Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: 5FSlxtI75m7pR7TGnOZjQeGi+Z6Xpc6P4aRjCZ/NofQ=
Subject key identifier: DD:59:8F:96:9C:42:71:C5:72:A1:1C:B5:8D:C8:3F:89:AD:54:E1:F4
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 019A4F622D07ED1995DE821D58C4A990B0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 06FE
Signing time: Tue 04 Nov 2025 15:00:25 +0000
Manifest this update: Tue 04 Nov 2025 15:00:25 +0000
Manifest next update: Wed 05 Nov 2025 15:00:25 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: C7QU+iTIyg/wwXfq9HQjvbVigXAZbP2sOWheFDxXVA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:2d:07:ed:19:95:de:82:1d:58:c4:a9:90:b0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Nov 4 15:00:25 2025 GMT
Not After : Nov 5 15:00:25 2025 GMT
Subject: CN=dd598f969c4271c572a11cb58dc83f89ad54e1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:7f:4e:13:10:de:80:05:88:c7:89:99:9d:
5c:1d:a1:15:f8:df:db:03:97:66:3c:7e:bb:b4:38:
83:09:10:40:39:1d:f9:60:ce:bb:9e:d7:b7:de:87:
7f:3a:75:99:a4:c7:f5:ba:09:65:95:98:06:36:81:
2e:23:e3:28:14:e7:d5:45:7c:68:40:26:aa:d4:c4:
1a:9f:3c:fb:6c:e4:9e:df:5a:4a:36:3d:8b:d0:ab:
21:ea:0c:c8:5c:e5:f3:c9:f5:d1:63:f9:7f:59:d7:
7d:6d:67:c1:70:21:39:05:55:70:d2:32:e5:89:79:
2d:09:0e:7b:46:02:e4:dd:bd:27:6e:9b:63:5e:c9:
f2:31:32:d7:57:68:0f:f4:ad:b5:76:39:6b:36:29:
61:f1:ee:6f:51:6f:f6:6e:15:07:87:06:3b:7a:54:
0b:d6:e1:7b:b2:67:30:1e:e5:a4:87:49:b1:69:00:
db:fc:b8:4d:97:c0:19:33:d3:f7:0a:b8:c7:d7:bc:
40:4c:97:c1:a8:f3:5b:05:89:9a:ed:fc:69:d7:69:
ac:e4:a6:e0:7b:0f:be:55:1e:a7:f6:26:10:9c:57:
7f:35:3c:cd:5f:37:77:97:b9:67:bc:eb:26:5b:04:
7e:30:b8:e9:b0:78:9d:85:16:a2:09:96:7d:99:7b:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:8F:96:9C:42:71:C5:72:A1:1C:B5:8D:C8:3F:89:AD:54:E1:F4
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:40:e5:ae:e8:30:26:eb:b8:16:cc:30:d3:33:c9:02:00:d0:
8e:f4:57:a8:1b:82:da:64:43:75:b0:e3:f6:aa:e9:a7:69:da:
a0:8e:3e:b2:55:9c:a6:38:ad:56:10:1b:86:0d:a8:1d:22:04:
b5:65:0e:f1:76:e0:98:01:e9:80:b2:bc:f5:cd:8d:76:af:c5:
bd:51:83:5b:15:bf:bf:c0:15:8b:0a:43:c5:af:86:8e:8b:70:
fc:9d:ea:17:87:8a:da:3e:9a:1f:68:fa:d8:00:08:9a:bf:16:
4d:0d:c5:68:3c:d6:0f:da:fe:41:04:06:a3:17:38:4e:01:da:
d0:c1:d6:dd:f6:ee:e9:c1:67:2b:fe:7e:d2:56:a3:60:28:f0:
9a:f9:ca:c3:7b:41:56:71:a1:d6:1a:11:2b:db:bd:9d:4f:0b:
b3:25:7c:4f:d6:00:63:b1:ad:a3:eb:bd:fe:75:39:14:62:1a:
b0:84:a8:8a:a7:a9:3c:7a:b2:f3:ca:bd:da:87:3a:9c:c4:4a:
ed:7a:4e:69:2f:f4:f9:0c:a7:98:cc:af:c2:13:1a:07:29:fd:
97:d4:f2:b0:e2:19:0a:68:4d:30:a0:52:8c:33:e1:4f:39:ab:
40:d0:72:9e:7d:71:40:56:f1:44:e3:20:d0:c3:2b:fd:d6:03:
f8:8b:8b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:33 2025 by rpki-client