Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: 77WDZpgfcmVRTJRl0xUd49qoK7d7YtQtQv91iqMclb0=
Subject key identifier: 57:EC:3F:47:A1:4B:E4:14:E6:5F:DC:71:CB:4E:6E:2F:F0:CF:28:F6
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 019A2478D3EC2773D0626CD7FDA2AA19F254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 123B
Signing time: Mon 27 Oct 2025 07:01:29 +0000
Manifest this update: Mon 27 Oct 2025 07:01:29 +0000
Manifest next update: Tue 28 Oct 2025 07:01:29 +0000
Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: wkwhzGpoK+fMKmEUBh/H0QCgGQKzD0uRWrsekZnal64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:d3:ec:27:73:d0:62:6c:d7:fd:a2:aa:19:f2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Oct 27 07:01:29 2025 GMT
Not After : Oct 28 07:01:29 2025 GMT
Subject: CN=57ec3f47a14be414e65fdc71cb4e6e2ff0cf28f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:0f:d0:e0:2e:d2:d3:4f:bc:4a:0b:c8:16:
f3:06:88:f9:bb:a9:db:65:3b:52:36:a6:8b:16:24:
b1:43:0a:96:55:a7:a8:e7:82:87:b0:71:1d:d9:62:
95:07:68:4c:d8:d1:1b:34:d2:9a:3f:3d:49:34:5c:
65:42:e1:78:87:eb:52:32:64:93:12:c2:09:e9:c5:
70:0a:24:93:e0:bf:e3:9a:05:15:1f:86:9a:1a:88:
a2:e2:bd:b7:dd:7d:b4:9d:ba:ad:53:ec:34:a2:85:
46:de:ea:ed:7e:b8:11:b4:16:17:9f:f6:be:74:92:
a0:01:75:80:a6:35:68:56:46:38:19:0c:9e:fc:4c:
32:f5:19:d3:55:b9:b5:05:9f:34:78:49:d7:ef:ab:
5c:6e:f7:ef:03:75:9a:92:f0:e9:d3:60:04:39:82:
8a:af:f6:41:87:68:fb:fb:b3:d8:95:af:1b:38:1c:
8c:b9:14:23:73:0e:3a:88:69:b5:fa:90:17:e8:7f:
54:66:0d:3b:44:3a:78:10:f8:7d:b0:58:42:fb:59:
0e:40:bc:c9:92:ec:0e:cb:40:14:33:72:a1:9a:b8:
6b:41:a1:dd:69:df:19:d8:e3:b4:b8:d1:40:16:a3:
7b:3d:f8:90:cd:c6:4e:07:97:4d:28:df:72:eb:8b:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:3F:47:A1:4B:E4:14:E6:5F:DC:71:CB:4E:6E:2F:F0:CF:28:F6
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8e:0b:4a:99:94:38:37:e4:7d:60:8f:83:a0:c6:97:ad:19:
bd:24:3a:cc:7d:20:b8:58:bc:ad:e5:a8:9f:5e:8a:3e:9b:c8:
e1:f4:e0:07:7f:0f:3d:ed:83:3d:da:92:ca:77:7e:1a:26:d7:
42:39:c5:7b:be:49:e4:eb:7b:85:22:f6:1a:a5:b3:08:7b:9c:
2b:46:24:f9:08:6d:e8:fc:e1:e4:60:40:9e:20:1a:06:44:6c:
fb:3a:f3:f1:3c:f4:78:5d:76:e5:89:13:d4:f2:19:5f:70:ba:
0d:5b:3f:73:66:cd:c0:a0:29:b4:75:7e:61:bd:49:f9:92:ea:
34:2d:76:dd:9f:b1:a6:4d:d3:42:25:c8:b2:f2:c6:7c:f3:47:
40:d8:bf:0a:cc:1d:c7:fb:17:df:9b:bb:71:ad:76:48:6d:fe:
ea:a2:34:78:58:42:b3:09:d8:2f:65:22:b1:35:e7:10:b9:44:
0c:da:70:03:da:84:0d:f8:5d:35:2b:10:fa:04:ba:c6:bc:be:
a0:39:22:7d:7d:c2:ea:ba:c3:5d:1e:36:62:01:50:08:1c:e2:
f0:99:96:41:2d:f8:cb:f5:2e:11:af:c0:9b:70:de:6e:6a:54:
b9:1d:33:b2:fb:94:3a:24:41:91:8e:8c:a5:58:91:7d:ea:03:
3e:42:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:27 2025 by rpki-client