Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: dUofaQag2PY7EIeuXM6DFndDlN58hz6WeKbB036wxEg=
Subject key identifier: D9:68:43:6A:71:A4:6A:43:E8:74:9D:29:F9:68:B9:0B:B9:E9:70:20
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 0199FC587C0068391D42AA790F772D4D5946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 06D3
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: OJUcVzJnuMKoWVI74lQHfmW8E7yWbUO/eTH2PhAesc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7c:00:68:39:1d:42:aa:79:0f:77:2d:4d:59:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=d968436a71a46a43e8749d29f968b90bb9e97020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:73:2f:a5:ee:f6:e4:bb:8f:14:67:73:4d:
85:d1:53:8c:0e:81:0f:ac:1e:6a:79:5c:b2:8b:4a:
09:07:aa:cc:e7:01:f0:68:50:9a:a8:70:fb:46:88:
53:fe:25:8d:84:9e:81:4e:c8:a7:0f:a6:a3:10:34:
49:0b:89:e9:31:fe:dc:c1:c7:b6:31:cc:eb:c6:06:
cc:16:f2:a7:6a:8f:c9:5e:67:7b:ad:af:e8:c7:b7:
de:96:50:37:31:69:e3:85:fd:ef:9a:88:61:85:e5:
ff:ff:38:f6:81:2f:54:4e:01:ad:cf:d4:da:77:d5:
e5:2f:de:dd:e9:8b:96:ed:8c:ee:21:ec:d9:54:cc:
c1:fd:3a:35:bf:de:af:47:46:20:dc:e5:e5:61:8d:
66:76:18:8e:06:2d:10:17:a3:f2:de:2b:a5:92:67:
af:a1:60:89:76:1c:47:7f:5e:a9:23:0b:cb:c4:d7:
4b:81:f5:1e:2b:a9:16:40:9b:0e:28:16:2f:2d:cb:
86:9e:91:26:be:f8:95:a3:3f:57:06:56:ec:ec:87:
01:ee:69:f8:8b:02:34:8e:a2:47:b4:e6:69:6c:30:
c1:60:a5:04:fd:bc:6c:8f:14:6b:29:a1:47:be:45:
36:48:3d:e4:1b:ec:52:0a:67:e1:62:01:5b:65:97:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:68:43:6A:71:A4:6A:43:E8:74:9D:29:F9:68:B9:0B:B9:E9:70:20
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c3:7f:3a:08:dc:6e:86:56:0a:64:3e:aa:b7:1d:f3:01:6f:
d1:48:e3:7c:75:17:40:3d:f4:86:c5:74:3e:75:a4:21:10:29:
3b:0c:49:79:44:22:03:f3:1c:50:ca:ef:f3:02:c9:be:f9:41:
57:d2:30:85:5e:f3:06:d5:c0:fe:74:99:31:15:14:f0:be:86:
00:dc:29:19:b5:51:80:57:6e:9c:05:0b:9b:dd:6f:d8:f1:e0:
3f:8e:70:b8:3f:33:c3:5b:71:04:3f:0c:de:4d:36:9f:71:9b:
49:a2:15:b3:50:be:18:82:f1:4b:4e:c6:5e:7a:24:20:e5:0b:
db:15:34:83:86:2d:f6:a2:a8:ff:b6:f7:2f:a0:b2:25:28:31:
f5:ad:b8:61:5e:51:4e:2e:a5:bb:48:46:a1:56:c8:f2:0c:61:
03:f5:a5:6f:71:7d:ce:54:06:d9:4f:56:af:bd:fe:a2:72:61:
2b:94:8b:58:8e:3b:d6:5a:51:4a:44:85:5b:4a:2c:8d:2d:b3:
ee:b0:ec:2a:75:d1:d5:e0:d4:bd:34:a1:fb:f3:eb:1d:d9:82:
c6:c6:d1:1d:bb:f1:c7:c0:17:b1:1a:8f:7c:0e:eb:05:2c:21:
d7:84:2f:4f:aa:e8:f3:25:1c:6b:16:a9:e4:ac:93:33:89:f2:
f8:b6:af:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:09 2025 by rpki-client