Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File: C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier: TNHmawLoMv8LpaEC9rvOynoEpLPc9eJLekFlPZ2y944=
Subject key identifier: 2C:AF:A6:A3:BC:65:76:0B:F6:67:5B:35:CB:6A:47:53:6E:50:75:3B
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer: /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial: 0199FE46C3E7A3C0581147F990D0800C0DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number: 0711
Signing time: Sun 19 Oct 2025 21:01:14 +0000
Manifest this update: Sun 19 Oct 2025 21:01:14 +0000
Manifest next update: Mon 20 Oct 2025 21:01:14 +0000
Files and hashes: 1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: hKxmQbpqMrFyyWetJw9b8ELYgcQ/I00J0QTUpD5a3/I=)
2: dy6V06G8CC2FK34EGVuxtzegKH4.roa (hash: gPhDzrN8RIm6TShQaGb5YzX92bCG0Thu0kMn08thu4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c3:e7:a3:c0:58:11:47:f9:90:d0:80:0c:0d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Validity
Not Before: Oct 19 21:01:14 2025 GMT
Not After : Oct 20 21:01:14 2025 GMT
Subject: CN=2cafa6a3bc65760bf6675b35cb6a47536e50753b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:bf:cd:02:03:f7:07:ef:1f:bb:59:5d:33:
1b:24:e8:64:8b:95:f4:57:8a:ed:78:e7:22:bc:25:
c5:c4:11:dc:fa:de:4f:12:40:98:01:68:a9:09:51:
8b:dd:df:c4:89:6c:4d:d3:93:b6:1a:58:db:73:6c:
3e:64:cb:d7:c5:9b:40:8b:72:eb:c9:d6:34:76:7c:
38:00:9f:30:f2:20:9c:46:67:58:86:ca:34:89:d1:
fd:25:05:c4:29:df:f0:4e:e8:8e:69:9a:df:41:7f:
f8:7e:f6:f4:c6:b3:f5:ba:77:12:79:1a:59:31:4d:
6e:8a:08:cb:24:2f:2f:b2:6a:9a:66:fd:03:1f:16:
af:b1:bd:db:be:ca:78:96:8b:a4:40:76:aa:77:cb:
43:96:e0:20:ff:48:b4:bf:a1:21:d2:8a:ed:fc:99:
96:af:aa:53:69:6c:ec:46:c1:a7:17:52:37:dd:fd:
2b:29:7f:84:81:45:f0:02:57:29:8d:7a:d0:d3:43:
03:26:e7:a0:92:2f:62:76:e0:91:5c:d7:5d:b4:28:
a0:fa:fa:05:b7:e1:3d:b6:0f:cb:6e:6e:16:2e:69:
23:08:e5:7f:8a:f3:f2:01:20:a3:f2:e0:b2:b6:dc:
0a:80:1a:3f:f1:ea:77:2f:09:8b:c7:64:83:d6:19:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AF:A6:A3:BC:65:76:0B:F6:67:5B:35:CB:6A:47:53:6E:50:75:3B
X509v3 Authority Key Identifier:
keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f6:88:18:ef:f2:97:e4:2d:2f:bf:96:30:2a:48:a0:2b:50:
ac:9c:7d:b0:63:47:7f:8f:c5:b3:1e:f7:d6:1b:e5:fb:b2:01:
c5:d2:48:34:61:12:fd:ca:52:ce:89:06:10:20:b8:e2:7d:21:
0a:ef:fc:8a:2e:bc:43:79:35:a0:5f:c0:8a:c3:92:a3:4d:81:
e8:e0:63:ae:0c:e4:52:ad:41:8a:aa:7a:51:74:f5:21:ca:74:
5a:a3:4b:53:cb:4b:14:3b:fe:7b:f0:70:fb:85:44:05:00:9f:
b9:ae:ce:78:71:f5:34:d1:c8:5a:a6:c0:cb:f4:49:67:d3:dd:
03:34:2a:bc:9f:e2:1b:71:f9:c2:0b:58:c4:7e:89:c3:17:88:
b1:98:e8:10:5e:6a:02:3a:8c:b0:12:95:a8:71:43:29:5e:a7:
65:c1:44:71:dd:b6:7b:c3:28:78:56:f6:25:b2:0e:93:44:e2:
3a:29:0c:3f:ee:07:af:c5:76:27:e7:7c:69:6f:8f:3b:9c:d1:
39:e6:02:29:22:4d:bb:c0:98:79:53:61:6e:6c:50:ba:11:3c:
19:c2:fa:ce:0e:f0:4f:58:a0:cf:f5:4c:fd:b7:1e:c7:56:77:
d5:92:a3:40:e4:96:c2:88:2e:a8:31:0a:bd:9c:11:b0:7f:ed:
e8:b7:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:41 2025 by rpki-client