Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: TDOXiAomHr+CfOpU/o1Zf+Vc7YPmehTnOj2dPI8DIqU=
Subject key identifier: 54:A4:FD:E8:5F:E8:0F:9A:A4:8F:DF:C6:63:16:74:93:FA:70:FF:24
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019A50E2A6A5E4354A48DFC837F03AAFBF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:00:22 +0000
Manifest this update: Tue 04 Nov 2025 22:00:22 +0000
Manifest next update: Wed 05 Nov 2025 22:00:22 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: SwpWc+Dn138yMNLEM5znZxz4W7nAxe9CT+ZqPQKEJTc=)
2: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:a6:a5:e4:35:4a:48:df:c8:37:f0:3a:af:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Nov 4 22:00:22 2025 GMT
Not After : Nov 5 22:00:22 2025 GMT
Subject: CN=54a4fde85fe80f9aa48fdfc663167493fa70ff24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:9b:20:44:31:d2:d8:ed:d8:ef:b2:20:01:
93:6d:e9:7d:16:79:d7:6e:01:f9:7f:ac:65:95:4e:
f0:67:ed:39:57:99:6b:d7:12:e7:32:68:c8:db:05:
58:a0:9f:57:18:ac:dc:d0:8e:a2:ec:c7:6f:72:67:
df:0b:8c:04:89:a4:74:31:dd:e2:40:04:f9:61:e0:
4b:67:85:d6:b3:16:6d:26:b6:b6:83:0a:8d:00:98:
a2:47:9f:21:f0:5c:9d:cc:ab:8f:3b:ca:63:46:fd:
58:d9:b1:ff:2f:89:9e:39:3b:4c:be:fd:ef:d9:cd:
d9:ca:39:b6:f9:34:d5:ba:e7:e4:7f:8e:3a:89:85:
8e:4c:ad:de:f9:dd:a8:64:c0:9d:56:89:3a:87:90:
8b:7c:31:47:8c:22:12:16:13:e2:1c:e9:03:2f:1c:
85:c8:ad:c7:aa:2d:23:38:31:cd:a0:93:fe:a6:38:
05:6d:d1:f1:08:2c:28:79:f7:6d:32:a5:c3:32:7c:
80:fd:ca:29:cc:28:ea:05:30:75:59:73:f1:af:49:
45:a8:61:71:db:e7:ad:d5:57:ab:f3:6e:d1:42:b1:
b2:09:c6:a1:a2:8c:88:60:69:fe:a2:d9:87:7b:2e:
30:1d:e0:c4:f8:e5:9a:da:73:3a:28:ce:36:ad:ac:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A4:FD:E8:5F:E8:0F:9A:A4:8F:DF:C6:63:16:74:93:FA:70:FF:24
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:68:af:84:89:6b:ab:9f:ed:b5:03:ba:38:97:59:9e:4b:d8:
76:e0:da:dc:48:69:5a:45:23:ee:08:f6:4a:48:52:26:e2:a9:
e9:c1:d4:88:ab:4b:f1:81:a8:6e:45:6e:2d:b3:cc:a0:9b:f7:
c4:14:69:01:f4:0f:3f:fe:80:79:22:5e:01:26:a0:ea:1d:77:
ec:8e:4e:17:65:5b:ac:5c:5a:7d:17:5b:ef:da:23:28:ea:d5:
97:eb:e7:d4:34:45:f0:9d:b1:37:3a:50:d1:76:ca:80:71:85:
1e:f2:09:ac:e0:10:bd:15:e3:30:ac:5f:15:fb:70:28:6c:9d:
40:9d:4c:c9:91:6a:2a:1f:8e:f7:84:90:7f:17:2c:52:36:1b:
5b:96:5b:66:dd:3b:06:a3:26:2f:d3:45:3c:ae:7a:2e:3a:b4:
06:b4:09:3e:af:df:e2:0d:63:db:7a:a2:33:48:e4:de:8b:68:
00:a8:b5:ab:c3:8b:e7:44:07:35:a1:51:8f:c1:2c:94:4e:fa:
50:a2:56:39:13:30:12:3b:10:fa:98:be:e9:6f:4b:d0:9e:20:
1e:0a:ea:45:68:33:a1:81:ef:43:ae:cd:e6:a5:36:0d:46:4c:
f7:49:ff:56:f7:c9:a9:75:15:47:b4:74:43:f7:f3:4a:3f:1d:
cb:58:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:48 2025 by rpki-client