Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: 3TBfvdzPtsqBBwtwneR1wDwBz3ZUX8wLg5FnF8mqt0U=
Subject key identifier: 0A:89:3D:20:32:21:03:B9:B9:7C:73:98:0E:A8:92:45:0A:21:26:98
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 0199FE47629BD647E56E1C018880B2A77D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 141C
Signing time: Sun 19 Oct 2025 21:01:55 +0000
Manifest this update: Sun 19 Oct 2025 21:01:55 +0000
Manifest next update: Mon 20 Oct 2025 21:01:55 +0000
Files and hashes: 1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=)
2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: kvimSoca8UPnxRd62+UhQ8S78Jr3lMsb1Ck+qkcfqHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:62:9b:d6:47:e5:6e:1c:01:88:80:b2:a7:7d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Oct 19 21:01:55 2025 GMT
Not After : Oct 20 21:01:55 2025 GMT
Subject: CN=0a893d20322103b9b97c73980ea892450a212698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:91:b8:9a:ba:10:51:72:3c:a1:de:3c:8b:
ec:dc:c9:19:ac:16:92:d5:42:19:f9:81:2e:66:55:
ca:25:60:3b:77:05:a4:a1:47:a2:b2:1f:66:33:72:
93:3b:29:11:65:fc:9a:f9:6f:38:d6:b7:1d:82:2e:
cf:6a:23:1e:d1:18:2d:f8:11:9e:40:2d:f2:52:32:
74:23:e5:7d:5c:4c:03:c3:45:fc:69:e5:ea:6b:5b:
04:de:5e:77:ea:99:d5:6a:20:29:97:56:99:90:48:
ed:95:19:81:63:85:ee:52:88:49:91:5d:c7:f7:b6:
b4:e8:42:b2:d9:b2:8b:2c:d7:6f:5d:cb:2b:07:67:
06:1f:b4:c6:0d:3d:ec:83:44:34:f1:3e:37:c0:55:
7d:1b:21:53:00:41:fb:0f:5e:35:08:7c:68:cb:c1:
3d:a9:f2:f4:40:c4:da:be:42:98:62:ee:74:67:42:
a2:1c:25:e3:08:04:09:67:64:58:2e:b2:a0:a1:35:
54:86:d0:f0:78:68:1c:c8:55:0d:ca:b8:f6:9c:2c:
c1:f4:04:b9:37:44:55:48:a9:78:c7:f2:b7:e5:45:
cf:be:9d:03:8c:ed:de:28:73:d7:cb:1d:22:4d:de:
32:8b:f8:cf:ca:ce:02:7a:9b:ca:09:69:11:3c:af:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:3D:20:32:21:03:B9:B9:7C:73:98:0E:A8:92:45:0A:21:26:98
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:aa:7e:39:e0:60:47:90:10:7f:91:2e:74:76:fa:6e:4d:98:
97:c0:20:67:0d:ae:56:7f:af:88:7f:15:14:10:1d:62:67:aa:
95:07:3e:11:19:56:64:d4:cf:7a:91:7d:1e:0e:06:43:82:25:
60:57:31:75:c3:f2:7d:09:28:93:d4:08:95:bd:2d:30:e9:72:
fd:ad:ea:ec:10:da:e1:70:39:99:a0:07:5b:e3:0c:41:47:c3:
31:64:e6:74:91:7d:d9:c6:2d:bd:af:e8:b3:5e:be:82:fd:e1:
57:73:6f:d7:ee:15:88:67:0e:f0:40:fc:70:d1:7c:e4:44:f9:
00:18:93:0b:66:1f:11:a1:75:4f:7e:56:0d:80:c8:fb:50:4e:
1b:10:74:e6:20:ee:02:e5:86:5f:07:5e:97:e1:fc:17:82:a3:
34:b5:b2:d7:f3:c4:eb:11:cb:31:fc:93:ee:2f:f3:92:6b:a3:
98:3a:51:30:23:68:88:bc:69:f4:96:91:25:75:89:bd:56:91:
b2:16:79:c4:d1:d0:df:b0:c9:25:a7:86:45:c7:ef:05:30:11:
30:6e:2e:7d:a9:18:ae:d3:63:42:ab:0d:fe:7d:f3:50:f6:85:
b0:79:eb:13:27:32:25:b7:a6:29:60:18:83:9a:ec:97:84:93:
4a:ea:ec:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:50 2025 by rpki-client