Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier: V1SG299gCq2GKq/o90F0/hD1VmX0e5a8/jTg6DJ6r5s=
Subject key identifier: 88:73:76:E9:59:3D:61:D8:AE:A6:69:C0:84:62:D7:1A:F3:CA:6F:6C
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer: /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial: 019A72CABE4FD711A6F800945D393A44464F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number: 16F0
Signing time: Tue 11 Nov 2025 12:01:20 +0000
Manifest this update: Tue 11 Nov 2025 12:01:20 +0000
Manifest next update: Wed 12 Nov 2025 12:01:20 +0000
Files and hashes: 1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: 1WtPkykLVxsffBXpNL6a07lJXR1FS/4tD5x39Hy+Ixk=)
2: f_yh7-7v7LI3DnSdnUSk00iuL5g.roa (hash: WRI0Xz6/VCX9n+DPCS4hBmIPi2foRqOlNvNKjpUOgU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:be:4f:d7:11:a6:f8:00:94:5d:39:3a:44:46:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Validity
Not Before: Nov 11 12:01:20 2025 GMT
Not After : Nov 12 12:01:20 2025 GMT
Subject: CN=887376e9593d61d8aea669c08462d71af3ca6f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:98:17:bb:c8:63:42:bc:10:40:26:64:1a:
ca:bf:d6:1c:8d:1b:98:9a:98:22:1b:d7:0c:b4:7d:
41:6d:24:ca:db:34:d9:e2:ab:d3:e4:50:38:58:01:
72:80:29:9a:2c:61:a2:57:c4:5e:2f:5f:67:13:14:
3b:3e:e7:73:22:d2:63:66:9d:94:16:0c:39:4b:db:
ed:d2:38:c1:08:3f:4f:64:fe:18:35:27:82:b2:95:
93:01:a1:1a:bd:e8:5c:2f:70:02:c3:93:b5:42:1a:
cf:5c:b0:05:78:fc:3a:bc:a1:79:83:dd:d3:ca:5e:
42:2f:a0:a7:90:76:11:fb:71:f9:29:96:79:63:97:
50:e7:bb:66:82:e8:a2:fe:3f:c4:ee:ff:ff:6b:9c:
57:4a:25:d7:ea:0d:d9:67:62:d7:37:84:2f:aa:ac:
77:8e:4a:82:27:2f:a2:ef:05:9a:5a:f1:71:24:9c:
eb:ec:42:b5:82:4a:66:30:d8:a5:b7:27:01:e0:6a:
c3:0f:e9:33:3d:c8:4a:8a:47:d7:1b:d4:46:b4:f7:
df:9c:f6:1e:1c:e4:b7:66:5d:6e:cc:9b:1d:47:69:
6e:f4:a8:b4:46:5e:0f:cd:cb:c5:2c:d0:17:2c:10:
ec:81:2c:ec:4d:00:37:25:f8:31:05:af:f5:d0:55:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:73:76:E9:59:3D:61:D8:AE:A6:69:C0:84:62:D7:1A:F3:CA:6F:6C
X509v3 Authority Key Identifier:
keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0d:af:ff:06:e3:d0:dd:30:4b:cb:80:25:b3:91:04:fa:e6:
74:24:ec:0e:db:0e:55:a9:57:b9:fd:05:d8:85:d6:1a:c8:12:
53:e0:a5:54:f8:ee:57:22:19:83:9b:b4:18:00:e3:35:8a:3e:
22:70:25:0e:36:9a:15:20:df:2f:e6:db:ea:7b:1c:d6:5c:e6:
b5:38:a5:2e:24:70:d2:37:74:09:66:a7:f8:5a:35:ba:48:ba:
ca:bb:40:1b:73:fe:65:01:05:89:dc:35:89:4d:68:40:0a:66:
09:fa:03:6f:7a:4d:55:6d:91:4c:90:f0:61:c8:52:d5:1c:7a:
ca:ac:ee:9b:2c:74:0e:85:b8:88:d6:03:37:e7:75:d8:b7:58:
04:78:45:61:3d:34:5a:4b:fa:a6:03:89:e2:d8:2b:9d:69:33:
aa:41:ee:90:6c:fa:41:c2:20:0e:f6:24:3d:33:9a:d9:ae:d5:
68:a2:98:73:a2:39:97:6f:4a:f6:7b:12:71:71:58:19:40:89:
73:e7:d1:93:40:ff:46:5c:a9:59:fb:40:9b:dd:81:88:03:75:
07:a7:c0:83:2b:44:34:f7:f4:a6:9e:c2:3a:f2:70:bb:05:a7:
9e:ff:cb:3d:d3:f3:52:fd:c7:62:0d:e2:e6:29:34:4b:78:73:
e3:bf:21:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:47 2025 by rpki-client