Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
File: c3gm9t2lQDSR5IfKTut9fNdvoT4.mft (raw, json)
Hash identifier: Xy11bYW1jh9hQvhcHX97AzJiarMxkAzSympOkxMbfC0=
Subject key identifier: 1A:84:C2:DA:93:61:8D:80:21:70:5E:07:BB:C6:3E:FC:86:90:77:93
Authority key identifier: 73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
Certificate issuer: /CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Certificate serial: 0199FC2191D07FC5B1DD01D4B12DD8DAA1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
Manifest number: 9D
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: c3gm9t2lQDSR5IfKTut9fNdvoT4.crl (hash: aWF1s0XH7QEbaG6Xxfd5YplB41NWtdnmX6FhMsQgeSg=)
2: mazPj7cdRL1I04pr_YJNNETJccU.roa (hash: 3OsJUxkMYMMTIuXPRezuzfI9FZxZPBdn1qkD0aOjzGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:91:d0:7f:c5:b1:dd:01:d4:b1:2d:d8:da:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=1a84c2da93618d8021705e07bbc63efc86907793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:e9:17:33:b7:ab:f5:38:b2:c9:2c:98:94:
b8:a3:1e:97:d2:ba:f9:fd:c0:00:5f:bc:e3:a8:47:
04:2e:f1:3b:c4:69:22:7d:dc:ba:be:35:b6:00:94:
01:1d:fb:8d:bb:e7:a9:2e:c9:10:07:4e:67:9d:f2:
a3:1b:46:e5:0b:63:ba:a3:be:b0:20:be:55:1e:d7:
fa:2d:97:7f:ad:da:3d:45:c8:bd:98:02:94:ab:f9:
35:c4:91:fc:81:00:98:70:a3:57:2f:46:26:e4:0c:
30:9d:cd:91:1b:d1:77:31:e0:8f:0a:38:28:39:ce:
e6:f5:1e:81:89:1d:df:0e:63:0f:9c:32:f2:95:aa:
42:53:17:54:7f:82:b5:6d:f7:bd:e1:50:f7:ed:99:
64:cb:fa:1e:7b:ee:5e:98:cf:ce:2d:34:c3:8b:a7:
45:7b:e7:bd:9a:31:1d:90:ed:92:7d:61:a9:e3:36:
ee:23:ac:11:04:b1:af:a1:00:c9:4a:15:86:57:2d:
13:ff:db:31:c6:02:6b:2d:44:49:87:49:13:34:1f:
d1:63:6b:69:6a:75:3d:ed:b3:b8:a1:1f:27:81:ed:
2a:bb:10:71:b9:80:f2:b2:64:d9:74:32:e0:0b:f2:
a0:45:52:1f:01:bb:7b:fe:88:66:f9:37:b3:66:20:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:84:C2:DA:93:61:8D:80:21:70:5E:07:BB:C6:3E:FC:86:90:77:93
X509v3 Authority Key Identifier:
keyid:73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:85:66:22:c1:c2:16:d1:ae:a5:4d:1a:b4:ab:25:4f:9b:0d:
5a:56:d2:2f:e6:dd:a4:22:32:e5:50:0f:0c:69:ed:81:01:1b:
bf:14:ed:87:a9:6f:0a:30:fd:89:14:d5:ce:22:de:9a:7f:46:
f7:65:30:18:0d:cf:3f:55:89:dc:91:40:27:a0:46:f5:bf:24:
76:ca:f2:1a:fe:da:2e:f9:db:e8:98:72:43:89:80:d7:56:fe:
94:97:ac:6f:11:df:98:c3:79:ce:40:c4:dc:4c:69:07:b1:7f:
c3:ce:5b:96:e9:8a:a1:45:21:e9:95:7e:0e:4a:bf:77:af:cc:
9c:87:1b:c9:d4:e8:bf:75:a0:42:58:2f:4b:97:a0:25:61:21:
63:f8:df:0f:57:e6:9a:99:98:bc:9b:3c:14:0f:d9:39:2d:48:
68:49:4f:84:27:0b:35:9b:a9:41:9c:c9:07:52:57:76:a0:17:
dc:54:e0:47:ae:ff:c6:07:bb:9c:34:f1:1c:b9:1a:c7:47:ef:
7c:67:72:1c:f2:a4:30:0d:ba:45:a8:1b:15:1e:16:ba:25:58:
e0:d7:3e:a2:5b:f1:1e:d0:3a:bd:0d:ad:2f:3e:d5:b7:de:71:
d3:2b:f2:c1:10:c9:49:0d:eb:46:89:b9:73:55:5f:e9:7d:fc:
c7:13:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:52 2025 by rpki-client