Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
File: cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft (raw, json)
Hash identifier: wUXToMuFAWx9rCpkhSLXGoPIjSaubrvmr1Z6LBcOJWc=
Subject key identifier: 0A:E1:E7:94:54:41:F6:4F:72:88:CE:D3:99:0B:0E:C8:A8:DD:8D:CA
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Certificate issuer: /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial: 019A00DA473BF47923E6B7104885B52A3343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
Manifest number: 1348
Signing time: Mon 20 Oct 2025 09:01:36 +0000
Manifest this update: Mon 20 Oct 2025 09:01:36 +0000
Manifest next update: Tue 21 Oct 2025 09:01:36 +0000
Files and hashes: 1: UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa (hash: wAlll9K9/ln6lzYhTcmMHQV62ZPi/AvIvfXVgruDZb8=)
2: cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl (hash: aMIJ47S7qQajaOxuaUkp+KoKPERbaiW1yO/tSBYTaHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:47:3b:f4:79:23:e6:b7:10:48:85:b5:2a:33:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Validity
Not Before: Oct 20 09:01:36 2025 GMT
Not After : Oct 21 09:01:36 2025 GMT
Subject: CN=0ae1e7945441f64f7288ced3990b0ec8a8dd8dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:0c:1b:66:86:5e:d6:84:36:0d:ff:38:9e:
21:2a:e6:05:80:c5:19:da:75:3c:fb:74:d7:dd:5c:
e2:37:ec:69:08:b5:4c:09:6e:38:73:93:0a:59:f7:
49:c4:de:a5:68:01:88:af:32:46:0d:ab:f4:c9:83:
dd:28:a0:e8:94:a5:61:42:32:54:5b:70:07:8b:43:
4a:3b:6f:01:d5:21:b2:82:f1:8f:c2:f3:f6:ea:cb:
ee:18:45:ef:f7:37:da:55:e2:78:bd:1b:5e:f0:de:
3a:93:8c:73:c4:83:38:73:dd:fa:04:7b:08:70:d0:
20:ee:7b:f3:ac:a7:c0:dc:61:fb:60:71:8a:e1:06:
d4:a9:ab:60:79:69:d9:4e:d2:9d:32:d7:56:b3:45:
a9:00:45:4b:4c:9a:e5:2f:4f:6c:f7:05:26:a3:ab:
4e:0b:5a:cd:e2:4b:84:9a:43:5f:3f:42:42:cb:9d:
10:ce:3e:b2:e5:e5:40:a0:da:14:fd:13:d9:e2:8c:
06:90:54:05:ee:77:49:6b:6c:d8:83:b7:70:fe:47:
b3:0f:75:04:3f:9e:7b:ad:90:2d:97:c9:ae:17:36:
85:a4:d7:8f:82:1c:d2:a8:8d:7a:aa:2f:f6:9b:00:
1f:8c:61:42:72:bf:43:b6:10:3e:79:b8:bc:9a:ef:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E1:E7:94:54:41:F6:4F:72:88:CE:D3:99:0B:0E:C8:A8:DD:8D:CA
X509v3 Authority Key Identifier:
keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c5:e9:c7:3e:bb:ee:52:c5:79:11:ee:6c:a1:4e:0c:48:f7:
0a:97:de:9b:c6:f9:71:ca:bf:8f:ba:b0:3c:c8:d2:14:bc:7e:
fd:cc:a5:ec:78:f5:97:69:bd:37:a7:b9:89:11:06:53:a3:f8:
97:b9:db:f9:df:07:1d:80:b8:12:af:b9:62:aa:b1:3c:29:44:
39:ec:fb:7f:34:b9:ec:59:10:5c:0b:b2:1e:ad:5f:cb:0d:7f:
28:e1:e3:a1:a1:84:af:25:62:b4:ca:b5:b4:c1:1a:b8:0d:5e:
b4:d7:5d:58:78:a8:db:92:8a:fe:dd:f8:bc:12:2c:6d:7d:39:
4a:99:c5:da:9a:a5:fa:9e:68:eb:ec:5d:92:d3:d9:34:06:95:
dd:50:c7:e5:1b:1d:48:2a:56:43:1c:dd:6e:a2:06:cc:46:22:
a9:d3:e1:5d:9a:4e:1c:5c:9e:ec:7f:54:ea:98:95:e1:ea:14:
94:f5:fd:c1:5f:41:63:a6:03:21:60:84:91:f6:ad:26:03:70:
4f:80:51:40:64:a8:01:18:03:29:c8:fa:72:99:82:2f:79:c7:
69:7c:9b:b4:cc:8c:4f:68:ca:29:72:19:41:87:d9:c0:72:0c:
c3:49:c2:85:6e:6e:14:c2:fe:bc:42:1f:13:e3:9f:66:c9:b0:
d2:b3:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:11 2025 by rpki-client