Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier: hmQhgISgLUX1lWSk9PNTc1YAkT/t+yd+cAiOb5zM76g=
Subject key identifier: A1:F4:39:22:F0:89:3F:50:A7:11:24:0E:54:C8:E1:90:5E:DF:1A:8C
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 0199C6B353650DF9F1EA810A6B2E35B1619A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number: 1653
Signing time: Thu 09 Oct 2025 02:01:05 +0000
Manifest this update: Thu 09 Oct 2025 02:01:05 +0000
Manifest next update: Fri 10 Oct 2025 02:01:05 +0000
Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: mPttLPLuYXtaMTgOuI8D38g3ChCCyxt8Y5JlOLn8LzY=)
2: sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa (hash: Ua22PTmfzyT5DTnVC3xgijxYiy9LNm1nh8SzeYUTwDc=)
3: sZiCl9lv80fsle91xuU3_BKnt_s.roa (hash: FzOmDkg8UvmI+LcJN7K+9dJBFFV57UBgPrTOJAC0yec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:b3:53:65:0d:f9:f1:ea:81:0a:6b:2e:35:b1:61:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Oct 9 02:01:05 2025 GMT
Not After : Oct 10 02:01:05 2025 GMT
Subject: CN=a1f43922f0893f50a711240e54c8e1905edf1a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:f6:db:e2:92:ac:06:1f:12:87:65:2d:8c:
92:69:df:a6:7f:41:1e:f4:25:9a:3a:99:d1:69:31:
d4:b4:75:f2:b8:87:09:20:fc:5a:f5:16:7f:82:b5:
4e:0f:7a:ae:36:99:91:c8:bc:0a:ad:f4:4a:ac:01:
c5:4e:9d:07:be:a2:a8:0b:bf:63:dc:53:a0:a4:ec:
c0:fa:37:e9:f8:0f:1c:38:86:19:6e:69:74:99:e8:
a8:13:d5:0c:b7:dd:b2:bc:27:9b:4e:2b:c6:d3:df:
8e:a2:d3:a7:c3:2e:1c:78:63:eb:1d:20:b8:79:95:
54:4c:0a:35:39:47:d3:80:c0:12:02:80:4d:45:53:
52:fd:1f:5f:b1:f7:fa:65:52:80:35:87:fe:f6:ed:
2c:56:cc:82:ce:a7:cf:96:30:f4:9b:b1:ce:ba:33:
90:d0:8f:78:83:7c:f9:31:8a:93:be:22:4b:d7:26:
e3:37:f5:9f:d7:ba:f7:27:43:b1:9c:50:62:27:ae:
bb:e7:e7:0d:8a:8d:bc:85:40:49:42:d1:ad:60:10:
f5:7d:d3:29:ed:4a:e2:9a:b2:ae:4b:43:39:32:68:
bf:b0:c1:55:3c:38:c5:a3:36:d9:73:5d:39:c2:6b:
74:ee:b9:45:10:82:26:6d:17:df:b8:a9:19:8f:7d:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F4:39:22:F0:89:3F:50:A7:11:24:0E:54:C8:E1:90:5E:DF:1A:8C
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b3:d6:1b:f9:ff:f7:e6:01:b0:89:e6:6f:d9:70:f0:81:60:
31:88:83:b5:3e:fa:05:e1:90:58:f3:36:12:e7:36:1c:28:b9:
05:5a:52:57:d9:fc:8d:ae:6e:72:17:fb:56:92:c1:c2:98:05:
13:fb:42:be:63:34:ef:de:ef:8a:a5:a3:51:b0:0a:db:af:03:
5c:72:25:0d:52:94:07:44:96:b7:09:74:4a:da:8b:91:77:50:
29:30:fb:4a:af:e1:92:92:59:5c:1a:cd:86:60:0c:a1:c4:54:
fa:53:6d:a2:21:a6:11:da:08:62:6c:d7:0c:a8:ed:06:a6:6a:
96:dd:73:11:f0:f7:21:86:07:28:2c:f4:36:dc:89:b7:96:f8:
53:c9:a4:e5:01:d5:57:ff:d5:09:55:92:e6:fe:ae:a2:06:4d:
9b:60:75:3e:3a:93:20:0d:5c:ef:11:e1:1e:79:0f:e5:2e:64:
8d:1f:b8:b4:4e:63:5c:e5:1b:50:53:87:f9:1b:39:b4:56:86:
f4:7e:b2:0e:5b:26:ff:f5:a1:27:62:0e:2a:7f:de:4e:e8:11:
08:c7:77:5b:a2:bb:2e:98:2c:0b:4c:46:e7:d0:27:ac:da:59:
a5:60:da:9e:8c:5e:90:6c:39:85:cd:6c:4d:68:58:23:3b:9e:
2f:c3:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:17:12 2025 by rpki-client