Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier: syrWOUjwu388NPe8P51zxLT2LwYrPpPOGQEqfKrb85Q=
Subject key identifier: 17:68:DA:4D:25:E1:C6:5D:D0:64:11:EC:59:26:D3:37:95:F9:0F:41
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial: 019A725CEE1333676FC5771219080A9EEA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 10:01:24 +0000
Manifest this update: Tue 11 Nov 2025 10:01:24 +0000
Manifest next update: Wed 12 Nov 2025 10:01:24 +0000
Files and hashes: 1: OlU6obIQjael3LSg0ssh_4uTiio.roa (hash: PEk/sjzeYnoi97rfsFTmYB012K4urx+cqdtXV/YTu3g=)
2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: /dOP7Yjlz4tclQzTdYhWL7rjsZhD+d/bGdiG/hSCLxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ee:13:33:67:6f:c5:77:12:19:08:0a:9e:ea:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Validity
Not Before: Nov 11 10:01:24 2025 GMT
Not After : Nov 12 10:01:24 2025 GMT
Subject: CN=1768da4d25e1c65dd06411ec5926d33795f90f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:7f:18:30:90:be:41:2b:a2:73:0c:82:89:
7d:9a:f0:24:ac:39:e3:d0:65:34:17:b9:92:c1:7c:
ea:bd:fb:f5:75:66:86:ed:92:e3:2c:8b:88:77:26:
ef:1a:99:af:17:27:46:db:a4:1e:bc:e7:67:aa:81:
ed:29:f2:46:e0:0b:07:93:5b:8a:43:46:cc:c0:ba:
62:d8:de:16:cc:f4:8d:93:52:96:2a:d6:cd:98:4d:
43:02:a0:2b:06:da:b9:ea:20:fd:60:eb:f2:53:65:
a7:52:2d:90:40:ae:d8:2c:47:5d:57:78:5d:a5:3d:
fb:88:31:90:14:06:e0:08:74:3a:e6:18:5b:af:1c:
7a:48:f0:a1:92:ea:04:97:72:2d:3d:c0:15:1d:7b:
b4:d2:a5:37:3c:f2:41:01:14:dc:b0:e5:04:64:61:
62:49:64:d3:0d:a0:86:7c:88:a6:74:53:e1:a9:95:
47:cc:51:8e:09:08:28:09:af:0d:07:1d:ed:3f:68:
af:58:ff:28:1c:a7:f4:52:89:fb:15:eb:71:9d:dd:
8b:19:74:f6:a7:48:9a:4d:2d:7f:bc:a8:6c:f5:9c:
cf:d1:4d:09:43:50:f8:b0:ef:73:8e:2c:0f:03:d5:
a4:a3:29:d2:5e:a5:74:ef:ce:9c:d1:00:14:6a:b0:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:68:DA:4D:25:E1:C6:5D:D0:64:11:EC:59:26:D3:37:95:F9:0F:41
X509v3 Authority Key Identifier:
keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:30:16:89:94:eb:88:9e:3c:b2:d2:a9:9d:52:f3:16:c0:ba:
95:c0:d7:d8:1d:c6:ea:18:65:47:ce:2d:3e:33:63:fe:3c:a8:
f4:f3:55:06:73:e5:4e:3d:c2:dd:85:5c:ce:dc:8a:f2:98:c8:
10:1e:26:2f:71:14:0d:d0:4d:44:65:fc:bb:7e:e6:24:48:4c:
57:d1:db:c2:e1:29:26:e3:95:89:e1:bf:c1:3c:29:ff:cb:7d:
99:61:c2:af:9a:19:f4:9b:4e:4e:6a:80:b1:42:28:a2:0f:17:
24:17:34:41:91:d1:c4:f2:17:84:d8:ae:f2:22:fc:7e:a4:26:
fe:e2:76:cf:53:24:62:1b:82:f9:e8:7b:ce:e7:bd:42:eb:ef:
e7:58:55:85:74:2b:48:2f:fe:15:d7:d3:68:1d:38:c3:cc:87:
f0:e7:6f:6a:07:cb:e8:24:ef:95:54:9f:3c:a9:ff:91:d9:ac:
9f:f0:08:c2:bd:c1:96:3e:b7:7e:63:1f:68:92:73:2a:9e:f0:
ea:0c:b6:88:5d:ba:af:9b:62:3a:e8:bb:ac:ec:f5:1a:01:cb:
b5:7e:5a:53:a9:70:d3:63:09:e2:a0:8c:a6:94:de:e4:52:9a:
8d:65:c9:31:1e:91:b8:c8:96:8d:41:7e:4b:17:09:ab:ab:eb:
9b:af:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:06 2025 by rpki-client