Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: 4DCDcuk7Uj0WCoaHoZ/FampVmS3xv1dHWIdkNlfVAD8=
Subject key identifier: 80:86:D3:72:98:0E:7C:F9:79:C2:3F:75:61:8A:E3:BB:02:05:FB:DD
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 019A71B7A3EDDC59DB51AAAD4A770514C449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (hash: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=)
2: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: sX7Ll0yqftpq1tJKVZyp36qXH+yzta6+xgTMa927AY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a3:ed:dc:59:db:51:aa:ad:4a:77:05:14:c4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=8086d372980e7cf979c23f75618ae3bb0205fbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:94:53:8a:43:3e:97:1e:83:c1:b7:0a:71:
1d:4f:aa:73:b8:21:ca:6e:ea:1f:b0:31:64:a5:30:
ed:f1:bb:87:cd:ab:bb:a4:b1:4a:fa:02:68:22:2b:
d3:25:ad:09:58:14:3e:e2:36:b4:ef:9b:f2:f0:12:
23:d2:b0:99:9c:4f:b1:2b:63:bf:e3:25:29:17:50:
d0:fc:6e:bb:f7:72:20:16:69:92:a6:ce:18:71:48:
b3:a4:11:00:c1:c3:86:a2:ae:96:fd:46:28:e7:7d:
64:98:7f:4b:c6:61:d9:fa:44:84:f9:0a:8a:f8:c3:
44:99:17:93:52:52:a3:bf:82:24:41:7f:43:85:e7:
eb:b3:4a:be:d8:b8:77:14:86:ae:81:43:2b:18:5d:
f0:e8:5e:3a:7a:a4:5a:1e:da:ac:a2:f7:15:d6:89:
21:68:86:ab:39:df:8a:fd:79:08:7a:8f:8f:eb:96:
b4:8f:7b:02:42:b6:de:e5:57:31:ed:a5:eb:5b:3e:
a8:d4:4c:5c:d8:56:5e:fe:28:eb:c3:5c:ce:6f:d6:
aa:25:76:e6:6e:fe:37:0e:23:94:d4:8a:60:6f:77:
d5:60:a2:92:15:b8:6e:c4:aa:28:f5:36:31:33:d6:
5f:d9:d1:32:b5:02:77:26:ba:6c:9d:c9:f5:5f:d3:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:86:D3:72:98:0E:7C:F9:79:C2:3F:75:61:8A:E3:BB:02:05:FB:DD
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:00:86:e9:66:8c:41:64:d8:86:00:c6:f4:71:5c:05:bf:f3:
4b:cb:41:3d:06:89:44:57:7e:41:82:fa:48:d9:b0:4e:ab:2e:
20:94:1c:ea:29:3f:8a:d8:6e:d0:ad:54:8e:f9:72:91:5b:3b:
82:45:ce:db:2b:d0:bc:5e:86:ca:82:8e:07:f5:33:fa:0f:07:
f7:57:16:1a:51:91:8b:a0:54:74:fc:47:9d:8b:d1:af:4e:a2:
c8:fb:e4:da:1c:41:62:b1:ce:e7:58:6a:3e:c7:9e:a2:46:be:
ad:63:03:82:3e:8c:4b:6e:3e:05:f2:19:45:ce:ff:32:87:90:
4a:e2:66:c4:79:a6:ff:56:cf:7b:48:e7:d7:83:dc:22:e6:d4:
57:4c:24:ae:a3:cd:8e:3f:cc:7f:ba:45:46:d5:33:60:ce:7a:
90:54:70:7a:5c:1b:ce:a7:a3:e2:78:fb:69:b7:9f:d3:1d:92:
98:8b:78:ea:c7:e1:7b:05:c0:d2:d5:ed:da:7c:ed:64:d8:3b:
7b:05:05:69:a7:ad:f9:29:09:e5:5e:bc:c6:78:4d:fb:24:61:
30:ea:31:40:40:2a:3c:6b:87:e0:43:ac:56:67:85:dd:00:41:
43:63:c8:37:fc:9d:b1:fb:83:53:45:5a:f5:50:af:11:ab:17:
ea:47:17:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:53 2025 by rpki-client