Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: 373wJBQI6JCauahHgbx0RBiFVVcIOdS9rp5Ev8iID0E=
Subject key identifier: F2:60:1F:E6:53:4E:15:C3:77:9D:E1:A7:0D:41:A7:67:1C:D4:7B:8D
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 019A4EF54969FAF16B9C45DAAE45112BF069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: F5rrExrT3p7mPusHEOwE/+14EXjc2RvraORBRJYZsi4=)
2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:49:69:fa:f1:6b:9c:45:da:ae:45:11:2b:f0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=f2601fe6534e15c3779de1a70d41a7671cd47b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:90:1e:8d:d6:43:ca:fd:46:ec:1f:f3:b4:
12:3f:21:93:4f:35:2b:db:e0:50:3e:8a:5a:9a:9c:
15:df:8a:f6:79:85:24:54:f9:c8:b0:58:99:5f:23:
78:53:45:a7:40:63:b1:b2:56:19:0a:1a:1d:43:61:
d5:d3:ca:40:62:2e:b9:a6:b8:64:62:49:68:7b:c8:
9f:88:49:0f:1a:91:65:ed:07:51:06:78:e9:b9:37:
ff:df:14:0a:05:35:45:b9:8b:7e:a8:ee:78:7f:be:
59:b5:fc:ca:a6:d3:27:f6:11:cd:69:f5:ec:bd:ce:
da:24:fc:25:a4:db:30:e2:38:5e:70:b1:02:17:bc:
41:7c:e1:c1:b6:b6:fc:be:a4:d9:20:93:71:97:90:
b7:8d:1e:a9:d4:8e:cd:61:77:ac:17:d1:3e:1d:95:
70:ec:7b:3b:2c:ce:07:d8:62:25:97:77:50:43:8f:
20:28:3b:8b:95:a1:a2:fd:56:54:0c:0f:af:d3:b9:
bc:9e:ad:74:e5:0e:75:9a:94:b9:37:e6:37:61:32:
3f:c0:6d:0f:72:45:db:14:6c:15:52:bc:79:a4:84:
b8:b8:6e:0a:5d:66:b5:86:1b:fb:a5:9d:70:fc:9d:
c7:36:2c:b4:4f:ca:a8:70:37:61:bd:3b:47:eb:72:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:60:1F:E6:53:4E:15:C3:77:9D:E1:A7:0D:41:A7:67:1C:D4:7B:8D
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:85:07:1d:8b:e6:5f:93:2a:db:09:15:47:ba:dd:eb:e6:a0:
0c:37:8d:34:7d:2d:1d:40:b5:9f:1b:97:e3:e5:46:45:34:36:
3c:71:63:4b:d8:6b:b8:48:29:2f:18:49:86:b3:e3:06:57:5a:
d3:f0:30:10:65:b7:b2:47:f9:e5:d9:63:90:a2:b6:df:b4:0b:
c2:e5:4c:d4:92:12:e9:af:70:d6:15:03:0d:19:9e:93:a6:52:
2a:07:4f:c5:af:a7:17:92:9b:24:f9:47:f9:d5:e9:36:f4:5a:
8c:98:9b:c0:ce:03:77:e7:82:c7:22:4a:af:55:1a:bf:82:b2:
11:ce:c2:56:be:0d:89:b2:1d:8d:c5:0b:c0:a8:dc:b9:fd:ac:
07:bd:3d:ca:0a:2b:4b:76:fd:2e:42:43:fb:82:4c:96:22:4d:
39:ac:8b:d4:f1:95:37:a7:dc:f6:68:4a:74:c1:ca:92:f3:8e:
95:cb:54:c0:06:4a:5c:39:dd:a5:29:5d:d8:8d:e9:10:c3:eb:
dd:8b:d6:2f:c8:e4:40:fb:1a:4c:dc:24:40:1a:cc:8e:22:39:
70:21:46:31:3b:13:e8:9a:c5:05:eb:24:17:58:a4:f0:8e:f5:
87:11:6e:20:99:85:b9:1c:d1:50:77:51:f7:3c:5c:4e:3d:dd:
07:29:7a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:50 2025 by rpki-client