Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: GEmWGM+Yw4wJ2aosED75xPIfhTxdVmEWf8X6l3qadno=
Subject key identifier: 67:66:09:6D:01:B5:2E:90:EA:1B:7E:58:F0:51:4F:63:E1:A0:8B:2A
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 019A4F620B82401FEE92F63B283D56888D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 1446
Signing time: Tue 04 Nov 2025 15:00:16 +0000
Manifest this update: Tue 04 Nov 2025 15:00:16 +0000
Manifest next update: Wed 05 Nov 2025 15:00:16 +0000
Files and hashes: 1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=)
2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: s6ANMOOUa+ulKpOkonffqhdyrlPeJa2hd+cimE0XBgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:0b:82:40:1f:ee:92:f6:3b:28:3d:56:88:8d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Nov 4 15:00:16 2025 GMT
Not After : Nov 5 15:00:16 2025 GMT
Subject: CN=6766096d01b52e90ea1b7e58f0514f63e1a08b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:7d:c6:ec:a8:46:4d:76:8e:f7:c4:38:f6:
d6:60:74:56:96:b4:85:3e:bf:65:7d:5e:47:40:e5:
fd:76:0f:40:7e:99:f4:fb:95:eb:3d:93:cf:b7:a3:
91:44:8e:ff:0e:24:47:98:b9:ae:33:b8:57:8c:64:
da:84:a7:a9:10:4f:e1:d8:e0:95:da:54:9a:c5:31:
1d:9b:fc:8a:0f:01:02:c5:5c:e8:f1:fd:ba:29:39:
d5:d6:01:b4:1f:fd:e0:48:dc:e4:e2:c8:35:3c:e3:
3f:ed:03:d5:1f:66:bb:e2:40:69:0d:f4:6c:31:c1:
1e:ad:72:1d:0c:7d:24:8f:75:2f:8e:9d:66:e3:9c:
7a:9e:4f:a5:1a:ad:70:0b:05:e0:f9:e1:32:77:49:
f6:59:8c:bd:63:91:d3:1b:f1:68:0d:b2:19:bb:c2:
53:93:7a:41:b8:4d:b9:64:0c:5b:d8:67:55:d2:f9:
f1:34:ce:78:fa:a5:10:ae:e8:b8:5a:76:e8:ea:59:
fb:5d:c5:c2:df:ae:57:d2:53:9f:65:92:75:d0:fb:
68:23:a6:a8:8a:49:16:44:42:69:0a:2b:d6:5f:ff:
c6:39:d0:fb:28:02:9d:99:65:8d:eb:4c:d1:28:5c:
1b:3d:cf:ec:c4:e5:d0:74:37:73:84:d0:c0:d2:ed:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:66:09:6D:01:B5:2E:90:EA:1B:7E:58:F0:51:4F:63:E1:A0:8B:2A
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d3:cb:66:12:b3:56:cc:47:ec:40:b5:c7:de:53:f0:14:79:
92:b5:c1:6b:87:f3:a1:95:f1:0c:30:48:98:e7:29:fc:a4:cf:
33:1b:a8:45:62:e9:4c:35:e0:ae:ac:1b:fc:6d:b1:a7:d2:24:
b5:23:6c:70:6f:46:33:be:2f:85:17:fe:11:79:c0:6d:fb:8b:
12:5d:f3:66:37:c1:e1:9c:77:1f:bb:40:72:2e:5c:47:26:5a:
c9:59:8c:7d:fa:16:96:c7:d0:ec:4f:40:11:ae:27:bb:98:85:
1e:64:18:7e:ef:6d:e2:ac:f4:a2:53:00:12:7e:fa:f7:24:46:
cc:f9:df:d5:ee:48:37:10:aa:2b:64:d5:4c:76:84:15:c1:01:
48:78:e6:67:1d:36:57:e4:cf:c2:c9:2f:e6:97:d8:12:5b:1d:
25:dc:4a:94:9c:70:cb:49:a9:7d:16:8e:d7:53:30:c3:f2:1e:
88:6a:5f:2f:7f:92:e2:d4:20:a3:09:36:9e:e7:c2:54:32:a1:
0c:71:f9:a4:38:6e:57:3f:2f:f8:74:40:9f:3b:f4:42:ea:1d:
90:bb:bf:22:5b:07:c1:c2:4c:e7:ca:bf:1d:90:be:16:2f:8c:
03:a9:e4:61:13:e3:ff:33:85:33:19:0e:7c:48:f6:26:61:15:
8d:31:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:56 2025 by rpki-client