Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: +MIKv07ClPDqY+2MsFwhUwS9yyocx80QxFm+NLOjf1Y=
Subject key identifier: 1F:46:E8:97:0B:FE:F5:F3:3B:3B:98:62:58:D5:FF:FB:C6:6B:DB:BC
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 0199FD3430E70DB4B564CD109637AEA25DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 0560
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: 6ZSmBIcPxTxyBds219HWlbUMWbI9O104XBYWoeDnlj8=)
2: Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa (hash: mvzboSXfNbv0bSrCewCz7JJVKGgAnpVL6t7bOyNmT+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:30:e7:0d:b4:b5:64:cd:10:96:37:ae:a2:5d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=1f46e8970bfef5f33b3b986258d5fffbc66bdbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f7:68:6a:8f:94:b7:68:2c:a6:f0:8b:2b:f9:
d8:28:03:05:d3:b9:d4:41:06:63:7a:dc:6a:75:94:
6a:3a:9d:1f:04:a5:4c:cc:e3:2b:49:7b:12:c4:57:
4a:e9:67:b0:d8:98:02:93:21:26:3e:9e:9d:c0:6f:
e9:fd:ca:f6:96:fa:e4:75:6c:7f:2f:9c:1c:82:8f:
07:88:09:74:2b:25:72:c1:d8:cf:b5:28:8a:19:46:
79:63:de:9b:be:74:71:ff:85:38:8d:4b:00:7a:d2:
35:62:ca:9a:69:2a:45:42:a4:a4:ef:42:47:80:22:
6e:f7:05:56:d7:8a:b6:7e:5c:20:30:dd:3a:51:fd:
5e:2a:01:00:1e:53:5c:83:1b:60:48:cf:6e:56:e7:
a5:fd:51:24:e1:cc:fb:5e:06:ee:45:77:cb:85:af:
c2:d5:2c:f2:37:c3:86:82:bb:76:38:5b:53:24:3d:
ca:4e:c6:9c:da:c3:5b:38:58:5d:11:70:2b:51:c1:
9e:e3:28:41:2e:7a:11:3d:fa:2e:c4:d0:20:e6:d3:
7a:26:b7:ac:26:38:da:ba:57:c8:5b:3f:fc:db:87:
fa:d7:ea:1a:cb:34:96:1b:ae:4f:af:c8:e3:43:38:
cf:a4:77:a1:de:cb:ec:9c:de:5f:a2:9a:d3:83:ad:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:E8:97:0B:FE:F5:F3:3B:3B:98:62:58:D5:FF:FB:C6:6B:DB:BC
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a3:34:a6:3b:34:d8:b6:83:0e:b8:6f:00:4b:d1:52:a7:2d:
ee:cb:ce:22:d5:30:c9:40:45:bb:9a:c0:24:b2:32:ea:17:69:
18:d5:aa:43:c8:fe:d0:d1:68:3a:0e:88:4c:2b:a1:39:63:69:
8f:c7:40:d0:23:68:c7:d7:fe:dc:65:80:39:8c:d9:0c:93:76:
ff:2a:3e:11:2e:95:61:b9:ed:aa:39:1c:e4:5c:b9:1e:2f:6d:
69:e6:5a:3d:a8:8e:b1:7a:e5:46:d5:0e:07:e7:93:9c:32:b1:
a6:97:9a:df:58:cb:1e:7c:8f:30:93:8b:d2:be:c9:48:12:11:
b7:b7:8a:94:cc:1a:0d:9a:4c:58:01:de:d7:fe:83:95:e5:0d:
36:91:3c:e0:a6:5c:45:4b:62:c7:4f:99:8b:ce:32:f9:68:12:
fa:fe:c5:8b:e1:d7:fe:f6:be:1d:0d:0d:6d:8c:6c:f0:5c:6c:
27:cb:cf:76:33:8c:26:00:b3:6e:a0:c0:b4:dd:f1:03:22:12:
50:ef:d1:52:70:9d:21:c9:15:43:ff:00:64:01:1e:a8:83:e5:
c4:90:de:4c:3c:d5:80:df:e1:96:cc:87:64:a9:33:23:91:67:
57:5d:f3:0a:a7:20:0a:1c:da:d2:f8:21:51:fe:aa:b9:3e:05:
2f:c8:cb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:46 2025 by rpki-client