Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier: DTB8lCoa3aNYfje7jRbcNLZbOgWjxzvPo/GiseVLTdw=
Subject key identifier: D9:81:D7:E4:F5:9F:53:8A:F6:EF:9B:0E:97:3D:3A:27:90:09:07:A2
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer: /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial: 019A4DE1F4737B3576480B6D5FE01AE21B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number: 0933
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: QS2ZccvEvdA3bZ3/+MTwKP0kIe1tVksmWBZTWwFxHDY=)
2: d0b72ny8wPnM19_QwF_mbcUjDN0.roa (hash: SMFsSG0c6aEdE5nra06sYeY6XybcAZuUprO34jcJsEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f4:73:7b:35:76:48:0b:6d:5f:e0:1a:e2:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=d981d7e4f59f538af6ef9b0e973d3a27900907a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:55:75:84:b1:1e:fc:54:4f:58:cd:4a:89:14:
f9:ff:5a:ab:b3:9e:59:2e:ae:ea:d1:b9:d8:a9:cd:
fd:8b:13:20:d6:6d:23:08:95:ef:3f:00:ba:6a:f2:
b8:69:2d:74:07:b6:d5:fa:7a:81:dd:2e:70:cb:c5:
21:b8:98:64:31:e0:37:6d:00:4e:7c:2e:7d:7e:ca:
e9:17:4e:38:e4:f5:49:2b:36:81:7e:17:25:95:c3:
00:36:a2:a6:a3:c0:e3:6d:79:96:57:53:06:b1:06:
b4:d2:95:8e:75:16:a6:d5:9c:55:f7:13:fd:fe:ad:
91:c9:21:46:bb:f3:f3:7f:b1:05:c4:a4:3d:2b:ae:
3e:cc:1b:b2:19:e0:f8:69:b2:16:54:e9:c6:dd:a3:
6d:a2:cd:bd:7a:bd:ca:6a:cb:83:ff:76:6f:16:a6:
b6:bb:0e:63:d6:83:3d:27:23:4d:62:48:67:14:16:
6b:5d:d8:9a:eb:7d:a4:59:02:8d:b6:1a:d9:0f:62:
49:23:92:2d:01:cb:4e:15:a1:a3:5f:b4:05:1c:f0:
46:0d:26:d6:f1:bf:4c:2f:a6:5f:08:8d:e0:23:92:
d4:97:cb:a3:cc:f4:61:76:62:d7:b9:7b:eb:05:e2:
56:ac:38:51:c1:f5:fe:9a:1f:5b:c5:d9:93:a8:ba:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:81:D7:E4:F5:9F:53:8A:F6:EF:9B:0E:97:3D:3A:27:90:09:07:A2
X509v3 Authority Key Identifier:
keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:21:0d:d6:de:f0:f1:38:23:bf:47:e9:b8:e4:f1:68:dc:c4:
1b:31:99:d3:a3:91:ba:d1:34:fb:f6:d1:0a:9c:e7:e8:d2:ff:
bf:31:7b:59:7c:c9:48:63:25:d1:aa:99:34:0b:02:ed:95:c0:
16:47:81:a0:6a:d5:ad:73:f3:db:60:ea:c6:92:d2:14:6d:01:
27:75:55:51:7b:32:77:3f:d9:36:c2:8f:3c:69:e2:f6:9e:c4:
2e:2e:9e:1d:69:25:91:e9:a7:31:13:53:ed:1d:8f:59:ce:31:
6f:50:bb:b4:43:01:6c:94:0a:df:cc:f9:83:48:0e:ee:c6:ea:
dd:2e:c7:66:af:be:86:46:71:e2:bb:9c:19:fc:8c:c4:d4:48:
23:8d:9c:50:ae:f2:7c:4d:fd:d3:a6:01:92:3e:a6:ee:bf:34:
ed:66:fa:0c:f3:a1:08:c2:28:22:68:9d:1e:b6:a7:2e:f3:64:
c8:b1:dd:86:60:0c:76:95:43:7a:58:8f:df:55:a0:5a:f0:ea:
21:dc:e7:37:ab:7f:de:8f:5d:6d:52:f0:cb:3f:70:95:42:ef:
56:f1:0f:09:40:34:a4:b1:07:7c:ec:03:ec:6f:76:83:31:ae:
1b:1b:98:8b:79:31:4b:17:1c:16:f0:68:06:28:af:dd:2e:17:
15:d9:8f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:58 2025 by rpki-client