Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: 0WhUiwrXlUUSbM/9tjpD57HGyUqY8tgjQ22rLxkHi5I=
Subject key identifier: 04:0C:1D:78:20:47:C7:98:A2:B9:E0:A5:A7:CF:95:99:D9:1B:B3:15
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019A0147A8AF8210E9ED0DCBD7D7DB934959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 16F5
Signing time: Mon 20 Oct 2025 11:01:04 +0000
Manifest this update: Mon 20 Oct 2025 11:01:04 +0000
Manifest next update: Tue 21 Oct 2025 11:01:04 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: ghMm9dXrYFIeiAwAYZtPsC9s8d8wFsyxnqL2vkqNy2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:a8:af:82:10:e9:ed:0d:cb:d7:d7:db:93:49:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Oct 20 11:01:04 2025 GMT
Not After : Oct 21 11:01:04 2025 GMT
Subject: CN=040c1d782047c798a2b9e0a5a7cf9599d91bb315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:9e:d7:3d:52:f6:40:58:20:8f:d1:2a:35:
b8:6f:98:d0:82:a2:b3:31:c5:b1:e1:f5:0f:a3:04:
92:72:44:9a:dd:6b:aa:84:7b:8d:e4:cf:44:ca:5a:
d4:54:dd:6b:6a:1c:8c:1d:21:64:fa:f4:21:0e:f6:
e0:61:24:44:cf:b2:86:32:d9:0b:9a:b1:31:e9:f5:
ee:dd:82:07:b6:89:11:12:33:58:b8:f4:e7:76:48:
05:f3:e6:65:4f:d3:af:39:b0:fd:2c:04:69:0b:13:
e6:34:02:af:92:60:86:ba:55:fe:16:5d:91:bb:04:
62:2d:4a:85:82:67:29:e7:32:6b:e9:79:99:45:29:
8c:f6:8c:a1:0c:4a:c0:00:b4:5c:3a:55:d9:14:1c:
62:d5:1b:6c:bf:20:a1:c7:c8:25:a5:28:10:93:af:
e2:6c:7c:6e:e1:61:07:98:c8:f6:15:3a:f3:9f:63:
6e:56:e3:50:2a:0a:25:17:45:c5:3e:ec:53:22:7d:
6e:e0:9c:7b:d4:b8:c2:2b:b3:ff:e9:3f:67:23:ba:
69:72:6d:4e:02:8e:0b:e1:4d:7f:b7:84:3f:3c:4a:
f8:3d:72:24:1b:29:84:83:21:3c:11:67:49:d1:6c:
8e:2e:fe:9b:f2:f8:cb:66:1c:9f:18:3c:69:05:4c:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0C:1D:78:20:47:C7:98:A2:B9:E0:A5:A7:CF:95:99:D9:1B:B3:15
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:54:64:7a:c2:7e:9f:ba:01:c4:1a:c0:79:51:d4:27:e0:83:
56:fa:9c:1e:ca:14:c0:09:79:3f:f3:4c:6b:3f:92:3f:f6:21:
11:a4:45:7a:ce:b9:5a:ba:8e:55:f2:f5:49:a6:7b:cd:9c:58:
cf:cc:a3:1d:e1:28:ef:12:a5:42:9f:af:80:a0:0f:9b:73:11:
7a:2a:de:2e:86:a4:5e:5f:d1:68:d7:f1:d5:e7:90:63:63:48:
20:2a:4b:1d:bd:9c:f1:7d:ab:8d:81:44:b0:8d:22:9d:e7:3c:
31:65:54:5c:3f:04:54:5a:ce:67:c9:c3:27:cd:ae:36:16:7f:
84:61:b6:8f:16:02:72:7e:36:18:f0:86:0a:c2:00:95:17:70:
5e:cb:97:2c:1f:5d:e0:11:0e:9c:9a:2a:aa:90:fa:5f:b6:48:
27:ad:a0:ad:e6:e9:39:c7:4a:45:62:91:87:9a:d8:bc:51:a6:
31:e8:eb:55:7e:66:7a:9f:df:e9:5f:ff:6b:d7:a4:b6:60:cc:
a4:89:dc:9a:bf:7a:c1:f2:e8:59:57:bf:bf:49:7a:6a:c3:ce:
a3:e7:9b:d7:12:a1:d8:f3:07:93:10:0e:e2:5c:80:88:9a:c5:
77:13:4b:d9:a9:e6:4e:a6:ba:7e:c5:7b:d7:3c:d1:17:8e:d3:
9c:60:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:20 2025 by rpki-client