Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: xq3IuJzxkeIOv5vQ+Q44LjBhwlAgqhP3EjoKZ4e2Qd4=
Subject key identifier: 39:D8:D4:CA:8C:24:D4:E5:3D:5C:58:C1:CF:E8:55:5B:B3:2B:62:D0
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 019A28546405255C32CB4CE23B9D86F90F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 07A8
Signing time: Tue 28 Oct 2025 01:00:10 +0000
Manifest this update: Tue 28 Oct 2025 01:00:10 +0000
Manifest next update: Wed 29 Oct 2025 01:00:10 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: HsvsrlwUSDKeZlROxKzbx+nO9zHVVFbC3fZCP6qaN1o=)
2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:64:05:25:5c:32:cb:4c:e2:3b:9d:86:f9:0f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Oct 28 01:00:10 2025 GMT
Not After : Oct 29 01:00:10 2025 GMT
Subject: CN=39d8d4ca8c24d4e53d5c58c1cfe8555bb32b62d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:97:43:9d:a4:4f:17:46:99:de:7a:9d:6b:
c9:0e:7a:e0:ea:30:ec:97:88:fd:4c:94:bb:fe:4f:
7c:1b:69:b0:5b:06:cc:0e:b1:c4:94:ae:39:1a:70:
c3:96:53:09:3b:b4:42:a0:b7:e3:a9:d1:19:78:d4:
d5:8e:bf:b8:ec:e3:8e:f4:f5:f8:d0:76:e8:d6:3f:
41:cc:3c:9c:5c:bf:4b:f6:35:74:81:4f:01:7f:05:
25:f8:a6:9d:b1:6d:cd:8b:c7:e4:6c:c9:77:4f:c5:
cf:f9:be:6d:e4:13:47:af:78:69:c1:7b:e5:06:63:
80:a1:58:7f:0e:2c:e0:ba:62:c9:27:66:51:db:41:
2e:b1:c4:c8:4f:20:d1:8a:e6:ed:ed:dd:56:de:13:
1f:25:56:cf:94:31:11:58:f9:29:26:19:a6:55:f6:
20:d2:f7:d3:ff:66:9a:36:d7:00:82:11:b9:82:70:
75:55:af:ef:9a:0a:fd:92:28:6b:41:d3:eb:8a:be:
b6:26:79:3b:44:a9:67:fb:1b:67:d4:3a:4d:5d:9f:
38:44:dc:e1:44:d4:72:3b:d2:1e:d9:89:db:83:7a:
67:f5:d1:89:30:f3:65:35:98:b5:08:97:87:2a:ac:
a9:90:be:78:fa:9c:3a:f1:af:83:46:05:7c:e8:b9:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D8:D4:CA:8C:24:D4:E5:3D:5C:58:C1:CF:E8:55:5B:B3:2B:62:D0
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f2:f0:ee:f3:f7:18:d3:f7:34:12:72:73:a0:1e:6e:6a:ff:
04:f3:cd:72:86:e9:a0:04:87:4b:f0:59:e8:19:a0:b7:29:3a:
11:e6:34:52:b5:4d:7f:b2:b5:b0:a9:c2:e4:89:e7:95:64:49:
b6:65:a5:55:31:6f:14:51:56:66:6d:fd:39:c0:28:d0:30:ae:
97:16:a0:99:35:23:cf:62:8f:d7:60:ba:e0:c9:de:e9:ad:da:
fb:d5:eb:ca:dc:ed:dc:e2:16:d6:8c:2a:56:73:a8:e9:73:5d:
55:c8:48:c6:e8:fb:77:71:e5:ae:e5:c7:d0:32:bb:c4:05:e8:
10:a6:17:87:f4:20:ae:6a:0c:ef:cb:3c:4e:27:95:93:48:a2:
8a:9b:68:77:b3:40:20:fc:c2:a9:00:10:db:49:d6:04:92:f6:
ae:38:db:bf:96:8e:f8:26:be:a9:34:76:2f:18:9b:43:a8:45:
26:6b:fc:ff:cf:64:52:2d:8c:48:06:b0:64:ed:14:d8:31:40:
13:62:e7:11:12:9f:4f:01:61:ed:41:a6:48:20:5d:9f:51:24:
0c:11:06:ae:57:5a:70:19:83:e2:eb:39:79:48:d2:47:2a:50:
77:b6:fe:ef:ca:04:e3:c8:7f:74:03:ef:18:de:0e:48:68:54:
99:c6:d4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:44:09 2025 by rpki-client