Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: p3CemxJ/rmNWGDAkk7hRbDHF50kJzjBUP3dew1qh+xI=
Subject key identifier: 28:B3:1F:FB:2B:B6:99:C1:19:A0:7A:19:2E:A4:9A:C7:E6:66:F2:3A
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 019A722621F4B97256BECC59B56C972BDDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: 6kK85zUWwp6cbf4JBNlHqzXMBpQNv3gLxud/Gq/OnTU=)
2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:21:f4:b9:72:56:be:cc:59:b5:6c:97:2b:dd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=28b31ffb2bb699c119a07a192ea49ac7e666f23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:8b:e0:d4:0e:c7:b4:9b:07:c6:9d:87:de:
02:41:66:f7:7c:20:dc:67:d4:90:e4:9b:52:d3:11:
6e:5f:d1:c0:e9:98:45:f4:c9:62:a0:4f:8e:05:8a:
3e:df:37:c2:d6:a9:8f:e4:6f:9a:f3:83:0d:75:b9:
28:e5:b7:56:4e:be:b1:16:e3:af:b9:7c:e2:f6:67:
cc:73:5d:d2:95:e1:08:cc:03:a9:3f:fe:af:43:a5:
fa:ac:63:92:87:7d:9d:56:65:5b:aa:d3:86:60:30:
4b:81:c0:dc:97:86:1a:20:b4:6e:a6:49:ec:5d:30:
0d:58:2a:a9:48:e0:1d:fd:45:35:cc:8e:33:84:d7:
3d:2d:26:31:b2:8d:d7:4b:62:96:f4:81:7c:bb:48:
64:15:49:d3:23:1d:05:82:51:69:6b:39:47:f2:db:
9b:80:d3:1d:7b:8f:1e:ed:23:a5:1c:bd:e6:3f:d4:
9f:31:98:6b:76:b7:92:52:23:fd:f2:b5:31:10:63:
3e:a9:23:81:80:00:e7:d7:48:b3:09:f8:79:d8:c4:
3b:82:5d:66:19:ab:c0:7c:b1:15:17:9e:62:1e:53:
13:e2:11:91:b6:64:fb:c0:ae:4a:2e:7f:5f:d3:6f:
04:c9:a2:88:a7:60:02:0b:0d:53:a5:7e:de:09:a1:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:1F:FB:2B:B6:99:C1:19:A0:7A:19:2E:A4:9A:C7:E6:66:F2:3A
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c3:b5:b7:52:61:5f:fc:5c:e5:78:5a:55:e8:25:04:54:b3:
53:e2:aa:f8:f3:8c:c2:c8:8d:b0:8b:65:db:70:3a:90:c1:d8:
cd:49:27:19:04:5b:81:64:bd:c1:5e:d9:2a:50:fd:8e:81:95:
44:31:f0:c3:09:b1:8f:dc:a3:0f:09:1f:2b:1d:cb:b6:76:50:
88:3b:e1:68:99:84:7c:7f:0d:8f:ab:f1:77:77:72:5e:1f:ea:
72:76:ea:2e:fb:dc:c2:75:6c:13:c1:7a:e5:12:97:e8:94:98:
a3:9a:7d:5b:55:02:dc:c9:0d:e7:4a:1d:a9:42:83:d2:50:60:
af:93:e8:7d:0e:46:8d:6a:8b:cd:a6:9f:86:00:fe:34:8d:e0:
20:9b:f6:32:78:ff:95:56:27:45:7a:b1:8d:10:d6:07:55:75:
95:da:27:2b:9a:22:23:4b:1d:d2:e2:cd:e2:f7:66:20:a8:78:
17:d8:c0:77:d5:83:7a:8e:c6:9d:35:c4:be:30:c6:95:86:1c:
5a:dc:68:7d:1b:e4:78:80:6a:c2:d9:9f:b2:f4:20:51:6c:6c:
e5:3f:fb:de:5b:64:3e:6d:22:e2:ba:d2:02:eb:21:25:70:3c:
b2:9e:6e:4a:34:65:fc:6a:31:40:0f:20:5d:f4:4b:4e:da:8d:
9f:2b:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:09 2025 by rpki-client