Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: ejL4cEHX36rHC30G7YidT2OEuEVuFEma/cOlprv6QkY=
Subject key identifier: BF:93:55:B5:05:A1:48:A0:6B:42:78:81:E1:DE:3E:74:A7:39:EE:A0
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 0199FC5898B29D6B9C3C864C7474E1050612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 09DB
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=)
2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=)
3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: zJwbdSGsSAuBjs7saW0ZTuA2hTPSl+Z5TqSGZx23JUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:98:b2:9d:6b:9c:3c:86:4c:74:74:e1:05:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=bf9355b505a148a06b427881e1de3e74a739eea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:2b:c4:e4:02:03:1f:99:c8:c5:dd:8b:fd:
21:f4:12:7e:5e:16:f0:a3:14:5d:e2:bf:a8:23:18:
b0:42:5f:68:a9:79:bd:7a:1f:70:c1:c2:c2:ef:91:
99:1a:bd:16:25:42:f4:ab:85:4c:a6:df:20:9e:fe:
97:55:a3:29:af:1a:71:15:13:5f:e0:3f:55:61:a5:
8b:e3:b4:6e:52:a3:26:8a:b1:43:ce:ac:e9:b9:00:
35:54:2a:44:52:9e:6c:0f:3e:20:ac:dc:92:8b:39:
f5:b4:04:46:59:11:8a:0d:a7:00:f4:7f:66:34:22:
d1:8c:1d:9b:87:63:0b:18:9e:a7:a6:ed:30:d0:9c:
fd:88:d6:44:2a:b4:69:b7:00:42:ba:ca:c3:77:45:
89:96:60:5c:36:91:76:81:d5:aa:0c:b3:af:96:8c:
1a:9b:b3:e4:f4:70:79:b2:a4:7d:5e:25:df:30:3a:
77:c6:b8:25:15:b4:8a:72:02:d1:39:9d:31:9b:49:
53:f1:15:cd:14:e7:dd:d6:8b:8b:8d:6a:c0:39:ab:
6e:00:7e:1e:a0:a7:85:66:8b:2c:b6:40:4f:40:4d:
67:6d:b7:3c:90:ee:cf:b8:b5:54:80:1d:3f:62:47:
8b:7a:b7:e0:a1:61:bd:db:6f:a8:56:55:79:04:07:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:93:55:B5:05:A1:48:A0:6B:42:78:81:E1:DE:3E:74:A7:39:EE:A0
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:70:0f:bc:a7:f3:88:4f:07:9a:1c:26:73:07:11:59:b6:85:
2d:a2:0d:dc:d5:a9:45:33:4f:f6:31:ad:80:9f:40:af:ea:bf:
85:e2:fe:5f:f8:87:96:72:2a:c4:0b:b4:46:4d:4e:15:b1:a6:
51:60:d8:07:0b:d1:95:82:34:42:b6:57:72:b2:ec:05:7d:ee:
c5:c0:aa:1c:5d:20:6f:85:77:e3:e2:aa:67:87:67:2d:28:a1:
ec:0c:8f:73:c9:b2:62:04:d0:54:30:f0:f7:96:e1:4c:ba:8a:
8f:5e:d1:40:f7:56:73:88:bb:3d:5f:0a:46:73:96:ca:75:dc:
fe:0a:ff:83:4f:1b:25:0d:41:47:3a:6c:c7:11:ec:01:05:38:
47:05:13:d0:cd:1d:2a:60:b6:9a:7b:d3:4d:9a:10:03:95:dd:
b3:32:aa:bf:f1:27:19:7e:a7:7f:9e:41:75:d0:00:ba:6f:71:
e0:ba:63:8b:39:44:e6:bf:30:d5:df:ce:45:b4:a6:df:d8:72:
fb:74:03:a2:e4:64:23:9d:5c:52:22:97:3b:cb:be:74:57:c2:
f0:88:3e:ac:8a:d8:1a:4b:22:15:8b:66:35:88:97:31:ec:6e:
c3:c0:a9:db:3d:41:6e:3c:e1:6b:ea:78:58:02:57:26:e5:2f:
5a:51:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:25 2025 by rpki-client