
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json)
Hash identifier: uL7w7ZWimz8azJUcFbUz+ofQ4gQHsms6Fm5W55kePgQ=
Subject key identifier: 57:EE:7E:2B:76:90:12:C8:58:61:5B:66:61:81:FB:8E:BB:0D:1D:91
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial: 0199228CE11E00ACFCD828E45E63A1080E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
Manifest number: 49
Signing time: Sun 07 Sep 2025 05:01:21 +0000
Manifest this update: Sun 07 Sep 2025 05:01:21 +0000
Manifest next update: Mon 08 Sep 2025 05:01:21 +0000
Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: KBvSV4zHDQTBI91V0aANKtWk6/cHGfaKj+q8+c+Gbts=)
2: mIMZrEW18-_5KGhaxhfyAse2jaU.roa (hash: 6Qvzu2ngRsyEUpj0qpA3Dkp0CWaU4iSnWXbsJngfWw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e1:1e:00:ac:fc:d8:28:e4:5e:63:a1:08:0e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Validity
Not Before: Sep 7 05:01:21 2025 GMT
Not After : Sep 8 05:01:21 2025 GMT
Subject: CN=57ee7e2b769012c858615b666181fb8ebb0d1d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:89:db:ea:cb:47:4a:ad:e4:38:1f:13:15:
64:ad:78:c6:40:0c:82:db:7d:52:20:6e:7f:6b:1a:
03:21:3b:12:bb:e4:d4:60:f8:bd:4e:8a:b5:cd:f8:
85:e6:6e:de:03:b7:e2:2c:82:f9:86:53:63:ec:fb:
35:61:5f:6b:91:d7:6b:53:70:d2:01:56:ab:66:d5:
af:3c:e7:cd:1d:fa:58:3d:30:8c:c0:35:33:54:ff:
e6:29:73:36:d4:1c:00:17:bb:e3:9d:58:5c:4e:2a:
e8:95:16:3b:f7:04:9f:a4:bb:49:2e:2e:c8:30:5c:
42:8b:9a:f1:ab:36:43:4b:74:8f:50:9e:3c:41:3b:
7a:c1:fc:80:05:ce:27:7e:07:2f:ba:51:94:1e:33:
f0:49:65:17:57:28:10:6c:d8:48:c4:72:10:d5:f6:
4a:2d:3b:fd:8c:63:79:b4:56:6d:b8:7c:6f:17:eb:
d9:84:23:94:40:a8:ff:e3:a8:9b:dc:72:44:0b:96:
66:9d:43:0f:93:58:eb:8e:3d:53:c2:07:6e:a7:45:
f0:52:f4:4b:55:18:77:5e:c2:fe:39:47:8e:a4:26:
05:42:39:b5:75:6b:64:de:f7:07:4e:b9:50:9c:a6:
96:5c:2c:98:97:18:0e:9b:1a:18:fe:e7:50:95:0f:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EE:7E:2B:76:90:12:C8:58:61:5B:66:61:81:FB:8E:BB:0D:1D:91
X509v3 Authority Key Identifier:
keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:80:77:55:13:7b:e5:7c:58:93:58:bf:e0:4b:be:a5:e5:ae:
e7:7e:db:dc:05:db:82:50:9d:a3:03:83:9c:d2:08:5b:73:25:
1b:81:46:29:92:fe:11:8e:f6:b0:e5:01:83:aa:b5:51:71:08:
27:68:d8:8c:f8:7d:6f:17:7d:53:ad:85:3a:64:15:4c:f4:3a:
fc:1a:29:32:cf:dc:96:2f:41:dd:c5:63:ff:ef:f9:00:df:d1:
44:8d:e5:ca:77:61:35:2c:c4:a0:ed:c3:e6:fd:08:60:46:7c:
9e:45:ff:c9:19:20:e7:69:cb:e2:23:84:1e:cb:8b:51:ff:82:
e2:d9:2e:03:4b:9a:0f:7c:74:df:cb:19:22:e7:f1:69:a5:10:
34:17:95:31:93:74:ba:0d:78:0d:46:21:f4:73:a3:04:66:e6:
f6:32:e4:27:fd:19:bf:ea:6d:ac:d6:6f:90:97:5e:47:90:37:
dd:b1:7f:cc:f7:b4:5e:13:d4:2b:ee:7f:4a:c8:1e:f7:eb:4e:
5a:2b:1c:89:64:8f:49:93:06:9a:46:50:16:b9:00:7a:29:9b:
06:aa:cb:ac:75:ed:bf:a4:d1:a8:23:c0:cf:a2:f7:38:43:44:
89:34:ad:8b:cf:cf:47:02:96:e2:fe:f3:67:fc:fc:33:9e:b3:
2c:7f:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:46 2025 by rpki-client