Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier: noFZKynrNmDEpJiWpIo8CT5gPmsa8XKBmTkfjp3/SiM=
Subject key identifier: 7B:39:0C:81:01:6D:85:2D:6C:0E:CE:39:44:35:94:DE:6D:D2:B3:9F
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial: 0199FC8FB5EF1A23FEA887130A600ED8B9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number: 0282
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: FGgysEZnFilm/CDdMaYiMVAyDtfSVS48d7hVCbBNWkM=)
2: H2ZOh9fIAnQ96NovacR2PdzVa0g.roa (hash: +nBuIb1Jhz2syXSr6RgoJwf6cbGP9SV27ZeU9ljDCeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b5:ef:1a:23:fe:a8:87:13:0a:60:0e:d8:b9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=7b390c81016d852d6c0ece39443594de6dd2b39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:9e:30:c9:f2:2a:d1:a2:cf:57:dd:72:01:
f5:8c:cb:22:a4:f3:05:71:d2:1e:d6:7a:1a:3d:69:
ae:fa:8b:ae:d0:c9:92:53:b9:bc:6c:47:38:57:f6:
01:9a:bb:ee:65:05:26:7c:e2:e9:d4:ac:04:90:81:
24:c3:2a:78:b3:57:37:77:c0:38:5a:41:d2:73:b7:
7f:d2:12:58:dc:3c:e4:0b:df:8e:02:cc:81:e6:77:
25:e9:6a:f5:ec:ce:d1:a0:bc:b6:99:e6:27:7d:fe:
1d:73:94:d5:e0:5b:4d:58:42:61:48:43:74:c5:00:
c5:96:af:07:cc:ed:50:0e:65:e3:b3:49:05:b0:45:
7b:3b:29:24:40:e6:81:be:46:38:90:d1:6f:ab:8a:
7e:f8:ff:52:57:a1:85:82:3f:a3:dd:86:e9:5d:a2:
8e:9c:9d:d3:cc:2c:33:f2:ee:0f:95:b8:44:67:e8:
c4:98:54:4a:91:57:c2:3c:8c:73:b8:49:2b:a6:bd:
3e:e4:83:ba:68:1e:87:31:68:6b:29:83:a6:c2:9a:
f9:52:b9:f6:7a:82:8e:62:5a:75:02:7d:d3:1c:52:
98:94:d2:7d:a2:01:a2:2d:9e:2d:40:da:4d:f9:10:
8e:16:13:bc:79:4e:f8:de:f1:f0:5e:f4:34:b3:67:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:39:0C:81:01:6D:85:2D:6C:0E:CE:39:44:35:94:DE:6D:D2:B3:9F
X509v3 Authority Key Identifier:
keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a4:91:cb:00:ae:cf:06:c3:e3:61:6e:cd:96:0e:bb:6b:e2:
ac:6e:17:11:a9:60:be:bd:c0:ce:70:93:2a:2e:78:f1:3b:42:
05:ed:56:5e:69:f9:95:d8:72:09:45:ad:70:f3:d8:25:a6:65:
ab:a8:96:cf:88:61:10:84:1f:88:ee:d4:fa:b9:61:a5:9e:5c:
1c:1e:9a:05:d3:a7:23:23:16:79:1e:f1:91:d0:44:37:96:67:
87:b7:fd:a2:c5:b2:c6:36:25:5b:fb:d8:85:bc:03:f3:37:2d:
c9:6d:cc:64:99:50:e4:e3:b0:2d:7b:8c:45:71:6d:91:1b:b8:
69:c2:82:93:1d:c5:a6:db:e3:7d:45:83:92:6c:c5:dc:da:cc:
cf:b8:ca:7e:6e:66:c6:67:86:1a:dc:4a:e3:e1:c6:0a:a8:a6:
f8:7a:89:6c:20:84:cc:04:ee:1e:a1:b8:5e:11:23:94:36:2e:
62:00:c1:8a:dd:91:1c:98:c2:08:f8:d9:ac:d3:aa:56:15:de:
a1:05:2c:6a:08:fe:9d:67:ab:fb:82:48:e9:a9:64:5a:56:a7:
72:bb:90:14:6a:30:48:23:1c:b8:bf:ee:00:4c:dd:70:d5:f9:
48:17:99:62:84:42:f1:18:28:3e:f2:53:64:7e:82:2c:36:a0:
e9:3f:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:57 2025 by rpki-client