Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: 3WjcvYNxGlzreL6lYfW6WXEb4buUl2E/naNJCZyoaY0=
Subject key identifier: CE:2C:40:41:1A:7B:58:98:A8:6E:3E:1C:98:83:35:5F:02:12:AD:19
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 019A50E3AEAD52F408B2DF7E92A7336890B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 22:01:29 +0000
Manifest this update: Tue 04 Nov 2025 22:01:29 +0000
Manifest next update: Wed 05 Nov 2025 22:01:29 +0000
Files and hashes: 1: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (hash: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=)
2: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: oyertjMpE5Q3TiMnyx2qQ8BavwrSq6lpZygf1+86drk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:ae:ad:52:f4:08:b2:df:7e:92:a7:33:68:90:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Nov 4 22:01:29 2025 GMT
Not After : Nov 5 22:01:29 2025 GMT
Subject: CN=ce2c40411a7b5898a86e3e1c9883355f0212ad19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:db:96:1e:f5:16:f2:a4:26:07:3e:98:95:
5e:b8:39:5e:df:bf:e0:b7:e5:c7:bd:b7:75:01:9c:
6a:73:27:b2:3a:90:cf:a7:c8:a0:22:7d:f4:97:43:
e9:69:9b:e6:f5:5b:de:58:c2:d1:99:a0:fa:dc:88:
67:ce:3c:70:6a:10:c6:03:e7:13:20:9a:fa:fe:f5:
e7:67:15:9b:d1:76:55:93:ac:62:02:c3:28:19:f0:
21:d6:36:a7:55:21:55:c6:8a:a1:cb:a4:79:57:7d:
10:c1:a4:0d:76:f8:83:fe:ce:7d:ef:74:ee:51:d0:
ed:37:34:7d:22:a4:64:c7:e7:e0:9e:ea:42:8a:f7:
61:04:1d:7e:89:eb:3f:a0:39:7c:98:8b:d5:37:0d:
3f:b1:28:92:b4:a4:c6:06:98:e1:2b:c6:8c:20:e5:
1f:f2:3a:02:1f:49:9f:68:d3:6e:8d:e7:5c:f6:ea:
50:81:1e:40:1e:f0:a3:8a:3a:b6:06:a4:7d:e5:7e:
1c:c6:e0:46:6e:7c:16:ff:16:e2:33:13:76:e5:56:
fe:32:13:bd:3e:21:23:33:5a:5c:7f:e1:60:72:b5:
a9:1c:4f:b6:c6:5b:a4:07:bf:a9:7d:ba:c7:bf:83:
a5:6c:ef:20:a6:02:3a:32:ee:f2:12:e8:f6:1f:1a:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:40:41:1A:7B:58:98:A8:6E:3E:1C:98:83:35:5F:02:12:AD:19
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bf:df:c9:b5:5e:d3:bf:41:35:a4:00:22:41:c2:a3:1e:4a:
70:59:33:c5:67:c5:24:6f:7b:ef:e3:f5:d2:2d:a2:c6:78:a4:
ed:b2:b4:21:54:c3:c0:54:5b:34:24:e3:cc:d1:a3:b9:d3:de:
fc:25:dc:da:ce:2b:a8:11:b0:c1:19:66:dd:e5:59:d0:d1:57:
30:91:39:85:88:3d:5f:a7:7c:25:74:a2:6f:96:ea:78:3f:68:
f8:61:70:ff:3f:7c:d1:0c:81:12:6e:45:52:eb:19:a6:6e:7b:
a6:2c:42:ad:29:ac:7c:ca:34:7c:10:d7:9d:04:9c:7c:8a:0b:
c2:1c:a9:5e:b7:9e:9c:12:5e:c7:ae:3b:ce:7b:0e:1f:9b:5e:
ca:d3:78:0d:69:c8:50:ff:71:65:73:ab:85:5f:4e:0c:82:54:
5c:90:3e:c1:92:86:06:64:15:86:0d:da:2a:6f:83:5b:80:f7:
0e:8c:a5:69:c8:ec:ff:33:5d:41:22:56:68:cf:37:6d:27:b7:
04:78:34:df:28:4e:6a:ff:5b:17:60:93:f5:d8:51:1d:61:f0:
dd:c9:54:75:1b:eb:40:ce:bc:6b:00:85:96:66:ae:81:9f:18:
c5:3a:ad:8d:8f:8b:7e:3c:06:50:d1:6c:30:30:8c:34:b8:3b:
29:ed:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:27 2025 by rpki-client