Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier: sD2WBxW6I9FeecrpnSVzxdvBcBAMoHXPtCSEOqSakHA=
Subject key identifier: CD:2F:B3:40:4A:0F:CC:2F:66:59:D3:69:13:1E:E8:42:B6:CC:DD:6F
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial: 019A4EF4382FC051C6A9A314366577D31B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number: 0783
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: fsEbyLG8dCMIij3XT9h+fPrkGBiRzAnpxqfWZQPVeDM=)
2: PveX9WXxCJj9e18L9V5LXcSlf4I.roa (hash: Gc7ehRUF/Atprjxx4oQFsUeoQdkyLlSY7XL+/gL4J0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:38:2f:c0:51:c6:a9:a3:14:36:65:77:d3:1b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=cd2fb3404a0fcc2f6659d369131ee842b6ccdd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:95:3e:0d:ed:6f:05:fc:7e:b8:1c:85:d4:
28:14:cc:60:34:11:54:f7:c5:f0:45:d6:02:8e:36:
5f:40:c0:5d:90:68:54:71:ee:41:ae:f0:7c:25:95:
96:37:38:8a:62:16:27:06:a3:f4:63:f2:db:12:12:
de:3a:de:ee:5d:76:f2:0f:08:f4:4d:56:a6:e5:e6:
13:0b:8e:47:34:f3:27:04:ac:80:92:9a:db:9e:fc:
7e:f6:a7:78:87:e9:2d:bf:11:ad:b1:49:b4:1f:be:
1c:e9:21:7e:57:3d:6c:23:b3:f9:17:28:cf:8a:2d:
81:84:06:91:b5:42:4b:b9:32:5a:09:ae:e5:db:16:
dc:d5:68:1d:04:93:e7:ba:2a:43:f3:50:9c:d1:69:
9c:9b:3d:d4:62:a8:a6:56:ee:c4:eb:33:1f:4a:fe:
bf:26:d5:e4:4b:8d:b2:35:ee:77:bb:e8:13:12:93:
3c:19:35:d2:7a:96:2d:de:97:c8:b3:c8:9a:14:2b:
8c:62:6f:7f:84:ed:f5:0b:f9:6a:ba:98:01:2c:09:
6c:d0:7b:07:75:e6:9d:e1:f1:30:ff:f8:35:7e:3a:
05:a0:d8:7d:8c:87:ef:e8:8f:a0:4e:00:6f:99:be:
ba:de:64:12:4d:55:5c:c7:eb:fd:35:ae:92:72:20:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2F:B3:40:4A:0F:CC:2F:66:59:D3:69:13:1E:E8:42:B6:CC:DD:6F
X509v3 Authority Key Identifier:
keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:94:3d:8f:f2:d2:07:70:4e:2f:f6:41:9e:15:7b:8d:d9:2b:
81:a8:ed:c3:01:e5:62:b3:97:41:80:d9:ca:75:5b:10:c4:58:
ea:b4:d5:85:89:95:2e:ec:1e:cb:92:25:ba:6f:8e:f1:c1:97:
26:74:47:84:b6:35:e1:f9:b8:67:90:ea:3f:f1:0a:fd:cb:1e:
8a:70:a1:cd:e3:40:4a:10:66:27:47:55:44:4c:53:96:5c:48:
38:cb:f3:15:d0:de:ce:01:15:2e:c2:8c:2c:66:5f:b2:be:fa:
de:61:1f:eb:24:0a:13:0e:6a:5b:72:1f:3c:be:32:36:4a:de:
84:0f:3a:0a:96:0f:fb:d5:5d:50:4f:33:b2:ee:5d:d4:4d:54:
b0:bc:35:e1:38:c2:df:df:46:f7:4e:83:60:9b:ff:1d:52:85:
78:c9:35:bc:af:12:8a:ee:f8:14:bc:7d:86:19:61:9e:8d:6e:
fc:ba:69:5f:39:86:07:30:d3:8c:77:af:3b:0d:94:ac:a3:56:
10:13:01:bf:02:1c:75:1b:a3:bd:c6:b7:cf:f8:63:9b:57:5d:
30:1b:21:87:4d:63:fc:4f:36:c5:8c:87:a6:43:9a:ec:51:32:
cf:f0:26:d2:af:06:d8:44:01:15:dd:5d:2b:90:52:cf:97:45:
19:3a:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:27 2025 by rpki-client