Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.mft (raw, json)
Hash identifier: 5iOJOP2/6Qk938DHCIl3Er3DGKTD+vOoWdaVaLemM5E=
Subject key identifier: BC:65:DC:44:FA:F3:E3:C3:90:0D:69:C7:2F:6B:04:9F:A0:16:71:4A
Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
Certificate issuer: /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Certificate serial: 0199FC217DB93B00F181B20F19703D51E353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
Manifest number: 0ACA
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: _cHyXKV_M_2E0mZg6CMFhW1P9U4.crl (hash: bsH+OY+kBOAg+AUR1Ew6YEcYQkd23rMooN4KBehLvaA=)
2: wnJRh-4CUXkPHnOwTdcWOQViBQs.roa (hash: +Cv+ZEGLAnj74mF/vlyspj0D6dG5P9lPHFBp/dI5sxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7d:b9:3b:00:f1:81:b2:0f:19:70:3d:51:e3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=bc65dc44faf3e3c3900d69c72f6b049fa016714a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:31:ea:a5:c3:ab:2a:08:67:f0:a9:da:1c:
4c:5a:94:ae:0f:01:99:77:80:7d:d4:d4:8e:d2:b1:
1c:14:db:55:58:44:18:5c:52:29:67:d2:62:f5:4e:
ea:2a:25:91:d5:f3:01:e0:1a:8c:25:6e:e8:0d:e9:
b6:5f:c3:ec:26:81:f6:51:45:d0:b9:e1:67:c2:b4:
79:16:b3:77:9b:ff:f7:50:8e:b8:e5:e7:e9:57:27:
f9:1d:42:15:22:98:c1:ce:1b:57:f8:cb:46:7e:29:
0d:17:ae:60:c6:cf:82:e2:0f:98:e8:b1:36:29:d4:
0e:52:0f:4d:2b:23:87:fc:c2:d1:1b:b2:f1:22:8d:
f9:00:76:7f:1e:ef:6a:ee:3e:41:b6:a8:a6:9b:9a:
f1:00:38:03:51:10:60:f9:52:9d:01:28:7c:ea:04:
b5:32:6d:66:d5:90:d9:f1:c6:7e:96:51:3e:f5:31:
cc:b8:12:6a:f9:38:93:3d:3b:cd:ff:e2:8d:06:31:
02:52:d7:f0:60:0a:19:75:e3:e4:f1:00:8c:86:29:
21:4f:6e:c4:17:7b:7d:e4:9b:7a:b5:76:64:05:7c:
b5:bd:77:ed:d8:59:1b:31:8b:2e:04:8e:59:99:73:
bb:fc:f7:58:1c:fb:9a:f4:9d:42:42:16:44:af:78:
0e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:65:DC:44:FA:F3:E3:C3:90:0D:69:C7:2F:6B:04:9F:A0:16:71:4A
X509v3 Authority Key Identifier:
keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d9:af:7a:6c:f7:b8:83:26:93:db:5c:f5:c7:9e:0f:e2:c8:
d2:05:b7:0c:73:a9:98:0a:71:42:e6:ad:fe:63:d8:59:c4:d3:
dc:98:ae:56:7e:23:df:d9:25:33:cb:95:ac:df:c4:ba:e4:13:
e2:5e:42:b0:fa:02:6e:5f:12:a4:13:cf:09:7a:bc:27:65:07:
90:53:d1:74:f3:f9:50:16:aa:3a:20:91:90:e1:7d:e1:95:2a:
39:28:71:1c:29:d3:8d:9c:db:81:46:46:42:e3:f2:76:34:c4:
a7:b4:8b:19:15:c4:ab:bd:29:0f:28:7e:38:1b:96:8b:04:28:
a1:48:1b:bf:2e:f8:ee:72:9c:54:c5:23:3e:7c:48:3e:d0:8a:
85:ce:9b:24:7c:18:11:f4:bb:23:fa:fa:d6:7a:ef:60:e6:4f:
6e:19:31:c2:e0:a3:ea:09:0e:6f:89:99:40:4a:ab:09:00:2d:
eb:51:60:c5:7f:c7:c3:59:c0:6c:c9:a4:f0:a9:8a:34:99:41:
64:33:a7:b9:c4:7d:26:1a:1f:76:46:7d:a7:80:e6:6e:3f:fc:
09:94:f7:7e:43:87:3d:59:27:fb:ec:7d:71:38:0c:eb:61:12:
1d:a9:29:f7:75:c0:b5:fe:00:f6:b3:e9:ea:4c:27:9d:f2:13:
1e:36:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:18 2025 by rpki-client