Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
File: cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json)
Hash identifier: u2ISk9CriyB1u/ugve6FifZQlzRuE1mE/hbYXLDvrpM=
Subject key identifier: 88:22:1C:D0:27:9B:70:E4:70:45:E0:75:41:5E:A6:76:31:78:BB:DB
Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
Certificate issuer: /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Certificate serial: 0199FE468B328BB7F2B4C17A3B69BC1CB8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
Manifest number: 0E7E
Signing time: Sun 19 Oct 2025 21:00:59 +0000
Manifest this update: Sun 19 Oct 2025 21:00:59 +0000
Manifest next update: Mon 20 Oct 2025 21:00:59 +0000
Files and hashes: 1: 7oIzidmPV5DMaJu71KEE7TN3jrE.roa (hash: kCtY+zZ5Nv1Tl34nUDS681Pc5/oW0aaVlayqB3KyvjU=)
2: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: rR5I9LCgZ+vcVXWzQUegs+rsmse11ggPXQMpTPGw0FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:8b:32:8b:b7:f2:b4:c1:7a:3b:69:bc:1c:b8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Validity
Not Before: Oct 19 21:00:59 2025 GMT
Not After : Oct 20 21:00:59 2025 GMT
Subject: CN=88221cd0279b70e47045e075415ea6763178bbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:21:1b:cc:09:86:d6:c2:d6:0d:8e:bf:df:
0e:f0:8c:1a:55:34:3d:29:26:38:c7:73:7c:5e:17:
22:9e:90:f4:14:97:8d:6e:dc:9e:23:60:7e:f7:3f:
4e:e6:db:85:e5:b2:11:fd:be:c8:ff:bf:93:5c:c5:
76:cc:78:7d:d7:3a:77:67:55:61:93:b8:a2:d7:78:
e7:a9:53:ba:3f:ed:78:05:7c:8f:ef:92:e0:f0:13:
71:b6:bf:9f:57:c8:c9:24:88:ab:df:e4:0d:bc:17:
37:81:fd:8a:87:b9:bb:7b:b8:e3:9e:f5:8d:c3:a2:
7b:ea:27:b8:19:aa:e0:8f:48:18:de:9b:67:1d:50:
57:02:6a:4f:01:6d:79:8f:28:43:3b:8b:bd:0a:ad:
bc:e1:17:ed:65:27:1e:e6:0b:b1:7e:a2:4c:13:88:
56:6a:e5:e4:41:8d:d4:78:ee:eb:7b:24:4c:af:77:
a2:e3:d5:d2:de:81:09:fd:d5:77:f9:65:41:b6:92:
f3:90:78:84:66:59:0a:c4:40:11:c2:cf:9c:f7:62:
8c:5f:d2:2a:8b:55:5d:db:5b:37:27:67:af:d7:c2:
17:6c:78:ab:7b:4f:b8:a8:c2:6c:cc:99:a0:7c:c2:
61:fc:a8:f7:7e:d0:07:23:7a:ba:66:89:cd:23:c0:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:22:1C:D0:27:9B:70:E4:70:45:E0:75:41:5E:A6:76:31:78:BB:DB
X509v3 Authority Key Identifier:
keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fc:6d:58:9d:5f:ee:44:7e:03:c8:9a:35:6b:ef:99:e7:a2:
54:39:c9:b4:a5:11:4d:ef:72:e3:eb:1d:3d:17:d2:9b:ed:4f:
57:e9:bd:d7:1c:72:63:fa:3b:1f:b8:28:b7:97:dd:ec:6c:a7:
63:bf:c6:06:e5:b5:17:24:2f:ad:4e:c5:a1:29:ac:e2:cf:88:
98:ec:93:01:da:99:c1:46:29:21:98:62:7b:df:99:30:ca:7e:
c9:0e:ea:78:59:df:67:98:e4:d8:b4:bc:16:d8:c2:9c:43:07:
bb:1d:f6:75:cf:2e:09:a0:2f:c7:9d:4e:d0:34:aa:3e:97:af:
b6:4b:80:9f:64:4a:ab:9f:5b:8f:f9:b4:45:17:cc:9e:72:16:
5a:d9:d4:42:3c:99:cf:1c:97:5b:71:f6:f1:c6:c4:a6:b0:a5:
74:de:47:f3:f9:dc:8a:e7:0e:2c:7a:1a:89:fe:45:33:e2:f1:
d4:88:04:e8:e4:28:f3:8d:44:27:5e:b7:37:a9:94:87:07:76:
01:ec:f2:69:8e:a4:5e:b4:e6:03:f0:d0:a6:4a:e1:22:22:c0:
ce:a2:03:4d:56:fe:bc:06:92:d3:db:a0:3f:64:3e:6d:de:1b:
f7:f4:a1:79:40:aa:87:ce:34:50:1e:70:01:9d:82:66:9e:03:
0f:48:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:59 2025 by rpki-client