Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: YOiUtGbJVQTmAFoDrNeMbzED2Zx+lnu1oZYTGmHZrc8=
Subject key identifier: 02:81:96:2B:C8:E7:E8:DF:80:FB:5B:71:EA:5A:B7:D3:9D:BF:51:E4
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019A533EC5FE6557923636308B84D9CB06D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0A08
Signing time: Wed 05 Nov 2025 09:00:14 +0000
Manifest this update: Wed 05 Nov 2025 09:00:14 +0000
Manifest next update: Thu 06 Nov 2025 09:00:14 +0000
Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=)
2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=)
3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: 4AKQyzmITPjDWKn0pvXzSU3TvtHJhjhiXf41Z5Wm3i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:c5:fe:65:57:92:36:36:30:8b:84:d9:cb:06:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Nov 5 09:00:14 2025 GMT
Not After : Nov 6 09:00:14 2025 GMT
Subject: CN=0281962bc8e7e8df80fb5b71ea5ab7d39dbf51e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:08:08:e9:fe:d8:e3:24:4c:d4:77:c5:ef:
88:8d:37:58:d4:24:16:d3:92:0a:64:ce:02:1b:7b:
ff:49:71:11:28:82:74:3d:4c:bd:a2:40:25:16:34:
52:71:0b:1a:4d:b5:90:ff:f3:c8:50:14:37:d8:e1:
bc:b8:da:3a:3e:5f:8f:80:d7:a3:39:24:79:df:b3:
2e:8e:e7:55:79:1d:64:b9:01:71:14:45:dd:ab:f6:
e1:a9:ca:ef:2f:a6:78:e0:ad:97:d4:4d:85:f4:2f:
64:96:44:3b:c5:79:73:68:15:2d:72:12:97:df:9b:
69:df:70:00:8c:76:f0:38:43:d7:4c:c0:c4:83:97:
03:bb:1f:04:09:95:77:28:a3:5b:76:30:50:a9:6d:
1f:14:a1:92:ae:d7:97:a1:39:af:6e:b7:8d:15:75:
9f:a3:ca:9a:51:0a:06:2a:42:20:33:4d:0a:94:f4:
d8:70:29:a3:91:8d:cf:7f:69:f5:b5:f4:67:a1:a0:
e4:f4:7f:7c:14:ac:36:d2:df:58:ba:82:02:9a:6e:
5e:0a:d4:6c:de:8d:c1:35:1f:03:9e:2c:bd:a5:ec:
29:9b:58:15:28:01:8f:c4:3e:02:3d:4d:57:99:bc:
3b:da:27:55:00:b2:ee:83:53:86:39:f3:d9:31:3b:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:81:96:2B:C8:E7:E8:DF:80:FB:5B:71:EA:5A:B7:D3:9D:BF:51:E4
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1a:00:e5:c9:0a:b5:5c:90:1e:27:4e:f9:29:9c:90:94:50:
26:fd:bc:aa:b8:6a:10:cd:b4:46:96:9c:40:2d:6e:89:6c:de:
f7:f5:ea:9a:8d:8b:43:9c:f1:80:72:5e:8e:a1:04:f9:c1:84:
32:ed:fb:da:f5:b5:4f:55:43:9f:de:f6:c3:42:cf:24:33:93:
d2:52:8d:b7:c3:08:a6:ee:f9:48:80:0d:92:06:01:49:ff:fa:
c6:02:6b:4c:10:6f:12:25:fe:15:ea:b6:1d:83:0c:8b:9c:a5:
fe:14:a6:fb:00:f0:70:85:08:59:3d:55:0f:5a:0d:ff:8b:b0:
10:5e:1f:a7:6d:e7:46:53:39:cb:c8:de:de:97:57:1d:a9:05:
38:5d:7e:30:9e:9b:d1:f3:94:ef:0d:64:ba:fa:9c:67:45:1f:
c8:b4:03:df:ba:c2:d8:85:c6:fd:78:b1:07:80:ba:63:a8:3e:
dc:13:72:8d:16:22:81:be:e6:ba:06:75:55:86:55:2c:6c:dc:
7b:f5:52:f1:88:be:0d:5d:b3:c3:20:8a:11:95:e0:66:fa:be:
ae:21:41:cb:69:73:c4:70:4b:71:fb:d6:ff:79:76:32:68:c3:
52:67:b0:e7:56:25:8b:62:fe:c6:ac:32:bd:5e:76:ed:ec:32:
c9:15:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:32 2025 by rpki-client