Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: RSdZ6/QeFfee0lAym1Mc1j0ARt5Mhwe3SmPWGuR21uw=
Subject key identifier: F0:8B:FE:C7:CE:1B:6E:C8:C3:3D:65:0D:06:2F:1C:84:D6:D8:78:56
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 0199D1DBFAFF6BAD667914E81C1DA317B99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0961
Signing time: Sat 11 Oct 2025 06:01:18 +0000
Manifest this update: Sat 11 Oct 2025 06:01:18 +0000
Manifest next update: Sun 12 Oct 2025 06:01:18 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: mJVm8DBoRumtFJdUPTZU/XDzphxwKIFt8DBDknziTL8=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:db:fa:ff:6b:ad:66:79:14:e8:1c:1d:a3:17:b9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Oct 11 06:01:18 2025 GMT
Not After : Oct 12 06:01:18 2025 GMT
Subject: CN=f08bfec7ce1b6ec8c33d650d062f1c84d6d87856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:2c:2c:96:6c:e3:cf:d1:b3:f4:22:0d:59:
de:74:86:eb:95:47:14:a1:8d:16:0b:d2:a1:cd:8e:
c9:33:dd:55:d7:5b:01:f5:46:60:9f:ed:e7:26:9a:
26:12:7a:49:31:5e:69:f7:59:de:ec:59:8b:1c:4d:
bc:69:95:c0:a4:47:ef:f0:25:df:76:d5:02:d6:16:
d3:f7:98:ae:34:f4:cf:0a:a7:c9:78:f3:b6:d4:7d:
46:f5:ff:ed:01:e4:7d:a3:3b:ce:a6:a5:cf:4d:76:
48:fc:c5:3e:07:52:a4:9f:72:01:16:16:cb:68:1e:
be:d0:06:fd:9d:14:44:28:ae:09:46:a8:56:9e:31:
ec:1f:59:c4:66:56:8b:be:bf:43:dd:af:0d:39:de:
47:1f:46:41:1d:87:21:b0:09:61:cb:6e:c9:57:2f:
7b:d7:7c:b1:ab:d6:f1:db:74:5b:8c:10:92:1e:e9:
c5:2e:82:e2:bd:0d:21:7b:08:8f:25:a5:70:14:03:
76:1b:87:ff:c7:dc:df:b0:64:24:f1:27:64:f5:79:
a8:6d:23:aa:18:70:bb:5b:c8:cf:bd:dc:78:a1:f5:
77:a1:92:fc:e3:1b:26:55:aa:e3:ae:e4:8e:7f:68:
75:8e:b2:04:19:28:55:5f:11:df:22:a2:4d:a7:fe:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:FE:C7:CE:1B:6E:C8:C3:3D:65:0D:06:2F:1C:84:D6:D8:78:56
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:56:2f:fe:3a:10:a0:af:c8:b7:a8:84:b7:79:b1:87:21:51:
c2:ca:52:5e:70:66:5f:ff:3a:fd:12:6e:dd:ac:98:07:a0:f6:
71:06:72:24:75:bd:93:61:6a:3e:a2:a4:88:7b:a3:b8:b2:12:
30:3f:0f:9c:49:1d:5b:13:99:3e:4a:12:b8:28:fc:b5:a2:30:
1d:72:b6:98:1d:89:ee:7a:85:f6:f9:cb:8e:ea:f5:50:a5:49:
3e:68:7c:ed:fd:8c:3d:43:c8:e3:15:fa:00:b3:f2:a2:ad:27:
0c:7a:30:38:cb:c8:3f:19:f0:34:35:84:9e:e0:3d:0e:7b:65:
85:c3:e3:4c:f0:43:76:95:3a:0a:cc:50:c3:b6:be:36:93:8c:
08:0c:62:17:45:b1:0f:0d:c3:e3:41:78:b9:58:b2:fd:92:fa:
8a:9d:ec:b1:40:d3:eb:59:34:d4:6e:69:53:66:e9:ec:6a:8a:
ca:69:96:be:46:91:7c:98:73:e9:ba:e6:9c:9f:7c:f8:e6:1b:
34:e0:4b:8e:7f:e3:3f:9d:b8:61:58:73:4a:b3:ad:c5:25:91:
d3:76:74:f3:b0:37:78:e9:55:a9:48:c2:4f:9d:1e:ac:19:db:
e7:44:d6:16:a9:fc:49:b5:fb:14:0e:b4:03:ce:f8:39:42:4f:
db:9d:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:53:23 2025 by rpki-client