Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File: CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier: Zr/hzToTotwDmtnNdXPlngfnffwPCgIRz0DHP7pqRa8=
Subject key identifier: 42:91:90:4F:80:6D:F8:DD:B0:EB:16:26:75:39:A1:DE:23:58:77:A6
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial: 019A4EF41724065149C65142DD13F8C6AD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=)
2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: FxdIzF+2DQg/qbWfckZveMpHPpEsOFzKq6nknjY+/4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:17:24:06:51:49:c6:51:42:dd:13:f8:c6:ad:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=4291904f806df8ddb0eb16267539a1de235877a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:0c:d7:47:12:a7:44:d2:57:5c:0f:bf:66:
ce:e9:cb:83:65:16:02:ab:b4:4c:88:62:1e:01:07:
8a:d5:02:e3:46:c4:ab:09:98:1a:30:99:4e:14:c3:
f4:52:4b:6a:b0:67:37:93:ad:c8:5d:8e:b7:c8:d8:
32:4f:c9:0f:e1:c9:24:88:d8:e1:aa:e5:91:d4:45:
ff:2a:47:84:5a:06:9c:f2:fe:4a:c1:1c:a3:75:38:
1f:dc:6e:47:59:ca:dc:15:fe:db:6a:20:3c:bb:09:
69:bd:ec:97:49:50:ec:34:92:ec:df:92:a7:67:d4:
1c:c5:84:0c:49:d1:34:ff:cb:3b:84:18:a6:84:b3:
80:db:6b:59:b7:09:57:08:96:f5:56:5c:37:19:f7:
31:d1:9c:91:bb:d3:54:23:6d:38:72:92:a7:2b:77:
b9:0e:83:8e:00:4c:0a:fa:67:6e:27:50:72:82:9e:
5c:63:7e:ad:4a:f3:40:da:d5:cc:b9:91:d7:23:d2:
6c:1e:31:ff:45:bb:ae:0c:66:f7:9b:26:8e:60:0d:
18:0c:bf:c1:4c:bd:bf:f8:79:8c:3d:51:10:2c:64:
66:1f:7c:92:59:0a:6f:5a:fb:91:9f:47:46:e4:05:
5d:8d:8f:92:59:fe:90:29:b3:10:7b:a7:54:f1:2b:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:91:90:4F:80:6D:F8:DD:B0:EB:16:26:75:39:A1:DE:23:58:77:A6
X509v3 Authority Key Identifier:
keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4f:7d:05:cd:29:da:c4:80:9e:5e:62:ff:92:3f:b0:56:eb:
a4:4f:8e:f5:45:b8:6d:73:ab:25:1a:de:a2:c8:1d:24:92:37:
82:b0:bc:91:8a:60:4c:04:40:87:d9:49:1c:24:90:27:4c:98:
3a:95:d2:6a:07:56:60:65:fb:b6:08:4e:97:0f:fb:2b:75:95:
70:e3:1b:68:e4:b7:2c:4a:73:39:dc:79:e9:01:26:fa:ef:47:
bf:d3:82:69:3b:a2:6d:fd:e7:1f:e8:87:5c:61:b8:df:3f:7d:
27:cc:f7:e0:ce:4b:70:45:75:7d:a0:a7:fd:9d:42:70:26:9f:
79:05:b9:44:09:6a:d4:95:05:ab:19:70:2a:6c:69:f0:b1:2b:
8d:4e:d3:8a:b9:d7:3e:b5:82:9b:b4:7e:2d:c1:e8:fd:46:cb:
29:ee:66:52:2c:ba:44:d3:09:0f:03:54:e0:be:84:5b:7f:d0:
57:2b:3e:8c:30:7e:0b:5b:06:e2:6b:d2:30:17:70:02:90:04:
70:a7:fb:69:42:49:92:16:a1:6f:37:7d:ea:88:30:91:bb:9c:
6a:ac:90:05:ad:ff:42:84:ab:78:8f:b0:31:5a:5b:a0:75:3e:
6d:0f:17:cb:13:b3:4f:92:8a:69:ed:66:f8:48:7e:0e:26:80:
5c:e4:1d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:23 2025 by rpki-client