Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: V3MOtS+7ud/YWrpQ9eTnuWPoDKGV8XZ7Cum6yQyafYE=
Subject key identifier: 67:55:CB:5F:E8:4B:1F:2C:39:63:92:B3:30:AC:89:32:92:55:53:48
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 019A500735F904C515B1043F2EA6D73D6502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 1414
Signing time: Tue 04 Nov 2025 18:00:41 +0000
Manifest this update: Tue 04 Nov 2025 18:00:41 +0000
Manifest next update: Wed 05 Nov 2025 18:00:41 +0000
Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=)
2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=)
3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=)
4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=)
5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=)
6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: ei3L/Y5APnrvsiH7H+Q4KIvHNPjsmflmWvEILqnkKj0=)
7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=)
8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=)
9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:35:f9:04:c5:15:b1:04:3f:2e:a6:d7:3d:65:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Nov 4 18:00:41 2025 GMT
Not After : Nov 5 18:00:41 2025 GMT
Subject: CN=6755cb5fe84b1f2c396392b330ac893292555348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bd:ea:f8:d7:12:62:1c:17:68:6f:36:81:2e:
1d:7e:c4:73:16:87:92:09:a4:ea:f9:79:c4:75:8f:
69:07:1b:cb:6c:fa:f8:f5:fb:85:7e:50:57:87:ae:
29:35:49:db:5a:8d:d8:ec:fb:23:55:f0:75:e5:88:
a3:f5:2b:97:af:92:32:ea:df:a8:d1:2a:c1:13:8c:
cc:0a:01:fb:72:66:56:cf:af:4e:fd:33:6f:e2:77:
b6:64:80:c5:7f:29:55:47:14:70:e6:83:53:c4:be:
ac:02:03:a0:7e:fc:55:8c:27:03:d0:cf:27:92:21:
dd:fb:35:b4:bd:f9:43:e8:9f:5d:4b:16:70:a0:79:
b7:bd:3b:f3:72:70:39:f9:a5:af:c7:59:ec:75:69:
54:f7:8d:27:71:ad:60:07:20:5d:10:0e:89:96:bd:
c4:73:d5:a8:22:66:91:bf:2c:05:80:e7:43:b2:ff:
c8:9c:a2:3b:79:fc:3c:97:c3:54:5e:d3:94:02:c1:
c0:45:23:27:43:d0:bc:5f:c6:3e:67:b5:9c:2b:a9:
1f:08:d5:2f:95:1e:62:1f:8b:8c:15:73:13:53:db:
db:61:c4:d4:43:be:15:ea:64:6f:6c:e0:bd:7c:29:
f1:ea:4b:5e:1c:bf:8d:92:94:dd:04:39:92:22:e7:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:55:CB:5F:E8:4B:1F:2C:39:63:92:B3:30:AC:89:32:92:55:53:48
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:25:0d:12:8b:ff:1e:11:26:71:83:4c:92:64:33:99:36:a4:
49:40:35:9a:8f:7d:f5:00:a0:46:3e:6e:6b:08:67:c5:70:61:
6b:b3:c8:64:04:0f:89:9f:b3:37:d6:ec:cb:86:70:e1:a7:69:
a3:24:23:79:5c:07:f2:12:4a:56:92:da:96:84:a0:fd:a5:9a:
09:04:8e:76:28:34:b1:1c:f7:4d:60:56:4c:e7:22:d6:59:f2:
24:43:8b:36:f8:77:ed:e7:40:3a:49:85:34:db:21:f7:ae:d9:
4b:48:d2:58:82:d8:8d:4f:3d:69:8f:57:ab:9b:ae:4f:30:43:
9d:a4:bf:5c:fc:63:08:fa:c9:bc:da:52:bd:c0:91:af:3b:84:
e4:17:03:4a:9f:f8:e6:8e:bf:30:2f:32:f1:d0:c3:1c:dd:44:
04:87:5a:e5:b9:01:c4:ba:e0:5b:f9:81:21:fd:a5:cb:b3:e6:
0b:c4:8f:90:f9:a4:86:ef:09:74:08:fb:e9:95:12:46:51:41:
4a:ce:d7:7e:b8:e9:f8:90:bc:6a:59:c6:f8:4a:83:9d:21:8c:
ed:a7:4a:b4:49:bb:14:5d:a6:40:27:bf:4a:43:62:71:26:87:
77:69:70:a7:d0:e8:72:31:0f:75:c3:8d:a7:73:9d:6e:98:85:
9d:b9:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:04 2025 by rpki-client