Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: AJ54lmE3oGCMf9Y9diZMJ4c8wQNUtdxp51v4L4DJRo0=
Subject key identifier: 0A:BB:1A:20:DA:0B:F1:11:D5:FC:54:CD:50:B5:48:E3:6B:50:C7:47
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 019A7112DCA5DEE1817C85E4770C91F23E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0DC3
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=)
3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: Puzo2CiC1YR4tcYao1P54gv+eCG4HFuVoYnp2c/yZ7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:dc:a5:de:e1:81:7c:85:e4:77:0c:91:f2:3e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=0abb1a20da0bf111d5fc54cd50b548e36b50c747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:11:df:18:38:08:19:b6:50:75:31:67:91:db:
24:59:20:ab:cb:0e:cc:5b:a9:b3:1a:93:ea:7e:d7:
fc:f7:6d:65:0a:e5:03:01:77:ae:99:fe:3c:ba:89:
00:61:3f:e6:44:77:be:5c:4c:99:e9:e8:06:1b:c6:
4e:b8:a8:e6:ed:a7:0d:7f:f8:f3:34:7e:19:20:c6:
f7:60:75:f3:38:aa:34:71:69:1b:a2:8c:d0:44:33:
78:ea:22:b2:29:38:20:d0:48:70:80:6c:da:c7:64:
a0:5c:ee:38:72:9a:56:cf:b2:6f:2e:b2:03:d4:0c:
4e:14:46:f9:d1:7e:39:67:9f:ee:14:e4:1a:eb:4c:
03:83:fc:a7:15:08:86:8f:ec:02:8d:f7:2a:03:97:
e7:ec:c6:87:04:8d:c7:49:7b:8d:19:af:a6:f6:86:
52:33:45:04:e1:b5:97:58:4b:e9:cf:70:d9:d5:50:
42:16:b3:15:6f:cd:60:6f:20:a1:61:30:35:2a:98:
db:62:d2:76:65:23:cd:11:1a:74:82:2d:b9:05:2b:
71:be:b8:7f:6c:07:8c:75:fc:ea:4b:c7:db:b1:0e:
67:12:c8:ee:a1:75:de:88:d7:7f:6d:42:1a:ce:f3:
71:41:57:86:48:9f:fd:7e:b7:59:9f:ce:ce:ba:a4:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BB:1A:20:DA:0B:F1:11:D5:FC:54:CD:50:B5:48:E3:6B:50:C7:47
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:27:98:8f:10:90:b9:7d:35:12:23:35:1b:d5:6e:99:b7:b8:
be:37:b6:b6:ee:31:e7:f7:88:fe:94:86:cd:4f:4e:58:6f:71:
ec:d7:43:f9:a2:cd:34:a2:12:f2:8f:ad:7a:b4:e5:da:a1:f4:
e4:fd:52:77:d3:2c:c9:de:8b:aa:64:20:e1:ef:e4:cb:b6:2a:
c3:a6:48:93:a6:81:02:bb:b1:5e:f6:3a:ab:2f:94:8f:2b:aa:
b1:4b:33:8d:61:ac:27:9c:ea:09:eb:e2:6b:e2:37:0e:ba:e4:
02:9e:f5:5f:f0:fc:e4:ba:f7:06:37:62:9a:73:dc:73:c3:63:
d2:74:06:ac:67:93:cf:d9:2c:22:f2:8c:a6:e2:48:82:a8:04:
32:19:3f:5a:2a:9f:c1:e5:7c:33:9b:e3:57:cb:48:3a:46:68:
1d:28:b5:f2:35:69:12:45:35:43:6f:a6:50:63:df:02:db:bb:
6c:23:72:d2:ff:92:2f:ca:9f:0e:0b:c1:33:c1:1e:ad:fb:4e:
ea:8f:cd:9f:20:75:a5:12:79:29:5a:19:70:fc:a0:12:66:b1:
41:ff:43:48:9e:29:9e:93:a3:be:79:d2:65:69:46:84:63:0c:
45:fb:fb:18:83:0b:71:9c:f4:df:b7:f0:00:58:ce:4c:d2:a9:
d5:c9:91:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:06 2025 by rpki-client