Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File: 1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier: Su7kS2u606NCtZzI+w/rznRuxeS/mx5ZfU2Jp0WW4Og=
Subject key identifier: 2E:46:AD:F8:D7:7D:80:B5:DA:61:53:96:F5:A1:56:E0:68:AA:E0:E5
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 0199FB7C8C0B6C34016DD417F35EE17A7878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number: 0CB5
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: oZLiPbDX1ZdFhU2cqRDkdOnmjyS1ymPQzuZcL0ecdnI=)
2: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (hash: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8c:0b:6c:34:01:6d:d4:17:f3:5e:e1:7a:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=2e46adf8d77d80b5da615396f5a156e068aae0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:a8:f5:08:cc:28:69:20:af:39:70:cf:5d:
dc:67:f2:58:42:34:97:ef:c2:8a:7d:4f:e1:44:84:
fe:51:f7:67:20:05:87:98:6f:06:fe:7a:0d:98:84:
f7:bb:13:b2:f7:02:01:57:4a:27:c0:e0:86:61:0c:
01:a2:8d:90:34:ac:94:bd:ea:20:f1:d2:5a:1e:17:
c5:65:7f:a7:79:a5:a9:cb:47:90:81:14:9d:36:05:
a8:8f:17:c2:29:fd:b5:aa:13:2f:34:d7:22:d0:de:
7f:38:25:9a:bc:27:b6:eb:00:02:eb:37:d0:95:1a:
83:db:7c:d8:7c:97:b6:ca:dd:96:01:29:f9:c3:62:
07:2b:32:9b:47:db:08:58:d5:5f:23:17:29:55:c9:
1a:7d:05:6c:6a:b0:8d:ab:fd:ae:74:0b:63:d4:83:
e0:38:e7:4d:cc:57:8e:13:14:0b:36:d2:fe:55:78:
f2:bb:56:ce:70:b7:fe:fd:e4:6b:19:20:7b:ec:29:
dd:b7:bf:f4:c4:6b:3d:63:f9:23:36:c1:a4:29:e6:
79:7d:99:54:89:d6:e4:d0:06:aa:98:ff:01:92:65:
4d:4e:50:61:12:73:e8:a9:4c:4e:c2:59:24:96:25:
72:03:aa:2c:3d:a7:a7:a0:f0:7d:c3:cf:08:4f:25:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:46:AD:F8:D7:7D:80:B5:DA:61:53:96:F5:A1:56:E0:68:AA:E0:E5
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:31:aa:81:81:36:de:8a:f6:2b:f8:5c:5a:f0:cb:ce:27:f1:
58:25:47:d8:6e:a7:88:ef:5b:14:b9:3f:eb:f8:a8:df:c3:63:
d2:10:1c:f2:ae:24:28:a3:5d:33:ad:2d:75:38:b1:06:48:a6:
d4:e5:e4:f2:19:3b:0b:1b:61:9f:4c:d8:85:31:ed:69:e7:98:
e6:ec:69:47:a0:11:19:59:2c:ae:6c:8f:3b:b8:96:94:6a:86:
de:85:5c:f2:0c:61:43:6d:53:77:94:da:f4:c6:a0:95:3a:9a:
ce:23:58:44:df:2e:b4:2a:90:ac:95:75:29:f9:e3:ae:4f:c4:
82:59:c1:78:cb:2f:38:e1:b9:f1:45:6e:fc:90:bc:d6:ad:73:
a1:d4:80:b0:12:8f:d7:f1:14:f4:21:0b:c2:73:6f:7a:6a:18:
9e:10:bf:aa:11:aa:be:e3:fd:03:23:12:6b:15:9b:c8:7e:27:
9b:d3:cc:8d:2e:03:09:0b:11:96:8b:d6:b2:ce:1b:b2:3e:21:
6f:66:a6:ca:31:ac:79:17:c5:2a:6c:7f:e6:a6:c1:a6:e5:58:
95:3d:ee:d5:87:28:f8:14:35:3c:f2:2f:ca:6a:d5:c6:91:74:
af:b0:22:a3:39:a6:5b:8d:7d:d3:97:50:d5:d9:5a:d7:ab:f4:
46:fb:2e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:01 2025 by rpki-client