Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
File: cAiszpDUdaD6oR0oVIakU1ILgfA.mft (raw, json)
Hash identifier: 7CEJMejhFjXsQHHn5PnBYR6HYPeoxHmQemIxij47wdI=
Subject key identifier: D1:9E:42:B8:BC:EF:A7:9E:CF:25:C8:9A:B0:7C:AE:47:4C:B9:A5:F2
Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
Certificate issuer: /CN=7008acce90d475a0faa11d285486a453520b81f0
Certificate serial: 019A571C6F77D28776ED35EF9F929433A6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
Manifest number: 014F
Signing time: Thu 06 Nov 2025 03:01:12 +0000
Manifest this update: Thu 06 Nov 2025 03:01:12 +0000
Manifest next update: Fri 07 Nov 2025 03:01:12 +0000
Files and hashes: 1: SGExsZYw7zZNQMmCejqPLZCEzR4.roa (hash: lywDbb/BT202qwVyQW4Rrl3AkbHkGjJUpz5yvpYCOaU=)
2: cAiszpDUdaD6oR0oVIakU1ILgfA.crl (hash: e2/hBWxiSRuQIPNh6+YQ6RiidJgnU1WrbtqWehScsKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1c:6f:77:d2:87:76:ed:35:ef:9f:92:94:33:a6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0
Validity
Not Before: Nov 6 03:01:12 2025 GMT
Not After : Nov 7 03:01:12 2025 GMT
Subject: CN=d19e42b8bcefa79ecf25c89ab07cae474cb9a5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:b8:8f:01:32:a5:4f:79:2c:2a:fa:5e:65:
e6:85:06:85:2e:73:27:3b:f5:b6:66:32:b5:83:aa:
f3:8b:ba:76:13:e2:c9:9c:8f:3a:ab:16:6f:66:e3:
f4:93:18:29:f8:9b:22:7a:26:33:d5:7b:3b:57:bc:
57:31:9f:a6:13:c3:8b:4f:97:2d:8c:23:eb:43:29:
b6:4e:46:18:a5:4c:48:2b:40:f5:4c:e5:fa:dd:15:
84:0e:86:0e:2d:b1:40:65:fc:07:7f:41:db:c8:eb:
a9:a6:20:0b:2b:08:52:b2:c0:65:d7:e5:98:36:ea:
8c:71:32:af:59:5b:0d:c6:5f:fa:fd:18:60:f3:99:
4f:b0:8d:a5:07:ee:d7:50:56:7b:9d:ac:df:47:44:
ee:4d:7e:78:6e:a0:0f:23:bb:95:f4:1f:a0:83:0e:
8f:c7:e9:f8:85:b1:45:2c:21:bb:20:ff:33:b6:d1:
59:d2:7d:a7:4b:34:eb:cb:f4:a2:02:1e:46:92:17:
9d:96:f9:2c:bc:71:03:7a:9f:73:37:3d:65:67:2e:
e6:9a:9c:9e:08:ba:8b:d5:d1:13:d2:62:ed:e1:58:
a4:7e:96:d2:ce:6f:77:21:eb:5b:19:90:4b:6f:83:
2a:1c:99:f0:dd:37:8d:6f:72:a3:09:57:a9:2f:b9:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:42:B8:BC:EF:A7:9E:CF:25:C8:9A:B0:7C:AE:47:4C:B9:A5:F2
X509v3 Authority Key Identifier:
keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:90:f6:4d:44:45:16:45:21:9d:79:6d:65:1c:c2:aa:b9:bd:
90:ec:04:0a:1f:fd:f9:73:d1:cf:97:ee:15:bc:43:29:16:12:
88:18:d9:93:c6:90:f4:36:9f:0e:70:60:53:36:ee:58:cd:1d:
af:36:23:f6:30:4b:09:b9:ee:d4:72:ad:d9:26:7f:a7:5b:54:
04:10:ac:36:5e:83:ce:6e:80:97:89:49:c4:fe:b5:39:63:8c:
94:27:3d:af:bd:bb:fe:1c:b0:be:d0:22:b2:2d:6e:5c:8c:04:
8a:2a:a4:43:c3:1f:ae:21:ee:de:47:91:8f:11:9b:58:bb:2f:
07:28:c6:01:ea:e0:06:5f:81:72:01:37:ca:84:71:a7:c7:0a:
64:9c:39:6a:5a:83:52:9c:3a:02:ce:59:38:df:46:82:fa:02:
75:8f:5e:ff:77:d8:e7:9d:a5:b4:46:b7:40:05:3e:d4:c5:5c:
00:f5:be:33:3f:de:57:62:7d:46:1f:a2:8b:66:db:4e:7a:d0:
8b:4c:e8:13:25:42:a1:c7:be:25:20:16:e8:5c:4c:80:f9:0a:
bc:ec:a3:87:f5:5b:ad:dd:a4:fe:00:b4:29:fa:50:c4:58:4e:
f1:e3:52:3d:a7:7e:57:d5:e2:c5:49:a9:05:17:cd:55:d4:fb:
d4:ee:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:20:24 2025 by rpki-client