Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier: o2g7ZZ8FoZ8R7Ox261wxAeBUDtZwMbdi3Rb/IhMAApw=
Subject key identifier: 0E:79:AE:F8:EF:F9:D2:F1:5A:96:14:F1:33:0A:C7:26:B0:C3:8A:E8
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial: 019A71B91D36BD1EAB7D09A6BB7D16DC5260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: Wbdzz3Oo6hzwBD+FB2/A2aFxOgmrgSIqddm9HGOLumw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1d:36:bd:1e:ab:7d:09:a6:bb:7d:16:dc:52:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=0e79aef8eff9d2f15a9614f1330ac726b0c38ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:e1:c2:46:1d:35:fe:6a:e4:7f:1e:f8:7b:
91:1b:f1:cb:9c:c6:01:66:2f:13:eb:94:58:82:2c:
92:1b:21:3a:62:b6:65:d9:e8:87:58:4d:c4:5f:ad:
fc:7f:9f:9b:02:74:43:7d:af:5b:a2:57:a2:20:fb:
0f:65:a5:2f:34:be:15:77:d5:3c:bd:50:d0:4d:90:
bb:b2:a3:b9:73:4a:65:b7:bb:b1:a2:1a:96:65:59:
7d:5e:f5:58:8c:b5:79:b3:1d:d2:58:87:10:14:29:
59:56:4b:16:6f:c9:09:2c:fd:a9:e8:0c:1b:0b:15:
c0:cf:40:bb:01:93:87:ea:9c:19:0d:07:32:6e:da:
46:de:2f:4b:bb:33:7a:30:67:ae:c1:3f:c4:63:b8:
e2:94:88:6e:46:9c:6a:12:41:d8:c1:be:12:db:ef:
71:0e:ad:cc:08:f9:04:98:af:fc:66:92:ed:14:78:
2a:55:76:ff:ca:4d:22:65:62:df:54:6d:26:4e:9d:
bd:1f:02:c5:67:83:88:68:94:49:65:48:ce:2a:6a:
67:7c:f0:df:d8:97:2a:f2:e9:d2:ba:7b:7d:bd:e1:
6c:de:80:ec:f7:ad:0f:4d:da:6b:06:76:50:2f:29:
3a:09:50:b4:76:b1:d8:b3:7a:9d:f3:b2:e1:49:8b:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:79:AE:F8:EF:F9:D2:F1:5A:96:14:F1:33:0A:C7:26:B0:C3:8A:E8
X509v3 Authority Key Identifier:
keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:15:7d:c1:5c:af:f6:7a:c0:ba:87:c0:cb:86:0a:f2:1f:ad:
7b:0d:63:86:06:d6:76:d7:b3:a5:46:42:e4:13:95:a5:05:0c:
12:57:ba:1c:e3:ae:0c:02:0b:54:48:35:80:20:18:ef:bd:63:
3d:d7:df:58:33:77:e7:34:b3:8e:ab:57:97:2d:cf:c8:d1:70:
44:a9:0d:ee:f6:80:c9:6a:4b:7a:b2:17:ad:45:dd:01:95:65:
93:df:2d:5b:4d:d2:59:1c:6b:0a:e6:8c:5f:88:98:ad:86:7d:
a2:1e:67:35:c9:dc:4e:91:a3:7a:9b:8c:86:95:5a:14:25:f1:
35:b0:35:97:f4:02:0a:f3:82:96:4b:e3:53:3e:c9:f3:1f:69:
32:13:a1:f8:cd:4d:d0:a0:b0:87:66:ec:89:84:d1:68:d6:55:
e5:7a:80:82:1f:4c:57:e9:6c:80:92:67:ff:75:54:90:a1:0d:
9a:a9:8d:43:42:6d:79:b4:09:67:98:e6:1e:ea:93:bf:ca:0d:
f9:15:4e:e5:f5:28:41:2f:f9:c6:b5:bb:72:25:31:03:f7:8f:
ae:4d:39:01:db:77:ff:c1:9b:72:55:2a:bd:c5:f7:68:d9:3b:
8c:74:c7:aa:f4:bd:90:71:ae:dd:bb:43:98:ea:9a:55:62:89:
86:f6:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:47 2025 by rpki-client