Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: FIP3sCM22sa8l0lRy+eENe15fs+1TUBUJGxzRuRawiY=
Subject key identifier: A9:0E:F6:44:4A:F1:13:FA:00:0B:BA:DD:55:B6:EE:BE:31:BF:45:39
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 019A4F61D6EB81C34104F0B351E7E10E9AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:03 +0000
Manifest this update: Tue 04 Nov 2025 15:00:03 +0000
Manifest next update: Wed 05 Nov 2025 15:00:03 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: yLlaIpvnWcgF4WDhc+fehhd2wCdXkfRRxwqeHO93Duk=)
2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:d6:eb:81:c3:41:04:f0:b3:51:e7:e1:0e:9a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Nov 4 15:00:03 2025 GMT
Not After : Nov 5 15:00:03 2025 GMT
Subject: CN=a90ef6444af113fa000bbadd55b6eebe31bf4539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:b4:d2:8b:16:64:a3:32:5f:58:dd:ce:2d:
54:5b:7c:fa:6c:9e:c1:ba:e9:4d:cb:48:3d:c7:fe:
18:22:18:34:19:91:d0:9c:c3:79:b2:3a:1e:b5:87:
b2:d7:cf:3d:6a:9f:ed:71:39:1e:25:29:f3:37:b0:
52:56:e6:c2:91:48:53:70:59:be:d2:2f:5d:00:d5:
84:af:03:9f:17:c6:88:ac:3b:62:f6:e1:84:d0:df:
6d:f6:11:13:43:6c:e8:c8:2b:7b:51:53:37:90:f1:
bf:42:b6:f5:a2:48:ad:ee:47:f5:d2:ae:ef:8c:0b:
75:e8:aa:b2:55:41:b1:d7:03:4a:fb:74:e3:57:9d:
e9:d1:b2:73:bd:d5:81:98:5a:fc:25:41:ed:6b:c9:
62:0d:bb:68:18:6d:0e:a5:bc:71:73:b5:48:a1:ea:
cd:a0:e1:5c:12:78:96:ad:e1:89:f8:24:93:bf:e6:
9b:93:61:6a:73:48:73:4c:48:87:e5:62:bf:f4:b7:
04:07:43:5d:3f:48:5e:9e:46:df:37:8e:49:6e:67:
e1:0d:0d:25:14:1b:95:a9:22:63:88:4d:4a:4b:5d:
5c:2c:b2:8b:0c:1c:37:04:c2:04:b7:9c:23:14:8f:
c0:dd:b7:35:7a:f2:41:b6:9f:7d:6a:58:20:17:bc:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0E:F6:44:4A:F1:13:FA:00:0B:BA:DD:55:B6:EE:BE:31:BF:45:39
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f4:0a:25:29:8e:f8:7f:41:e0:e1:8d:89:74:36:29:ff:ca:
49:ec:c0:a6:69:f0:23:c7:37:28:65:8e:ce:fd:06:df:24:96:
c0:94:5c:67:5a:75:c0:d1:a6:7d:b0:ac:11:13:ef:60:d3:81:
58:b4:70:41:9b:19:fd:9d:28:95:e7:ee:6c:d3:ff:1e:d8:eb:
70:f7:6c:04:b2:91:70:fb:47:17:c4:82:f7:08:05:80:b5:ae:
ec:c0:0c:34:23:4b:96:33:06:51:ca:5e:f9:f0:64:0c:8c:ca:
7e:28:ad:dd:1c:b6:2b:32:0a:c0:9f:21:2c:73:62:15:9c:55:
22:0e:60:fb:1e:26:bd:7e:78:ba:21:85:25:71:d5:24:6b:dc:
0b:ca:45:f7:a7:8f:24:61:70:47:f0:cc:a6:e7:ec:d7:f8:48:
37:45:a9:72:4a:30:73:28:6e:43:87:9b:3b:8f:71:a4:2c:57:
19:45:52:ef:a2:d1:64:e4:6b:25:fe:b1:76:27:fc:5b:fc:1e:
2e:3f:7c:11:9e:99:d7:89:e0:f5:bf:2b:91:ed:08:fb:97:4b:
7c:d9:86:92:af:b4:6d:ff:b1:47:ac:5b:f8:7c:be:2b:d6:7e:
b8:60:3e:fd:78:dd:ea:85:ca:7a:f9:bc:df:9a:d6:eb:dc:88:
e3:a6:ba:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:11 2025 by rpki-client