Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: 1asfosWIgzl6xt60j8K0O5VxWZc+PxPGx4N2Tm2FQyI=
Subject key identifier: 2B:8B:CA:96:36:AA:B1:DB:95:E0:B5:16:B5:A2:0C:88:85:C2:80:8E
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 019A4EF58973B3F9833C1C52D619AFE14211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 1314
Signing time: Tue 04 Nov 2025 13:01:45 +0000
Manifest this update: Tue 04 Nov 2025 13:01:45 +0000
Manifest next update: Wed 05 Nov 2025 13:01:45 +0000
Files and hashes: 1: PNXE3f7nm-ojlPdvV_1yYpzHd1o.roa (hash: TFO2XkeOQG2ZuVhhUVPTDBMBQ7rIutsnw7Dyad/B8zE=)
2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: QXlQsXASCR3OmRVKwJr/uEe7LBqwkNQmkK8jPuALIfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:89:73:b3:f9:83:3c:1c:52:d6:19:af:e1:42:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Nov 4 13:01:45 2025 GMT
Not After : Nov 5 13:01:45 2025 GMT
Subject: CN=2b8bca9636aab1db95e0b516b5a20c8885c2808e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:ab:1a:a7:88:f0:37:80:8d:58:3a:04:8f:
56:ed:22:fe:d9:cb:d7:1e:20:94:a8:9e:09:0d:2b:
ce:0a:2d:fc:58:ff:08:13:d1:34:e2:f2:77:c6:63:
01:c6:59:3d:71:7c:f0:22:9b:04:fd:fa:0b:0d:0b:
12:52:0b:0f:51:dd:f9:38:c7:6a:2a:61:a1:b0:a7:
41:c6:27:9d:14:74:5e:f5:f1:cc:c6:7b:f7:08:9d:
66:16:74:7b:f2:43:7d:61:2d:f1:d9:25:16:12:ca:
2c:fb:f9:11:8c:4a:dd:68:a1:96:ea:70:d8:53:78:
70:e5:2e:ce:9e:b4:fb:1c:f6:09:96:1c:e9:8e:0c:
41:b9:f5:27:f8:5e:e8:82:c1:8e:43:fe:3a:75:0f:
88:70:d5:82:1f:de:19:24:4d:dd:99:72:8f:2b:49:
17:a9:76:d8:28:00:77:19:45:ef:45:0a:81:46:ce:
39:ca:ca:3c:91:70:ad:ef:56:99:d9:d7:ae:36:e9:
fb:f7:a3:81:48:32:fc:ad:89:40:07:20:52:70:3e:
26:a4:77:4f:5e:ff:65:01:f1:e8:e5:f3:81:f2:0b:
23:1c:b8:d2:9e:50:c0:a4:bc:e7:55:98:f8:66:61:
f6:ec:54:0f:39:b6:1d:51:f7:76:6d:25:dc:ab:19:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8B:CA:96:36:AA:B1:DB:95:E0:B5:16:B5:A2:0C:88:85:C2:80:8E
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:64:a4:8d:43:0b:94:8e:b0:db:fd:13:b4:55:ed:2a:23:73:
9e:dd:e5:3c:ce:fd:21:cd:33:55:80:28:34:79:1f:69:d0:17:
a6:0f:07:a7:a4:85:6a:13:b2:0c:15:c3:2a:75:b3:66:d4:7f:
80:b5:21:1a:34:7a:f9:e7:76:f2:55:89:3b:5f:97:64:a3:7e:
4c:f7:5c:de:a0:41:03:f4:6b:01:53:c5:b0:61:ed:86:7e:e5:
73:d9:2f:63:3b:21:c8:7d:39:d2:3f:04:76:9f:35:97:58:18:
d7:f1:be:c6:87:37:bc:57:f0:f8:63:61:f6:11:eb:e5:98:63:
be:e1:96:e3:85:ac:0f:1c:0a:f1:a9:eb:cc:b1:bc:f3:41:9e:
42:d2:ab:2e:76:0e:c4:d9:e8:32:8e:ae:e6:7e:76:ba:3b:21:
96:5a:80:bd:1a:cb:03:c1:79:da:72:cb:ca:d3:0f:b1:bc:19:
46:dd:01:c3:4e:9f:60:6f:18:c1:0d:9e:72:5e:9d:5a:11:ab:
8b:fb:d0:09:94:9b:f2:91:9c:06:d8:f5:f9:e7:57:75:ce:5a:
65:f1:35:68:92:96:1e:f6:51:31:d4:06:24:0d:c3:ec:37:52:
02:b5:94:7b:37:f8:f4:30:c3:e6:be:68:8f:e0:70:6e:83:22:
95:7e:4d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:17:05 2025 by rpki-client