Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: vA7noJZSY7H36B7aZz/0hboopwcipjljg1MLVyQ1MCs=
Subject key identifier: 61:F6:31:5E:CD:51:BC:3B:82:1C:91:D9:D3:23:98:7F:4F:8D:EA:75
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019A236534699C48FA8F4040C4A892E68A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 02:00:26 +0000
Manifest this update: Mon 27 Oct 2025 02:00:26 +0000
Manifest next update: Tue 28 Oct 2025 02:00:26 +0000
Files and hashes: 1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: R1sfc/6k+1/0LG6etvnbXdn5wKVbUx9ShXSEp7UbLAY=)
2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=)
3: jP0oG4-lTwdPgvwQsai3xzsKBUA.roa (hash: cwxrU32A7FjEaD6Xb0+naWkVMI0iVDnV1C3ohgsG2Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:34:69:9c:48:fa:8f:40:40:c4:a8:92:e6:8a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Oct 27 02:00:26 2025 GMT
Not After : Oct 28 02:00:26 2025 GMT
Subject: CN=61f6315ecd51bc3b821c91d9d323987f4f8dea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:f5:23:b4:0c:3c:3b:49:7f:c1:2a:c5:e9:
70:37:8f:c7:91:11:18:68:c5:70:ea:30:11:4b:9b:
d7:96:1b:95:39:2c:f4:7a:40:b1:a7:27:39:20:14:
77:06:25:fa:42:46:bf:61:49:6e:eb:06:e8:9a:10:
e0:ec:0a:06:44:24:d3:ca:c4:d2:cd:e0:ef:27:c4:
33:82:3f:ef:6a:51:1d:7c:74:67:8e:9c:42:9f:9d:
1a:96:c5:6e:5b:61:7d:46:e2:21:ec:93:9b:1c:97:
bf:3e:e9:11:5d:b1:d1:9f:8b:96:7f:52:30:34:56:
83:24:cc:42:e1:8e:42:8c:7c:fa:f5:5e:b9:0f:ef:
b3:4a:6e:13:91:14:9e:69:22:7f:19:9a:07:c9:e4:
bf:c6:70:75:ee:50:ac:b1:8b:87:1d:fc:a3:f9:45:
7a:0b:f4:8c:1f:86:9a:e7:d5:6b:d8:8c:55:f6:96:
85:ce:00:f2:a7:12:3f:1e:26:f1:3b:9f:ff:7d:fd:
2d:7a:2d:6b:ac:7f:8a:05:a0:82:5d:9e:a6:f8:0c:
02:04:b8:2b:6a:8f:25:5f:dd:d9:c8:3d:12:7c:40:
68:da:cf:e5:4a:a0:c8:e3:6e:9a:fc:d6:5a:71:90:
7a:0d:5c:94:c5:52:7f:f2:a4:ee:69:d1:6f:88:b2:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F6:31:5E:CD:51:BC:3B:82:1C:91:D9:D3:23:98:7F:4F:8D:EA:75
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3a:ee:28:02:7c:8f:4e:e9:c6:bb:c9:42:3c:11:7f:e4:98:
28:6c:6a:a2:a8:7b:6e:27:d7:ca:25:5f:37:8d:22:25:c7:b9:
59:d6:4a:1a:0a:17:45:b1:59:38:cc:a0:3a:56:8e:fa:f8:a0:
91:db:4b:26:45:6f:ce:8a:77:a3:94:c1:73:63:f8:76:0a:5f:
fe:3a:8d:5b:c0:64:04:04:35:56:97:ce:4f:bc:31:5a:ca:0c:
75:1d:0b:3f:c6:69:00:d8:15:a8:b1:96:a5:2f:a0:ca:b4:70:
61:76:8e:79:f8:9a:fd:77:12:09:82:56:fc:86:51:54:4d:23:
ac:03:b1:7d:63:46:7b:17:6c:d4:1f:77:78:a7:ea:38:06:9d:
62:55:d5:3c:96:3f:7b:fa:ce:9a:88:e6:73:ae:92:16:b4:74:
28:3d:19:78:6c:cc:6b:16:ba:26:72:95:ce:1b:02:42:2d:bf:
79:a6:a8:0c:5e:e6:5b:58:c8:4e:26:1a:f2:7c:55:f3:5b:b7:
f7:40:2a:b6:a8:5c:20:91:b7:47:71:73:53:32:47:15:b2:fd:
22:4d:a5:4d:99:71:66:d0:55:37:30:8f:3f:d3:07:05:12:60:
20:ff:22:7b:8e:b1:2e:f3:c5:ec:cd:1d:fe:b2:62:7e:2c:4e:
d6:e9:01:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:31 2025 by rpki-client