Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: DM4GJVYug8D6Yg0k2i6eTkaJ9/EcnIc3NFFovqPkNiE=
Subject key identifier: 3B:EA:24:2D:60:C5:21:85:84:E2:F9:AE:48:4B:D6:BB:0F:EF:C8:E2
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 019A72262101D46F4A4318F6F76A861960D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 1458
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=)
2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: 6H6fNy09jbz3ooK1IplgP6Vo+KQPDlUkB5ObCupJi8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:21:01:d4:6f:4a:43:18:f6:f7:6a:86:19:60:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=3bea242d60c5218584e2f9ae484bd6bb0fefc8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:2e:30:b0:a0:71:8a:89:5e:04:9d:a6:a4:
45:98:70:15:69:99:16:45:a0:2f:92:48:c9:c0:ea:
c2:d0:41:0e:b0:f5:e3:62:cb:cd:35:63:9e:74:b0:
b3:46:c8:ef:4c:c3:5a:69:8c:ec:06:56:84:85:c7:
e8:a1:1b:76:ee:f4:d7:f3:6d:e2:a9:15:fb:84:7a:
d8:1a:b3:d5:86:38:a1:4e:a9:9e:5f:ca:7a:2c:d4:
8f:38:40:c9:0d:60:dd:f2:2a:0a:54:0c:cc:8f:4d:
4f:40:f2:8d:13:85:7d:7c:8d:f8:29:64:9d:b5:80:
cc:f3:5d:3e:d2:39:58:d0:d8:ce:fd:ba:4f:48:1a:
86:d7:59:93:c7:ce:10:36:fe:e1:3c:e1:ce:d2:82:
84:1e:6e:48:7a:13:b6:c2:02:51:9b:16:59:f2:74:
a2:61:69:17:cb:c7:bf:f2:07:f4:21:f3:ae:3d:a3:
dc:bb:79:fe:55:41:f5:fa:b8:1a:cc:a6:1b:dd:a6:
6b:6b:83:ec:e7:5c:1e:98:9b:0d:c3:04:5b:c0:b1:
f4:d8:a0:62:cd:a0:f8:a3:44:c7:04:f6:2e:e0:df:
20:d0:f4:f5:14:41:a0:9c:66:fe:25:2e:c6:49:e2:
e1:2d:2a:d4:7a:b3:e5:44:9b:e5:d4:0d:80:1c:3a:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EA:24:2D:60:C5:21:85:84:E2:F9:AE:48:4B:D6:BB:0F:EF:C8:E2
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9c:0a:6a:d6:56:73:44:38:4f:4a:b8:54:74:d2:b0:a4:be:
8b:51:7c:f6:f7:b3:3a:53:33:3e:d8:15:30:5c:ee:36:1f:28:
dc:04:e4:66:ad:ce:10:31:b0:d9:84:74:46:15:0f:8c:d8:54:
f2:9d:a3:e7:ec:84:aa:59:96:ef:b8:66:a2:a4:df:60:ab:b6:
6b:0c:fc:46:a3:14:a9:98:c3:42:dc:e6:20:a7:4b:a2:20:01:
5a:c4:eb:96:bb:97:a6:cc:88:e7:84:c6:cf:16:a3:cd:5b:7a:
1b:78:af:76:de:07:bf:ca:5b:21:d5:07:89:3c:d2:08:22:cb:
b1:63:bd:0a:03:83:b1:f3:5d:31:a7:58:fa:a7:fe:13:c6:f5:
31:67:dd:0b:23:99:a2:52:7e:ad:bf:e5:11:7e:62:32:39:b3:
03:a5:8f:87:02:3e:8f:7b:f6:45:cf:e6:c3:cd:9e:6f:87:91:
d8:87:bd:cb:73:39:aa:b1:3c:03:94:7c:ca:ce:ac:95:ca:12:
2d:ee:a2:d6:56:c4:0a:49:1b:9b:b8:a3:47:be:b8:1a:80:2f:
84:22:b3:2d:02:8d:d3:18:75:cc:47:a7:5f:e7:d1:48:cd:3d:
af:0a:83:82:62:5c:91:d9:7b:60:72:fb:10:bc:12:3c:d6:a3:
ce:68:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:35 2025 by rpki-client