Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: IWGJkZsz9F6APCxABy25+0hIdGWKQQd4QlRmpQTqqA0=
Subject key identifier: CD:CD:E7:61:78:85:B7:D8:CE:76:BD:0E:5E:BA:E8:5E:BF:82:79:4F
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 019A71B8E9C9E537077FB39ECF2BF8C87A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 1430
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: 26OroNSilLDsLnRmS90OawnRg8M.roa (hash: 2vZiL1ss373Q0TX+B8Q8SMDZKCr1m9fpyjjeqgVg0rI=)
2: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: c+X8GJ3WQODtrj4GdD29WutzJXAVTruSuf+06af/qjg=)
3: yFq0JfOaNjdhRiNZMahKgBz5pBs.roa (hash: HLvs21UJM8ndMu/vC6YjvpshtGffGUPV1RHDv0ERCAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e9:c9:e5:37:07:7f:b3:9e:cf:2b:f8:c8:7a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=cdcde7617885b7d8ce76bd0e5ebae85ebf82794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:2c:72:7c:42:1c:0b:c7:5a:2f:3f:b0:35:
ab:70:5d:75:d3:71:1b:a7:0b:10:a0:b6:4a:c7:ae:
68:7f:60:3e:32:73:eb:fe:a7:13:35:b5:bd:1f:88:
ca:95:2e:08:40:78:57:25:1b:c2:3e:90:bd:d1:3c:
a9:2f:6d:af:7d:ae:e2:1f:b0:50:5a:df:af:ad:66:
b2:b4:7c:92:2e:bb:07:f5:04:ec:bf:1d:e7:08:0f:
ee:99:6a:28:c3:5c:49:cb:50:dd:b3:b2:fc:ab:44:
91:9f:7d:b6:42:22:3f:d6:27:16:6b:fb:65:86:81:
30:05:75:aa:a7:34:bf:9b:3d:2c:ef:61:ac:bb:3c:
b9:0f:49:7d:c1:2a:5f:81:c8:93:f4:2b:df:51:75:
ed:aa:25:7b:81:b3:85:cc:41:c3:c6:20:c6:29:4d:
50:be:5a:7d:0e:c3:7d:3f:4c:d5:b2:7e:7e:1c:02:
a0:5f:ad:cc:6d:8c:86:b0:c8:fc:9c:b0:0e:6c:c2:
bc:74:95:83:2d:76:3b:43:68:b8:de:d1:4f:c6:99:
37:6d:f1:51:48:10:d7:83:73:fe:eb:7d:1e:eb:ff:
b0:dd:a2:92:14:ad:04:f0:77:86:86:b1:6d:3a:4c:
60:16:35:19:89:1d:20:9d:44:b2:8c:43:75:00:fd:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CD:E7:61:78:85:B7:D8:CE:76:BD:0E:5E:BA:E8:5E:BF:82:79:4F
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c9:f7:55:b0:df:f1:88:c6:7c:f4:02:28:0e:9a:bf:9c:b8:
97:37:b1:49:f9:bb:b4:9b:11:34:24:51:05:0f:95:ee:33:f9:
67:95:d6:ad:84:d7:e6:30:64:fe:75:8c:e2:22:b1:af:c8:cf:
4a:f3:74:1b:16:e1:4b:0d:4d:4b:4a:cf:ce:3a:49:c8:5f:15:
5e:14:1c:95:ae:15:0e:11:2e:24:1d:f5:5a:5f:32:2b:25:7d:
ed:23:3e:be:bf:5e:a5:28:88:f8:20:5a:b2:cb:b9:48:06:5a:
c9:fe:12:2d:04:3d:48:a8:eb:ce:2f:0f:62:91:ee:a3:11:ec:
9c:1f:a9:7a:28:94:cc:70:f6:40:8d:b9:d8:16:65:b9:d5:bd:
e4:a5:b9:0c:e0:a5:fd:1a:0e:3f:8c:e6:d5:20:df:f2:23:76:
88:23:04:70:a5:a3:18:a5:ef:e0:1d:83:14:47:b6:da:ce:22:
4e:a1:3c:3f:b5:d2:07:69:cc:1f:d2:d5:0d:a8:1b:af:90:dc:
d4:de:e8:52:87:b1:74:a4:2d:e3:e5:7f:f1:20:32:3a:fb:3a:
3e:f9:cb:97:78:e5:c3:b0:b0:4f:20:b0:98:e1:77:6d:a6:f4:
1d:0e:19:25:06:68:11:32:77:21:9c:59:59:45:dc:07:a7:aa:
c7:07:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:09 2025 by rpki-client