Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
File: cMbVNbDydaJhhfj03KWA0m16l0Y.mft (raw, json)
Hash identifier: S4CgxIl475VM/z9IP4qY/46DYkO/DGXEcaFNwh+VysI=
Subject key identifier: AC:DB:BF:B0:BB:C9:16:64:F3:E5:14:14:F6:22:FF:9F:99:01:F2:FE
Authority key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
Certificate issuer: /CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Certificate serial: 019A70DC62BC2B03A50B0DDC748BE47273B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
Manifest number: 1E
Signing time: Tue 11 Nov 2025 03:01:22 +0000
Manifest this update: Tue 11 Nov 2025 03:01:22 +0000
Manifest next update: Wed 12 Nov 2025 03:01:22 +0000
Files and hashes: 1: cMbVNbDydaJhhfj03KWA0m16l0Y.crl (hash: Fi1CyV9Zp2+sTH53iKbF3RuE9dnazVsPNNQxpaW3MK8=)
2: f8J05R1DiyfQNVJpqFL4fbooOhg.roa (hash: Dkqb7BcnwOOceNgCAbq8lzyD7hu5TVYuIlv372mwXcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:62:bc:2b:03:a5:0b:0d:dc:74:8b:e4:72:73:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Validity
Not Before: Nov 11 03:01:22 2025 GMT
Not After : Nov 12 03:01:22 2025 GMT
Subject: CN=acdbbfb0bbc91664f3e51414f622ff9f9901f2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:fb:c8:be:f2:dd:81:56:92:df:f8:73:ca:
ab:43:54:46:d6:89:b3:11:9e:9b:86:c6:ae:eb:fc:
72:a4:9b:a4:c9:d2:d4:9e:5a:87:76:6a:11:ab:a5:
c6:61:12:a8:4a:78:93:f8:3e:d7:51:d0:d9:8c:b5:
ae:b7:95:b4:d0:c1:80:28:fe:a8:77:02:00:ac:80:
a1:5e:98:4e:58:06:5f:f4:b5:80:a7:c7:40:e9:c5:
fb:63:b8:92:ff:f7:8f:c2:4f:5e:20:03:c6:00:18:
d6:f7:82:fc:8b:d9:7d:1a:54:ca:f5:e8:46:59:55:
d0:36:ed:d8:05:70:76:ca:3e:9c:1b:e8:a7:7c:b3:
23:54:9d:f4:f9:31:95:05:cf:d7:80:a1:74:fe:e5:
c1:4d:7a:16:1f:d4:b0:2d:d6:c9:95:1b:14:d9:80:
49:7d:71:6a:9d:02:17:13:83:65:9e:cb:45:7c:2f:
46:42:6f:a2:c5:79:b1:45:8e:06:e9:22:67:73:33:
d4:ed:1d:ba:ce:98:04:9f:7a:45:de:68:5f:c6:37:
cd:9a:25:36:56:50:37:f4:1c:d6:df:ef:23:03:07:
d3:17:6a:37:ec:3e:bd:51:62:ae:8d:22:8f:fd:50:
cc:dd:85:b6:3b:6e:6c:f0:b3:11:3c:61:48:6b:78:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DB:BF:B0:BB:C9:16:64:F3:E5:14:14:F6:22:FF:9F:99:01:F2:FE
X509v3 Authority Key Identifier:
keyid:70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:54:3d:4d:6b:bf:b7:58:6a:2b:fe:85:d0:ff:87:33:c4:99:
40:5f:ca:d9:dd:2b:da:96:97:e2:3d:f5:ca:97:d3:4a:17:2e:
bc:0b:ca:92:67:fa:82:6f:d1:b9:22:bb:72:98:77:b9:33:81:
45:81:9e:1c:08:eb:63:61:d9:59:0f:b5:80:20:65:ae:00:7c:
34:a5:d9:d3:79:3d:e0:ea:b4:2f:6c:57:14:5c:23:49:a4:c1:
83:35:4a:b9:19:4a:53:92:c4:cb:3a:fd:6c:6b:0c:10:35:f7:
b6:59:83:9e:5c:7c:a3:56:de:92:f7:c7:85:db:3a:51:a6:ff:
bc:8c:c7:d4:9c:85:e4:e9:fd:26:99:43:5f:19:1e:23:07:22:
93:c1:6c:85:9d:03:7e:6b:cd:0e:5c:94:dd:16:29:73:03:4c:
32:5a:17:66:3b:be:6e:01:e8:35:41:1f:3c:91:b9:58:17:18:
c4:94:ed:3c:6e:d9:45:16:9e:7e:98:7f:c5:40:77:a2:c5:1a:
33:d2:1d:c9:7a:62:ec:f6:82:69:73:34:f4:a4:5d:39:73:55:
5d:6a:2a:31:1d:75:b1:39:78:35:07:61:60:31:b6:f2:b3:0f:
9a:fd:c3:ac:d1:62:e8:51:a8:82:0b:4e:d9:2a:30:5b:16:6c:
13:ab:de:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:43 2025 by rpki-client