
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json)
Hash identifier: GQFEcg1JlGVpc8nltxJU8alTBX+5d9HhwSqQyNx6p18=
Subject key identifier: 65:D6:94:AF:B3:24:F3:5D:93:E3:36:7A:0F:82:82:27:03:07:16:CE
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial: 019A53AD3CC75895CEFC696F9E58C7E6032F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
Manifest number: E7
Signing time: Wed 05 Nov 2025 11:00:53 +0000
Manifest this update: Wed 05 Nov 2025 11:00:53 +0000
Manifest next update: Thu 06 Nov 2025 11:00:53 +0000
Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: D6/okFfj8z1Qi9cTn0Opyje8sXgWrEMpFb+Hbxs/B10=)
2: mIMZrEW18-_5KGhaxhfyAse2jaU.roa (hash: 6Qvzu2ngRsyEUpj0qpA3Dkp0CWaU4iSnWXbsJngfWw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:3c:c7:58:95:ce:fc:69:6f:9e:58:c7:e6:03:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Validity
Not Before: Nov 5 11:00:53 2025 GMT
Not After : Nov 6 11:00:53 2025 GMT
Subject: CN=65d694afb324f35d93e3367a0f828227030716ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:fb:00:a4:91:c8:1e:9b:ae:59:5f:be:01:
b4:19:e5:cf:23:f2:87:c5:da:1a:8c:bb:2a:45:2a:
0e:4d:c9:a0:11:94:e7:db:dc:5c:cf:15:cb:8d:54:
f6:22:bc:25:5e:77:3e:cf:f4:e8:35:59:6d:30:48:
b8:f6:80:99:14:8b:c3:33:13:96:ab:4e:e3:4b:05:
cc:78:3e:45:34:9c:ec:0f:ab:28:c2:68:10:8d:eb:
c5:29:53:d9:f8:f2:fb:02:ec:54:45:6e:af:4f:81:
1f:cc:35:af:88:d4:b8:17:53:10:d4:4a:d4:2b:52:
f8:49:9f:a7:d7:da:a4:29:9d:2e:f5:10:3f:dd:51:
12:5c:dd:8b:c7:56:78:b6:26:4c:a3:52:06:1c:f0:
50:94:f0:fd:0a:25:f9:42:c8:06:61:2e:29:eb:6b:
3c:19:bf:ac:19:1b:80:a9:c3:99:ec:fc:57:59:01:
44:93:42:f5:24:0c:d8:ac:ea:af:56:f5:8f:f4:af:
2f:da:77:bc:13:c8:02:00:3d:3a:aa:26:5f:57:0b:
bf:76:a4:7c:53:da:05:f8:da:e7:47:cc:a1:8d:8c:
57:64:5f:a9:c9:1b:8b:4c:e4:76:d5:98:b6:55:a4:
14:71:d0:8e:4e:d6:a1:29:b6:93:cd:d5:95:57:2a:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D6:94:AF:B3:24:F3:5D:93:E3:36:7A:0F:82:82:27:03:07:16:CE
X509v3 Authority Key Identifier:
keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c8:79:b2:57:8f:fc:9c:e6:9f:82:dd:c2:a2:04:37:6f:65:
f2:63:dd:7f:4c:f1:58:32:21:85:21:71:83:54:f7:6e:e5:c5:
3b:24:35:d8:29:cc:42:81:71:4c:ae:85:d0:c1:29:75:1b:6a:
ec:66:48:d7:b3:17:26:fd:72:88:15:5b:dd:f6:f3:f2:1a:d9:
d0:86:cc:a6:d0:8f:04:c2:eb:8a:7f:b0:49:a4:e5:45:34:9f:
f0:cc:63:80:c7:a7:f5:69:ff:67:b3:c0:35:75:17:9d:07:ad:
80:3c:6c:ff:ef:ef:09:ee:64:87:ca:09:c4:16:34:d0:ee:74:
76:b7:1a:a8:a2:1a:28:d1:f0:d0:82:2c:cc:fd:05:2b:d1:2a:
6e:22:b7:39:bf:65:95:32:28:7f:0f:57:f4:9a:bc:05:63:75:
37:c8:50:0a:ad:f2:b3:59:89:66:4e:95:2b:86:01:54:ca:59:
4e:5e:36:ed:00:48:b9:ea:57:61:fd:99:20:86:72:c3:5c:13:
17:2e:2a:60:b5:c1:4d:b5:b4:02:cb:c4:77:ea:12:bd:41:52:
9e:1e:58:46:28:4a:b1:e1:3d:d9:5b:6c:e4:80:6b:11:18:70:
c9:c2:04:1a:d3:47:bd:25:26:e6:4c:70:53:a9:58:9f:9e:bf:
88:2b:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:19:14 2025 by rpki-client