Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: dxfcSmSlRL5ZsaaxRdAYPvC/m0h4qLtJyFlWMTwzNwQ=
Subject key identifier: 49:53:47:1F:5B:18:1E:1C:DC:0F:EA:22:E2:F1:DB:A4:54:BC:B1:1B
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 019A4EF3FA422627976C629A03CBFD8EFC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 1251
Signing time: Tue 04 Nov 2025 13:00:03 +0000
Manifest this update: Tue 04 Nov 2025 13:00:03 +0000
Manifest next update: Wed 05 Nov 2025 13:00:03 +0000
Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: d7tdg8yAs+CkADzD0vu293M9C6w8tFGFKk8BYRbPMKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f3:fa:42:26:27:97:6c:62:9a:03:cb:fd:8e:fc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Nov 4 13:00:03 2025 GMT
Not After : Nov 5 13:00:03 2025 GMT
Subject: CN=4953471f5b181e1cdc0fea22e2f1dba454bcb11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:ff:17:0a:fc:19:97:a3:66:fa:8a:bd:32:
72:fc:d7:d6:a2:aa:ae:c6:3e:1d:1c:2a:f6:e3:bd:
75:d9:8a:24:c3:6b:c0:04:ea:10:6f:5c:b0:32:7c:
ae:1b:d3:bd:aa:ef:b1:1e:ad:19:b8:ff:09:e2:2c:
94:7f:ee:75:7a:03:52:27:ca:85:de:a6:06:48:98:
81:b3:2f:52:f9:8b:2c:3c:b7:66:ab:66:65:2e:ab:
41:10:80:67:97:63:1d:b3:c5:55:05:35:78:3f:a1:
03:b8:57:37:ab:7e:eb:87:c8:27:41:20:44:f7:c9:
47:d0:43:28:96:47:5b:a2:15:98:a2:12:ff:22:a7:
5c:c8:5d:2e:08:29:5e:c8:58:7b:84:67:97:1d:2e:
a0:02:e1:97:1e:22:f4:09:1a:28:e6:cc:58:8e:52:
9d:55:b8:ce:3c:6c:b2:ed:85:0b:28:00:37:8b:7c:
9c:e5:67:7d:50:93:cd:39:2f:a7:ed:dc:82:59:15:
ae:b4:ba:d3:89:5c:a7:22:bd:34:10:5a:66:03:90:
f7:a4:b7:7b:48:29:78:44:7f:de:d4:83:5b:15:77:
2f:06:ba:90:f0:81:ca:13:08:df:0a:0d:c7:86:a1:
62:3a:29:ff:ab:bf:a4:df:8f:70:38:b4:6d:10:7a:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:53:47:1F:5B:18:1E:1C:DC:0F:EA:22:E2:F1:DB:A4:54:BC:B1:1B
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ce:3c:88:1f:c3:77:20:2a:f3:a9:49:85:07:da:86:95:c1:
1d:d3:dc:18:59:3b:e4:27:3a:1d:fa:82:b1:4d:1e:08:c4:59:
b5:7d:e5:04:f2:1c:a1:a4:cd:8a:93:e2:8e:d2:2b:38:84:fa:
4f:c6:1c:29:88:83:53:bc:b6:2c:8b:3a:d1:8c:34:0a:a4:63:
1a:99:16:f9:46:d4:df:c1:15:71:57:89:47:ea:75:0d:54:a2:
d0:84:5d:ad:66:e2:61:82:eb:5c:66:0b:d2:40:fb:7f:70:17:
54:6e:cf:93:8e:df:e7:48:3f:d5:8c:5c:e5:7a:7b:fe:f0:e9:
ef:1e:2b:73:4e:76:45:13:56:5f:8a:48:89:52:0f:9a:d9:54:
63:47:cc:46:99:5b:e2:00:dc:d5:fc:67:f4:66:4d:43:48:e8:
b6:59:73:fb:16:a2:e0:ee:c1:a4:05:8f:8e:97:ee:7a:d2:93:
0e:af:5f:9c:34:8b:92:64:07:7a:d3:a0:18:84:75:9e:d3:e9:
93:66:5c:61:15:4b:f7:c1:4b:c1:bd:7c:ff:bf:ce:2a:4b:94:
df:72:0c:65:ec:cd:0a:ad:10:42:cc:13:3d:f1:da:4d:a1:4f:
29:b6:61:85:d1:d2:32:fc:dc:a9:06:80:6a:4b:df:bb:51:57:
7a:84:d5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:32:24 2025 by rpki-client