Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: aA4xmG5XRZN9wLol2SEzW8Ntruc55QmLvgGYAnEAcgc=
Subject key identifier: 8D:1D:3B:32:0A:11:52:84:0F:04:05:46:5F:3E:D8:9E:A7:15:77:C6
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 019A71B816C318F90259D19329C89255C5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 1326
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: PNXE3f7nm-ojlPdvV_1yYpzHd1o.roa (hash: TFO2XkeOQG2ZuVhhUVPTDBMBQ7rIutsnw7Dyad/B8zE=)
2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: 39xCRyW3RKYyns+AMFpuTOqNEpc4XM2z8cvtNVfdzoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:16:c3:18:f9:02:59:d1:93:29:c8:92:55:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=8d1d3b320a1152840f0405465f3ed89ea71577c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:5b:77:82:bb:11:2e:3c:35:9d:23:c3:79:
63:17:98:d0:9f:ee:09:79:64:bb:56:01:e7:0c:6d:
69:09:28:0b:c5:83:c5:46:e8:e1:86:77:1e:af:c8:
ff:5a:09:da:ec:56:8c:cd:6b:bd:81:ba:db:d5:f4:
c2:66:d8:21:16:b7:b0:f7:0c:7a:dd:fe:0d:97:13:
7c:7d:3f:86:b1:30:9a:3c:e9:11:8a:d7:18:b0:ba:
fa:fd:0a:47:c2:ab:99:97:91:ce:69:b4:c7:13:2f:
5a:c0:ae:7f:bf:90:5c:39:37:88:b0:e3:e0:40:84:
44:08:09:f0:45:e2:52:42:02:a1:69:59:26:00:fb:
2f:e6:5d:e7:0c:eb:4c:08:c8:9e:ae:a2:65:2d:15:
75:8b:3b:dd:8e:ea:ba:d4:bf:53:0c:66:6b:e8:0f:
87:d2:1d:b7:a3:98:ec:e4:b7:01:b3:77:a0:1a:7c:
84:02:d8:3c:cb:f0:48:33:53:81:9d:6b:d5:96:86:
90:b9:2f:bb:cb:17:24:03:00:39:2c:e6:49:46:e0:
41:97:71:fc:4d:1c:d5:6b:87:91:63:60:4b:8a:e5:
21:ea:87:29:5f:e7:7d:de:0f:aa:ba:8c:e6:b7:0e:
71:62:5d:f3:bc:18:7b:93:a6:a1:ac:00:b3:97:ba:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1D:3B:32:0A:11:52:84:0F:04:05:46:5F:3E:D8:9E:A7:15:77:C6
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b1:b8:e5:30:44:14:3b:84:15:e6:ea:c6:ed:12:f0:63:4a:
b5:55:44:47:2a:43:0a:1b:66:34:38:a1:f9:e7:a9:33:20:ec:
81:c7:6b:a5:e6:0b:02:a2:28:24:ea:a2:7c:b2:0d:d4:22:cf:
2a:b1:5c:cd:53:c2:7c:c2:3b:4c:94:6b:51:c2:60:9a:18:66:
24:31:57:6c:b2:4a:76:25:30:7e:b7:e6:9e:17:b1:ff:c7:9a:
64:59:44:61:5b:71:03:5f:28:2d:4d:f6:b2:15:ed:b2:2b:c1:
8c:46:18:f7:8d:ad:8b:56:bc:a2:7a:3d:90:66:9d:2c:93:89:
18:db:36:7e:37:21:96:3a:84:27:1d:73:05:22:f4:dc:14:d2:
92:24:39:e9:bf:d4:c5:80:d0:9b:07:29:f7:39:5a:b7:1a:7e:
ae:29:86:50:3a:83:d8:3d:11:79:47:49:7e:c0:25:f1:c7:cc:
6d:b3:88:27:49:ea:2e:b0:ba:2b:17:04:7b:6e:51:e5:08:4d:
35:5c:4c:c8:32:72:78:15:d9:0b:91:8f:8f:f4:5e:5e:c4:20:
08:40:9e:3a:68:d3:c6:8b:14:14:0c:02:4c:3b:4c:55:10:58:
48:a8:fa:7d:c9:c8:21:e9:80:c8:6f:17:f5:7e:88:63:d7:d2:
d0:3a:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:10 2025 by rpki-client