Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: z55nPEfGY6vQaVEAb5grFSZqvnHUiHLVNZ7KKZ/rMXs=
Subject key identifier: 8D:D5:8D:9A:FA:99:D8:6E:F3:DF:F4:46:7A:1F:BA:76:A3:36:58:00
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 0199FBEB785B4D786ED56798245DA8259193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (hash: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=)
2: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: EmdvTQmBoRGmy7gWuMqKNqM4Lv3uE4xfiyRwUXZZ+ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:78:5b:4d:78:6e:d5:67:98:24:5d:a8:25:91:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=8dd58d9afa99d86ef3dff4467a1fba76a3365800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:5a:b6:80:19:86:f2:fd:02:05:16:f7:44:
a1:74:27:d2:30:5d:37:0e:67:86:cc:0c:2a:4e:c1:
e9:d5:51:fd:c4:1f:b8:1f:24:e7:6a:12:e2:7c:96:
94:c3:ac:e0:3f:54:2e:8e:90:0f:b2:d0:ca:05:63:
ed:fb:aa:77:cb:3f:ef:71:d7:15:ea:78:ec:21:bb:
51:16:a6:cb:a0:71:c3:2a:43:f0:a8:9a:6d:dc:ff:
a4:c3:91:0c:09:a7:2a:dc:9f:1a:19:d5:18:8e:53:
d8:32:43:af:79:92:f0:fb:90:a7:14:d3:4d:1e:e1:
af:ad:c7:11:74:0e:6e:13:b8:4a:cc:dd:8c:10:27:
fc:22:cd:4c:71:26:32:92:6b:2c:6c:37:83:1f:e4:
be:ce:1f:bb:da:71:59:8b:e8:27:e6:f9:a7:2f:21:
d9:85:e2:67:9d:7e:2b:ec:a4:55:c4:0b:82:bb:b4:
c2:57:68:cb:fb:3d:84:00:30:d8:99:69:d1:01:97:
2e:10:d4:7b:4d:d7:5c:6f:53:5e:2b:0b:99:c8:20:
c6:26:e1:e9:4b:8e:c9:13:e5:67:0c:2c:7d:f7:a4:
cb:0e:6e:39:ab:73:58:f5:bd:f8:b7:d3:83:e5:77:
7b:9c:f9:bc:f1:95:ad:3e:72:a7:e0:91:6e:01:04:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D5:8D:9A:FA:99:D8:6E:F3:DF:F4:46:7A:1F:BA:76:A3:36:58:00
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:12:28:d6:c6:d9:fb:f7:b9:cb:38:d4:50:c1:8d:da:e8:3a:
a2:d6:ed:5d:81:d4:74:5c:33:43:1a:90:5c:21:a1:a2:7a:4c:
4a:88:eb:81:04:bf:30:bc:2e:fe:42:5c:57:d1:32:9e:fd:42:
58:ff:e2:5e:36:2d:72:30:07:87:0b:27:b2:f2:6d:ef:d3:c3:
84:d9:3c:69:c2:8b:e1:ec:be:6a:4a:38:8e:91:d5:d6:01:a4:
df:7d:25:d6:f8:aa:3b:b6:2a:fd:73:cd:41:8a:f6:9a:c3:14:
63:e3:f0:df:b7:f6:27:89:33:05:d3:5d:22:70:a7:bb:19:ac:
24:2e:84:93:10:39:b9:41:7e:33:79:ff:97:e5:2e:ee:b0:a9:
e0:47:59:49:8c:5c:8c:96:0a:98:b0:f8:a8:ff:57:c8:86:ad:
2c:20:d1:2b:2a:8d:2c:59:85:00:9a:5f:ff:54:02:20:82:75:
40:7f:41:34:cc:c3:c9:8f:a9:a3:19:6f:9f:e8:45:f2:a4:88:
73:d3:b1:b5:c9:23:4b:9a:16:54:8b:03:cb:5f:db:1e:17:ae:
56:21:bc:04:11:0a:c9:fa:8e:01:f0:30:c8:b7:02:65:c7:f4:
3f:66:0d:39:11:40:57:50:b3:45:82:b3:c6:09:8e:8c:e6:7b:
04:a4:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:01 2025 by rpki-client