Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
File: c3gm9t2lQDSR5IfKTut9fNdvoT4.mft (raw, json)
Hash identifier: IKteMOXJR8nbo7afcQfK2jQzGcUAzGupBbZ7nfH9y88=
Subject key identifier: C9:64:72:32:39:BC:32:F0:CA:92:4A:99:79:10:C1:27:E6:5D:1F:7A
Authority key identifier: 73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
Certificate issuer: /CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Certificate serial: 019A71EEA804C05A59D6DFB93014B6EC46F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
Manifest number: DA
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: c3gm9t2lQDSR5IfKTut9fNdvoT4.crl (hash: F7q1T8n9aFf+4V+TqP+0cIJniFuaH9iyCvsWJCPZz/4=)
2: mazPj7cdRL1I04pr_YJNNETJccU.roa (hash: 3OsJUxkMYMMTIuXPRezuzfI9FZxZPBdn1qkD0aOjzGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a8:04:c0:5a:59:d6:df:b9:30:14:b6:ec:46:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=c964723239bc32f0ca924a997910c127e65d1f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:52:b2:02:9d:fb:6a:bb:de:ca:59:a5:51:
af:47:f4:3b:af:7d:34:29:16:b3:70:6a:ae:95:90:
f8:dc:b3:bf:a8:30:4e:c1:79:26:de:8c:6c:17:dd:
e3:4f:c6:f2:c2:c3:81:3e:69:a8:46:35:44:8f:8e:
5f:85:58:c6:07:f0:34:42:76:c2:c6:05:38:5d:31:
e7:38:f5:65:51:cf:7b:bd:6a:83:24:65:43:40:df:
71:fa:52:11:ac:3f:09:15:f3:7c:60:4d:58:44:f4:
1c:65:b8:86:c9:77:a2:de:6d:66:9d:30:9b:38:c2:
27:83:ad:d6:fa:94:0c:a9:d3:df:d5:8d:4e:ae:70:
5a:0d:fb:f3:13:6b:23:85:4c:9b:4d:52:6e:3e:2a:
21:d5:da:51:33:92:9e:ce:7a:e2:9f:28:71:3b:ca:
fd:71:e0:27:af:ac:7a:20:5c:b6:56:ac:f7:a2:03:
0d:0e:27:dc:5a:73:f3:de:a9:b5:06:1a:e0:eb:88:
8b:97:25:1d:88:5b:8f:22:97:b9:57:c6:0f:9b:43:
50:33:6e:f5:1e:29:f9:cc:d7:4d:a4:19:f4:25:6d:
3d:8e:ed:f7:2c:68:ba:8d:93:af:5f:e2:86:57:e4:
b5:9b:02:c2:a3:ba:4f:69:53:95:91:72:5c:bd:c8:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:72:32:39:BC:32:F0:CA:92:4A:99:79:10:C1:27:E6:5D:1F:7A
X509v3 Authority Key Identifier:
keyid:73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:72:48:b4:c7:15:50:cc:63:02:a1:7d:71:50:63:c6:a1:fb:
cc:38:44:96:af:30:5d:bc:0f:6c:30:17:34:8d:75:23:ab:94:
71:06:bf:5d:81:d9:ab:4f:65:4d:15:49:31:f1:10:92:69:29:
c1:78:fc:dd:3e:d8:97:5b:cb:03:2e:71:a3:ed:03:77:45:95:
16:7b:79:fe:9f:95:ee:73:f7:71:b5:c0:59:c8:49:d9:c9:28:
60:55:98:04:a4:3a:fe:91:7c:d9:48:18:6e:11:47:40:4f:45:
a4:90:98:39:9e:2b:01:43:2f:bf:f8:15:48:4e:33:97:41:e5:
ce:45:46:82:77:8a:3a:97:99:d8:80:1c:5f:c7:5b:3d:cf:d4:
c1:fc:a5:db:ef:ad:20:5c:b9:ab:98:b0:e6:26:49:16:56:bf:
dd:2d:30:2b:bd:93:8d:08:4c:f1:a8:56:51:09:e0:5b:e8:96:
03:b3:c3:86:b3:4e:35:3a:3c:ac:a1:9b:f6:01:e9:f7:9a:20:
8a:fd:be:90:36:97:52:b4:db:ab:d3:35:e5:54:68:b5:dc:57:
66:5c:35:3a:ee:9a:e0:c3:02:75:f7:0b:30:c9:15:be:11:80:
29:37:b1:fd:b7:6a:d1:a0:08:45:7c:7e:eb:33:41:67:4e:b2:
8b:13:ea:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:05 2025 by rpki-client