:48:b0:83:c2:9e:a9:79:04:cd:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C2:44:9A:BF:84:71:1A:92:6D:06:9E:4E:90:E0:CA:92:52:A7:34
X509v3 Authority Key Identifier:
keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9b:a0:d0:fa:68:26:fc:6b:69:1b:cc:55:fa:70:c5:16:2a:
20:69:97:56:f5:af:a3:7d:06:cf:ba:97:17:8b:aa:ec:2e:47:
12:64:69:98:b1:58:ad:fd:eb:bc:25:4a:f4:e9:d0:fd:72:55:
67:5b:9c:66:87:0c:ba:d2:20:05:9c:d9:74:8b:06:d2:f9:b6:
6f:a2:2a:cd:21:cb:a8:75:1d:52:63:05:83:1b:0c:7d:f6:ae:
9e:4e:f7:84:72:23:32:77:cd:65:72:f4:cb:23:97:bc:c4:de:
50:19:09:d9:fd:a0:1a:a7:2f:cb:01:c2:a7:8e:97:ac:ec:4a:
62:61:1d:90:cc:02:11:32:35:93:b9:56:bf:3a:54:7e:8d:d0:
42:85:f0:25:f5:93:66:8e:74:34:25:b5:73:ac:b4:da:69:7f:
e0:e7:8d:0a:dd:57:6b:e3:77:78:7f:99:92:65:e3:fd:e0:ac:
36:dd:19:d0:8a:ea:f8:fe:30:c7:74:9f:d4:9d:72:81:7b:2a:
61:21:4c:ac:59:94:a1:d6:91:6c:84:04:2c:9b:93:87:c6:2f:
75:ce:21:7f:98:1d:55:07:94:b4:eb:29:70:88:e6:2b:4d:11:
38:43:01:69:c7:c5:2d:db:60:ee:f3:57:d9:c1:72:05:bb:f3:
be:ce:7a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:49 2025 by rpki-client