Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: ZsPnsyOkSYWZ8yvJXRTJDx1/0wJEMWeITWdndLzEFBs=
Subject key identifier: A2:2B:06:7C:A0:DA:F2:A2:B8:24:AE:03:65:4B:1F:EB:58:C5:36:04
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 019A4D73DD296ABD9B52361D3A49D0DA65D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:30 +0000
Manifest this update: Tue 04 Nov 2025 06:00:30 +0000
Manifest next update: Wed 05 Nov 2025 06:00:30 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: WG62MVLiWAQwK5hXbosCKnaKyALKxU6Jsx2rDHSw9hQ=)
2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:dd:29:6a:bd:9b:52:36:1d:3a:49:d0:da:65:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Nov 4 06:00:30 2025 GMT
Not After : Nov 5 06:00:30 2025 GMT
Subject: CN=a22b067ca0daf2a2b824ae03654b1feb58c53604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:a2:36:cc:67:eb:63:43:99:04:56:f5:3d:
e4:84:a3:b3:14:79:31:8b:bb:67:de:e5:85:7f:8d:
30:56:87:f5:28:ae:d1:3d:80:65:54:59:d9:71:67:
66:d6:ca:1e:50:a3:ca:36:7a:3d:56:ed:00:3f:68:
11:07:8e:8b:d4:65:1b:c9:3e:61:d3:94:60:8b:dc:
da:88:38:13:2d:d3:5a:97:fa:82:fb:8e:fa:0a:da:
38:8a:b3:1c:be:f5:d3:c1:9c:38:45:d6:5f:8e:09:
56:12:8b:2d:a8:cb:0c:50:46:5c:54:2e:69:c5:2f:
0a:4f:8a:89:fe:27:84:46:7e:81:17:cf:93:d8:a2:
ae:61:4f:ce:8b:2f:f1:e4:a5:af:ba:71:1a:ac:13:
de:ae:41:fe:c7:f5:72:30:82:ce:be:eb:d3:bf:b1:
30:d6:f6:82:28:8d:7f:d9:f1:45:c7:7e:28:d2:91:
cc:31:0f:92:32:4f:25:8a:b8:ad:af:47:72:83:33:
e9:13:01:dd:7f:ee:c7:c0:7e:d0:33:83:56:79:80:
ea:48:c8:b3:00:bd:2a:cd:4f:4c:1a:27:6f:2d:41:
99:ce:47:9a:fb:7e:28:cf:bc:12:29:79:62:b7:57:
24:36:11:3b:db:af:0c:bd:06:83:73:ba:23:a4:4d:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:06:7C:A0:DA:F2:A2:B8:24:AE:03:65:4B:1F:EB:58:C5:36:04
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d2:36:85:4e:4b:cf:25:4f:1b:62:87:84:6c:d9:9f:06:79:
10:81:2f:41:35:bf:76:be:30:54:e7:6c:32:ea:0e:df:48:dd:
37:6a:fb:19:f6:23:09:12:98:85:0f:45:a9:7c:90:4f:90:91:
4c:ec:da:aa:ba:a1:9b:59:f1:09:8b:f4:e7:1d:76:aa:62:75:
5c:07:4f:e9:ec:24:03:2d:82:a0:f1:b5:da:67:cb:82:4f:e9:
21:64:a1:bd:9e:5a:17:90:5e:50:0c:03:7b:ca:18:74:eb:d4:
58:2c:cc:45:9d:b0:11:a3:ee:c4:3b:71:c8:a8:db:56:54:7a:
91:dd:a4:be:05:b6:ed:d7:a1:1a:4c:f6:3b:11:f7:f3:8b:f9:
00:6e:00:46:e3:56:ed:74:d0:68:38:73:29:5d:ff:c3:40:49:
c4:8c:19:6d:62:10:0a:fd:a4:0f:3c:97:e9:50:7a:46:fa:57:
03:3a:b6:2d:59:15:58:83:5e:c7:fa:64:c6:c1:bc:9c:e3:52:
20:a2:da:b7:b8:09:9f:47:c2:14:9b:91:12:57:e5:69:b1:36:
5d:83:35:a0:e6:9d:44:ee:e1:8d:b2:56:1a:0b:ee:f9:6f:1c:
78:03:e8:ce:9a:ac:df:6a:68:e4:ed:f2:b1:78:d5:d7:56:50:
34:21:d5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:53 2025 by rpki-client