Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
File: cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft (raw, json)
Hash identifier: lk3ztC9TxdX8IcZsKORM2HCXNMxk+rvc3UMpfEuW6b0=
Subject key identifier: DD:81:66:8A:2D:FF:F9:F5:B1:C7:2B:2F:91:54:E3:0A:BA:65:F9:C5
Authority key identifier: 71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
Certificate issuer: /CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Certificate serial: 0199FBEB45888A6F6B9272397B45987FF902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
Manifest number: 1555
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: 0uVokjA0n-IKYM4dLwrHfcYoXtI.roa (hash: h5xCuikP/FGyLSLux1dmHiJam1SLoPwDAncSRikSHHc=)
2: cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl (hash: 0zc6Lnt1KtI5GBvOn8lpaJSdf6hfujh8ceUzHFPevlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:45:88:8a:6f:6b:92:72:39:7b:45:98:7f:f9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=dd81668a2dfff9f5b1c72b2f9154e30aba65f9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:99:7d:2a:92:0a:2b:49:54:51:21:71:9f:
b6:37:f4:c5:ea:49:16:b2:5a:f5:8d:2e:e3:f3:df:
73:68:11:d5:7a:46:96:db:17:cc:b0:2b:e0:a9:57:
37:cf:c2:56:79:01:a2:df:8e:e0:d1:0d:b8:5b:16:
4b:63:98:4f:4c:e5:30:f6:8e:a6:24:2f:90:30:6d:
af:5a:57:1c:24:a1:4a:30:1e:74:d9:dd:0e:36:ed:
65:5d:2b:91:5b:1b:23:c5:9b:f3:62:9a:c5:3d:1f:
0b:29:e0:a1:c5:59:3d:4b:53:22:c0:f5:2e:0e:bb:
dc:4a:8f:05:43:99:20:0b:61:f5:c4:38:d0:bd:70:
36:36:2a:d9:7d:e2:73:9d:4a:65:0e:3d:b3:ce:59:
27:a4:dd:07:5f:c5:a1:39:9d:a5:e6:51:27:a2:65:
1b:b5:d7:17:e2:4a:af:6c:93:2e:d1:6a:90:60:1a:
dd:58:6d:19:56:b8:1a:6b:fe:f2:89:ca:88:1b:9a:
1e:b6:40:ee:50:90:d3:b2:90:03:66:77:44:72:38:
0a:4b:6b:14:5e:08:12:9e:51:2e:5a:04:75:9b:59:
4d:86:f5:4a:38:eb:bc:e1:db:7e:38:61:75:7c:d5:
fd:39:a7:18:a9:e0:6c:00:c3:42:0f:c3:bf:2a:c3:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:81:66:8A:2D:FF:F9:F5:B1:C7:2B:2F:91:54:E3:0A:BA:65:F9:C5
X509v3 Authority Key Identifier:
keyid:71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:52:cd:01:e9:9a:b9:36:25:4d:a1:f8:f2:ed:24:9d:88:0d:
27:c4:60:b6:39:aa:97:dd:98:8f:ae:e5:84:b4:49:17:64:c5:
e3:b6:15:aa:4e:53:0b:88:55:9a:f4:c4:44:b9:9f:9c:1a:50:
7a:34:8d:51:07:f6:3e:b2:f7:00:8b:c2:ab:45:4a:d3:8d:6a:
81:92:53:24:29:55:73:e0:ae:0f:d2:a6:62:bc:fd:94:5a:3e:
70:9c:2b:60:c7:f9:02:9a:2c:c6:c1:a4:a4:f0:2b:81:ee:a7:
ae:23:7f:bf:52:39:c3:4d:e6:3a:ec:5f:5a:d2:77:a5:00:bc:
55:f9:f9:31:57:68:d0:20:ce:cd:07:33:66:bf:b5:18:8b:22:
e6:75:0e:dc:99:52:8a:a2:be:28:9c:f0:4e:e1:d2:51:93:a0:
f5:00:f1:c2:ac:7d:12:18:a0:e2:a0:1e:b8:28:5a:f7:c1:b5:
ac:f7:34:af:44:d3:fe:b8:88:c5:8d:c4:f6:29:d4:0b:b9:53:
29:b2:a0:66:f0:2a:5d:ce:eb:b1:3b:79:d6:11:4c:12:78:b6:
5e:e4:03:d4:4e:95:54:81:2a:b7:59:30:93:a9:04:44:e9:bc:
bb:44:28:1f:0f:d4:a6:21:51:15:fb:92:55:d6:e2:9f:f0:91:
d3:f3:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:23 2025 by rpki-client