Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
File: CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json)
Hash identifier: sLIYlzVP2Jbre9Ufpp/8+mOpU6/C9HvU+Blqa+Wlwo4=
Subject key identifier: DA:5D:31:CF:D4:0A:6C:4C:33:5F:82:EB:C0:6C:F6:0D:CE:7F:AC:06
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 019A4EBD5D144936D4F493C1633B2514AC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 12:00:24 +0000
Manifest this update: Tue 04 Nov 2025 12:00:24 +0000
Manifest next update: Wed 05 Nov 2025 12:00:24 +0000
Files and hashes: 1: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: rJLmmZa9N+0Ol+JojbP1CIPdJGlFd+cQyLkFMfXb/C8=)
2: GP2HIzJfCfnGM2MVlkSHwUHaN84.roa (hash: ETW1pgFwQtTKE9AFyJGtQ+Xl0Zj/E5KZv9xhDaWW5T8=)
3: qfVV9jSGkUSpTVAmIfthWu05Cnw.roa (hash: UbRHP3L39dp/ZkCYjMy0IuUuv/BT0urLDu7xXNtiXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:5d:14:49:36:d4:f4:93:c1:63:3b:25:14:ac:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: Nov 4 12:00:24 2025 GMT
Not After : Nov 5 12:00:24 2025 GMT
Subject: CN=da5d31cfd40a6c4c335f82ebc06cf60dce7fac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:86:16:ea:47:a9:4c:92:d1:6e:11:69:da:
89:b4:92:ee:9b:6e:06:28:b6:da:cf:ce:f0:cd:4d:
b2:0f:5b:7f:5b:5c:85:b6:92:9f:35:94:25:b2:15:
1b:89:f1:31:8b:86:3b:ca:bd:da:b2:4f:6b:5b:f3:
1e:ba:d3:d9:41:81:c4:37:46:d4:51:4b:e2:6e:32:
16:b2:6a:21:67:89:34:97:43:d5:61:04:74:c6:2f:
38:87:c5:0c:bc:75:1d:26:9c:67:52:a4:d0:c1:b3:
e0:e1:d4:4b:cc:50:b8:e0:99:d9:e0:1f:24:6b:7e:
03:c4:02:f7:09:0f:01:37:a7:d2:cf:e8:ef:d5:06:
df:4e:a9:b0:ff:97:a5:26:a9:8b:dd:a5:06:a7:0a:
8e:bf:6c:1e:4d:52:1a:b2:c7:57:51:1a:53:b9:30:
73:13:d6:68:4f:b0:41:a4:0c:27:7f:b9:06:8d:c5:
c5:1c:d8:74:0a:f2:ba:32:2b:79:90:41:8c:70:fa:
92:86:d5:f6:8e:c5:d8:15:9c:a2:85:df:e7:8a:44:
4b:98:52:d8:3e:21:09:5e:8b:56:f1:46:9d:c2:68:
d9:5b:ce:4f:eb:51:86:65:1e:05:ed:ea:33:d7:10:
0e:7e:61:e0:bf:c0:bd:b4:33:7f:3e:f6:dc:a5:bd:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:31:CF:D4:0A:6C:4C:33:5F:82:EB:C0:6C:F6:0D:CE:7F:AC:06
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1a:bf:02:ac:59:8d:37:89:d1:b9:a5:cd:9a:5e:79:fe:94:
fb:74:bc:a4:f5:68:16:db:69:a7:57:b9:9d:01:31:90:ad:f6:
b4:8e:b4:72:5e:3f:c7:5e:60:fc:5e:3e:c8:ed:5b:ac:08:de:
b9:fd:4e:8c:15:26:13:3f:df:56:6e:81:3a:f1:bf:89:b5:e5:
a9:8f:be:99:b4:57:f6:ca:38:4a:bf:f2:f1:3d:0a:67:5a:21:
7e:aa:7f:f3:a8:7f:d0:4d:ba:28:74:0d:63:ec:bf:d8:14:0c:
f4:3c:65:19:0d:99:1e:21:ae:cb:13:eb:8e:be:c5:01:d3:ae:
7f:e8:8e:7b:a1:18:6b:df:19:76:72:00:af:74:81:5a:eb:28:
fe:9e:cf:ca:00:9c:f6:8f:ba:94:b8:44:0a:3f:af:a4:69:df:
08:de:6e:43:6b:e6:95:f8:47:90:73:4c:ae:68:91:47:65:fc:
01:2c:68:37:c2:c0:09:fa:97:7c:09:34:4f:8a:89:47:97:19:
57:5a:fb:44:99:a8:06:6d:b0:f7:ad:d5:6c:79:07:48:0b:88:
a3:80:b2:75:0a:1c:46:da:1e:6f:6f:bf:15:1e:ab:ab:56:e3:
2a:9d:81:24:57:89:74:9a:79:38:a0:58:21:bf:d1:37:92:ef:
ce:61:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:13 2025 by rpki-client