Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier: ZvWqygEwOUAvz3DHd97MwrAamuwMGsCABaqjG/onWqU=
Subject key identifier: 7B:DB:74:FF:EC:C0:2F:A0:EE:FA:A5:04:B2:6E:6A:F6:12:50:E9:35
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 0199FEB4F4B9644CF7C5BC8FD395E6C47587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number: 1670
Signing time: Sun 19 Oct 2025 23:01:35 +0000
Manifest this update: Sun 19 Oct 2025 23:01:35 +0000
Manifest next update: Mon 20 Oct 2025 23:01:35 +0000
Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: iCeb9R0nni3O4ten7Lw+sPN0JOgNJIXxIUwaB+fCD8Q=)
2: sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa (hash: Ua22PTmfzyT5DTnVC3xgijxYiy9LNm1nh8SzeYUTwDc=)
3: sZiCl9lv80fsle91xuU3_BKnt_s.roa (hash: FzOmDkg8UvmI+LcJN7K+9dJBFFV57UBgPrTOJAC0yec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:f4:b9:64:4c:f7:c5:bc:8f:d3:95:e6:c4:75:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Oct 19 23:01:35 2025 GMT
Not After : Oct 20 23:01:35 2025 GMT
Subject: CN=7bdb74ffecc02fa0eefaa504b26e6af61250e935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:d9:fb:3a:63:79:60:31:4c:41:62:18:27:
94:1b:ac:ca:21:12:2f:46:19:44:7f:93:33:9d:0e:
7a:c1:44:ec:9c:02:ef:bd:79:0a:a1:48:fe:16:10:
04:91:d7:2a:ea:6a:24:3f:15:c8:75:d5:82:1a:16:
2b:71:f4:27:af:69:28:a6:5c:64:9e:35:5d:ea:76:
4d:f4:79:1d:18:09:d5:e2:fa:9e:a7:d4:bc:93:89:
b5:42:e7:75:8c:e4:4a:26:4c:1d:2e:92:18:60:dd:
9e:e3:32:b0:89:dd:15:bd:d7:22:ed:ab:49:13:e0:
a6:f7:f3:06:58:bb:d8:4a:c5:19:9a:70:f8:2f:57:
44:2b:f0:e6:92:a5:69:c9:51:d0:80:57:38:9a:d5:
f2:79:f3:c0:53:11:4a:d5:67:3a:7e:ba:5a:a7:02:
7d:3e:58:95:15:ed:92:b6:59:51:99:30:40:2e:0a:
b0:20:4c:3a:98:20:0a:63:72:79:d9:5b:47:83:35:
ea:71:e4:1b:bc:17:f8:7b:04:a0:53:e0:0e:3c:20:
d5:06:50:c1:17:65:13:1a:fb:2d:88:95:5d:e2:d0:
fa:49:fe:f5:22:a2:b2:23:21:8b:fa:d6:b7:db:45:
cf:7d:9c:dd:f3:3f:1c:fe:ca:56:b5:86:05:a9:6f:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DB:74:FF:EC:C0:2F:A0:EE:FA:A5:04:B2:6E:6A:F6:12:50:E9:35
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e4:5b:e5:90:5c:c4:ce:bb:03:aa:23:88:ac:f1:be:51:60:
1e:59:d5:f0:dc:1a:31:ee:a5:b9:7b:15:08:2d:ac:68:24:91:
34:f7:7b:34:98:35:d3:d9:9e:7f:b5:fd:a7:90:cf:72:4d:3f:
01:98:9d:12:78:14:d9:c7:af:b9:0a:74:f8:8b:f1:ac:d1:9b:
34:10:b0:da:48:a1:6e:da:af:ae:65:d8:78:6e:b6:83:c4:d7:
c1:b9:b5:39:97:95:15:f9:14:49:86:70:2b:f5:a2:3c:18:4b:
eb:73:c4:e0:e6:7b:84:73:e3:ae:36:c7:2b:88:75:e0:a8:77:
d8:2f:bb:8d:9e:57:18:61:3a:ef:27:bd:5b:8b:a5:cb:48:6b:
ab:49:b5:34:41:29:8a:7c:62:fc:9a:12:6a:38:3a:e6:b7:bf:
76:12:61:a8:9f:d6:76:bc:e2:11:a2:9a:0c:0c:9d:b9:c6:00:
20:2d:6c:d1:ac:fb:5d:6e:a1:b7:ff:7d:bd:37:bc:fb:48:ef:
24:bf:12:8d:a7:a8:87:30:b3:8a:f8:e5:e3:5a:91:b1:bd:48:
e8:a9:77:ba:cd:4e:ae:6f:ea:c1:38:12:c6:64:2c:28:59:e3:
ff:21:56:57:07:58:96:d9:2c:32:03:58:68:6f:0c:65:03:61:
04:bb:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:20:16 2025 by rpki-client