Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier: 17Wrl+u5N+dyvjG+tnRUmWKr5Q80dT1S3had3PPTcHc=
Subject key identifier: 1C:24:57:3C:76:2D:82:80:B9:90:57:18:A8:88:53:E0:12:FC:94:47
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 019A4D7430D5F1A7AD59C697714797CB71EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:51 +0000
Manifest this update: Tue 04 Nov 2025 06:00:51 +0000
Manifest next update: Wed 05 Nov 2025 06:00:51 +0000
Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: /L4TVUzHrffStMepR9+Piiwwo5tTKutaNRg7S0LGfRk=)
2: TWeGvhRSmnN9ba3aLN_PX9mER2s.roa (hash: 6BkkLF5ZMW9w4BTie7IiuTOLhKMimv1AW7aDs2REbaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:30:d5:f1:a7:ad:59:c6:97:71:47:97:cb:71:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Nov 4 06:00:51 2025 GMT
Not After : Nov 5 06:00:51 2025 GMT
Subject: CN=1c24573c762d8280b9905718a88853e012fc9447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:bb:a0:3f:72:37:14:0c:df:19:da:cc:52:
5d:65:a8:77:77:55:dc:81:3a:89:5e:4f:c5:48:ef:
ab:33:83:03:51:63:15:d2:e1:ef:bc:67:0d:b6:69:
e0:17:2d:d2:b3:5c:2e:b7:07:10:e4:ac:30:bd:70:
b4:37:34:e5:db:fc:89:7d:a8:c3:cc:fc:11:c8:65:
a2:71:d9:f6:b7:83:a9:3c:d7:1e:d7:21:51:b3:4f:
cb:03:a1:3b:22:05:ef:12:e1:ca:d3:70:bd:f8:18:
51:2f:0b:8a:41:8e:b3:37:8c:40:a7:67:5b:ba:4f:
1c:86:82:b2:2d:21:0f:94:0f:46:78:97:99:ee:05:
be:a5:b2:f7:20:e0:40:ec:fa:e8:60:64:7f:5f:4a:
77:db:29:81:38:a7:5a:16:2d:45:d7:1d:46:ee:77:
b6:ba:77:7d:c3:1d:54:f5:a5:c9:cb:a6:93:38:ec:
77:cc:36:aa:f1:18:47:19:cb:ea:7a:ae:0a:6d:d3:
a7:a6:f5:f7:50:b9:b5:00:de:68:5f:aa:d3:aa:68:
41:af:a9:76:f1:60:fd:04:27:96:67:f3:64:63:29:
da:82:1d:4c:8a:a7:41:c2:65:48:6c:5d:ea:af:26:
ec:bf:4b:16:f3:0c:61:fa:d5:f3:c4:1e:6b:ff:19:
c3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:24:57:3C:76:2D:82:80:B9:90:57:18:A8:88:53:E0:12:FC:94:47
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:81:be:d2:f9:f0:dc:19:ef:16:a9:5d:88:d4:5b:82:85:11:
9c:93:e5:12:5f:ea:fc:39:c5:e8:0b:37:4c:92:9c:f9:4e:16:
23:56:f7:18:48:3a:8a:dd:44:33:62:47:4a:ad:26:8f:e6:ae:
f7:b5:f4:5f:ec:5f:a1:4d:cc:b3:dc:dd:42:c7:7f:80:20:20:
fe:2c:f8:79:7d:4c:71:d2:61:31:dd:48:04:d6:76:eb:7b:08:
e9:b5:a1:7a:88:6c:60:aa:63:5e:71:fb:25:a0:86:f5:6e:f5:
bc:56:8f:a3:60:41:fc:80:9c:4b:b6:d7:28:21:b7:63:ae:a4:
11:4a:a2:84:b8:cb:c1:aa:db:c9:44:88:4c:82:d8:90:9b:6b:
03:66:d8:3d:b2:9e:23:3a:71:18:9e:9c:bf:93:ed:e4:ab:a6:
da:42:81:5e:b5:db:6c:2b:63:64:2c:d4:ad:2b:0a:ed:c5:77:
9b:98:96:ab:d0:21:53:16:00:0f:bd:7a:71:5e:d0:99:e1:1f:
18:2c:3e:5c:8b:2d:ea:41:dd:1e:87:b7:ac:5f:5c:79:02:4f:
f5:50:4f:06:36:e4:d9:a4:2b:b9:08:4f:16:8e:1b:49:be:e8:
2c:c7:70:c9:fb:07:72:b8:43:2c:3e:bd:dc:34:cf:90:86:fd:
2c:dc:d0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:58 2025 by rpki-client