Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: q+CupyRg9uiQqVuilhyr3M9Gu4Tcm9PLweJzsmix68k=
Subject key identifier: CD:C6:85:D2:A2:FF:09:38:AB:3A:5F:22:B0:7B:C4:C9:CC:8E:40:AA
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 019A4EF4825AA97E9C86A5069191244FF58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 1291
Signing time: Tue 04 Nov 2025 13:00:38 +0000
Manifest this update: Tue 04 Nov 2025 13:00:38 +0000
Manifest next update: Wed 05 Nov 2025 13:00:38 +0000
Files and hashes: 1: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: qvUC71HgDnRWCl1A+qfUlni/Uu3dShWV5e+7xa7oE8A=)
2: bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa (hash: zEd/mqbUQwwKdBV4qgniA93ml7cpqC5pfS1X8ei6QF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:82:5a:a9:7e:9c:86:a5:06:91:91:24:4f:f5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Nov 4 13:00:38 2025 GMT
Not After : Nov 5 13:00:38 2025 GMT
Subject: CN=cdc685d2a2ff0938ab3a5f22b07bc4c9cc8e40aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:36:53:cc:16:86:08:8b:72:5d:c5:72:4b:
27:72:5f:6d:d7:af:3e:33:b2:ee:02:35:c3:9d:9e:
9c:03:71:30:5b:59:aa:02:8d:21:57:84:17:02:84:
67:6e:79:a6:17:a7:a2:79:11:9d:7b:a5:bb:45:2e:
28:3a:78:16:df:73:1d:30:4a:9f:b5:f7:2d:b6:93:
ba:ef:b1:2c:63:6a:6a:fc:8b:c8:63:f4:b6:b1:59:
a5:4a:0a:c2:80:b3:e4:4e:a7:7a:4b:4b:9c:10:0d:
f1:02:36:a5:68:bb:b2:51:a6:cc:9d:fa:eb:5b:c5:
1d:38:24:72:f5:67:72:29:0e:9a:6d:7a:66:05:26:
4e:9c:1b:bb:64:fc:cb:c1:76:66:5b:db:ab:84:98:
6c:f2:f6:85:d0:b0:a2:7e:ce:ca:9a:f4:e1:13:db:
7b:4d:40:84:15:6b:1b:58:33:7b:4e:69:d8:12:fa:
cb:21:38:da:92:6d:e7:ac:97:1e:73:75:2b:83:da:
b7:ce:4c:07:f6:f1:4f:d4:36:85:82:aa:14:d4:09:
41:76:a2:9b:21:69:a0:76:a0:01:c5:74:d8:50:ca:
6d:8b:57:d3:49:3d:df:bc:1d:cb:db:a9:2d:3f:b4:
e0:96:27:c8:d2:9b:72:0e:df:98:07:89:11:75:8f:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:85:D2:A2:FF:09:38:AB:3A:5F:22:B0:7B:C4:C9:CC:8E:40:AA
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a0:67:e9:de:51:91:98:f5:59:99:51:15:85:c7:69:3c:5e:
1a:8c:35:57:5f:43:55:4a:cd:6d:ff:38:2e:c5:4f:d8:2a:a8:
51:d8:f7:39:17:35:b7:c3:0f:1d:d8:ef:f8:46:e8:64:70:11:
79:11:62:bc:b9:66:c2:9d:ad:7e:99:24:99:33:ef:d2:72:f0:
89:3a:63:13:22:f1:e6:77:7b:6f:35:28:9d:5c:74:9b:08:93:
4e:89:46:83:23:d3:75:46:52:e0:50:b7:3e:29:0d:25:3c:99:
10:e9:35:87:02:06:12:02:62:c2:35:09:3b:3f:dc:b9:ad:4b:
12:d3:40:b4:46:74:e2:9c:bd:b6:0d:dd:f3:fb:bf:88:17:49:
ae:3b:3e:7a:1c:4a:84:c6:48:45:ae:cf:cf:51:71:b2:33:5b:
c9:d1:af:c6:6d:fe:d2:b4:48:68:ef:3b:ce:49:70:bd:fb:98:
96:e7:45:05:a2:98:92:f5:38:66:e5:fb:73:60:bb:5f:64:5d:
ce:4d:1b:31:a9:2b:2c:cb:5f:6a:9d:31:41:db:8d:0c:b3:25:
72:c9:9e:bd:a6:38:c7:ab:2f:6f:49:eb:e4:66:4e:1c:17:ab:
51:fc:f5:5c:a4:e2:a6:5e:e2:04:dc:8a:fe:eb:a7:58:c6:8a:
b9:24:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:22 2025 by rpki-client