Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: UOB2Sym/9WJkeWvTD8yo1Ot1j7iQNt7w3IsGMTOdz3M=
Subject key identifier: 68:68:B4:86:53:2B:1E:71:0F:EF:BB:60:D5:ED:1D:43:8C:9E:3E:E2
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 019A7301A35242E5A3AF0544541B26F03543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 059D
Signing time: Tue 11 Nov 2025 13:01:18 +0000
Manifest this update: Tue 11 Nov 2025 13:01:18 +0000
Manifest next update: Wed 12 Nov 2025 13:01:18 +0000
Files and hashes: 1: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: nbME+LYGh2lwFD1wLAqR93J5+7Rkk2znNdPy7rLuz4Y=)
2: Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa (hash: mvzboSXfNbv0bSrCewCz7JJVKGgAnpVL6t7bOyNmT+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a3:52:42:e5:a3:af:05:44:54:1b:26:f0:35:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Nov 11 13:01:18 2025 GMT
Not After : Nov 12 13:01:18 2025 GMT
Subject: CN=6868b486532b1e710fefbb60d5ed1d438c9e3ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:51:0a:cb:b4:79:2d:67:f0:f9:ef:61:27:
d2:5d:f9:26:0d:0d:28:3b:44:cf:d1:04:38:3e:86:
90:07:98:37:84:58:2e:41:c3:21:f2:b3:b9:4f:2e:
da:98:5b:ee:b5:a8:f4:ea:90:62:4f:9c:5a:a0:3b:
5e:1b:f8:d4:0b:a3:27:f3:ce:62:3d:10:b5:3a:6d:
ca:c6:2c:17:34:70:e8:dd:ff:7e:53:1c:bc:05:3c:
df:cf:83:da:ad:a0:ab:b4:c3:fd:06:bd:52:75:f1:
67:23:0d:a1:d0:81:d7:a3:83:39:76:6f:df:42:0c:
a1:27:f6:ce:5d:e2:17:78:1b:fb:2e:40:df:ef:df:
39:7b:35:77:61:59:55:41:cf:7c:ed:9c:d3:81:67:
3f:50:ec:6b:63:6a:43:58:e6:54:cd:8f:f3:5d:4f:
66:8d:d1:12:c5:fe:88:a7:a2:7d:09:86:c9:f1:38:
d6:43:29:0f:d8:41:a1:d7:bb:9c:cb:4a:7d:1a:c3:
25:b8:51:86:a5:6e:76:67:eb:83:ea:65:2f:b5:71:
4e:2d:66:cb:c6:9e:f3:a3:0c:bf:7e:09:dd:6a:d1:
c3:bf:f6:e3:e8:a2:82:2a:fd:a3:96:60:6c:5e:17:
cc:63:3c:74:ec:37:0b:8a:b0:c0:38:0b:0f:36:31:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:68:B4:86:53:2B:1E:71:0F:EF:BB:60:D5:ED:1D:43:8C:9E:3E:E2
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:da:8d:a1:1d:4e:48:23:82:ed:7c:a2:cb:8a:59:e1:f9:cb:
82:30:98:77:99:14:0c:76:da:4d:a4:ea:53:9e:f0:c2:0d:50:
35:af:ed:34:64:08:fa:65:16:5d:d3:5e:c5:c0:8f:44:c6:5e:
70:15:0b:ef:10:be:21:48:a9:66:a2:33:5f:ad:21:ca:4e:d2:
de:ac:6e:74:11:77:a9:06:53:e8:43:76:a5:08:04:80:3b:90:
46:27:cb:33:88:dc:8c:66:a6:e7:ed:74:ed:74:ec:94:c8:91:
45:d0:18:44:91:7f:70:3e:34:32:8d:b5:8f:63:1a:27:89:98:
b1:6c:2c:70:5f:80:19:fa:28:8e:6f:97:dd:df:52:1d:d6:a2:
b6:ac:2e:c6:f0:7c:18:ff:8d:2e:90:18:6a:01:16:d3:3f:db:
ef:d5:f0:f1:9f:27:ae:47:71:99:31:dd:bf:27:c6:17:ff:bb:
7f:d0:43:2e:72:af:9e:61:97:83:b2:04:3a:fb:c4:bf:2e:d7:
ce:45:be:e0:61:52:8f:a3:c1:4f:a4:e9:cd:b8:f1:51:89:9c:
23:58:b8:e8:da:ad:67:07:ab:ef:c1:88:5d:8b:e8:01:be:d4:
91:42:cd:a0:05:93:d7:b0:3d:f0:3c:0c:f0:87:4e:52:cd:c8:
57:52:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:38 2025 by rpki-client