Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: ZdBeL9UfX0aJDeppp/hxlOpYtvWSBTXvGhma0jauo3k=
Subject key identifier: 3B:E9:A3:AE:F1:84:E6:8A:9E:AC:E5:6F:AD:D1:B4:E5:70:21:B4:23
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 0199228C80E49367C31A49611653A568F21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:00:57 +0000
Manifest this update: Sun 07 Sep 2025 05:00:57 +0000
Manifest next update: Mon 08 Sep 2025 05:00:57 +0000
Files and hashes: 1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: 8+iHoSEUvORBIIsSpZKoyMCm5ppWS1S+5QF383iNzLU=)
2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=)
3: jP0oG4-lTwdPgvwQsai3xzsKBUA.roa (hash: cwxrU32A7FjEaD6Xb0+naWkVMI0iVDnV1C3ohgsG2Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:80:e4:93:67:c3:1a:49:61:16:53:a5:68:f2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Sep 7 05:00:57 2025 GMT
Not After : Sep 8 05:00:57 2025 GMT
Subject: CN=3be9a3aef184e68a9eace56fadd1b4e57021b423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:36:9b:4a:fd:41:87:1c:90:07:16:7c:57:
fd:5f:95:af:61:72:52:b6:a1:44:b4:60:61:36:ef:
a4:57:f2:ee:03:d5:10:3d:9c:14:a8:57:09:e0:51:
60:b3:02:30:6e:04:e1:51:92:99:b7:2f:16:c3:09:
df:03:69:f3:a1:9d:b3:27:9b:30:ff:7e:f6:37:1a:
fd:0d:4c:e1:14:34:fc:d9:f9:0e:31:a1:71:79:8b:
9e:bd:c7:3e:99:be:be:a6:1a:ab:66:ec:2e:29:de:
fe:6a:61:0f:3f:03:72:38:6c:6a:a1:ca:78:8e:86:
0e:9b:9d:20:61:ae:c4:24:ee:58:58:89:5c:03:d9:
8f:65:8f:78:b8:5a:15:05:fe:17:87:39:f2:62:60:
ea:1d:5b:69:80:65:df:d2:90:8f:b2:bd:0f:26:81:
10:00:9a:6b:0f:d6:3f:a3:31:72:98:be:9b:0a:ba:
e8:81:5c:5c:97:eb:64:ad:ed:21:85:44:b1:ad:9f:
90:59:3e:58:b4:9b:17:83:3b:da:c2:1b:5f:9f:c8:
0c:bb:2c:66:1e:95:c9:b7:24:12:fc:e3:35:44:ba:
36:c9:87:ca:40:d0:d7:2e:bf:b8:96:a5:b3:bb:e5:
02:03:ee:72:4d:0a:2b:ff:46:a6:6f:97:64:77:2c:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E9:A3:AE:F1:84:E6:8A:9E:AC:E5:6F:AD:D1:B4:E5:70:21:B4:23
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:0f:cc:80:c4:a8:08:1e:71:85:13:27:a9:d4:79:ee:f8:79:
0c:15:4b:67:dc:75:17:ce:ba:39:9e:1f:ab:36:29:ed:7f:2d:
63:4d:fb:d5:e8:cb:1b:c7:8e:95:7d:c6:50:15:3b:63:9a:c5:
d6:1e:e5:96:e9:eb:34:c1:5d:27:b2:9b:33:b7:b3:91:f0:ec:
8a:4a:86:f1:6d:fa:cc:4c:6b:90:aa:24:7a:ab:9c:44:3b:bf:
f6:48:f4:a6:1d:cb:77:ac:d4:4f:3c:4f:f8:c0:eb:2c:0a:95:
e5:f1:d5:fb:da:20:1a:d6:45:d3:a8:a6:ae:4e:f1:63:8d:3f:
71:56:83:dc:3c:21:58:65:0c:90:2d:69:5e:87:11:6e:10:84:
a2:06:a1:db:dc:85:e7:0c:a4:e5:f3:e5:81:c3:6d:60:26:fc:
12:f2:29:e4:30:99:09:76:b7:7b:9e:3c:0e:4a:fa:99:86:75:
97:e1:9f:dc:ce:1d:c8:6f:db:e4:85:4d:92:ed:79:28:10:6c:
40:a1:38:88:39:93:56:a6:1f:1a:69:9f:58:f3:e2:18:1d:43:
67:f7:9b:5e:64:20:80:90:ad:54:01:e5:64:01:c2:5e:0b:49:
9b:f6:80:60:59:86:95:98:56:a0:d4:85:9e:32:a8:02:df:7c:
ee:ee:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:57 2025 by rpki-client