Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: Pk7x2VNenNW9uoeUbAFvI9KTuY0C4WlxUYfXuY5VxCQ=
Subject key identifier: 49:C7:C0:82:8C:8B:F4:C2:10:59:A5:AF:EE:51:2B:82:52:32:2E:D8
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 019A722596A952BCDB0041EB4E693A5CE7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0C41
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: g3XMrOoUu41zOpNnJi7jqufYOP5gTMUbej/Jf2tCwck=)
2: fS7Vtpenx3ISocQLcsKDmT4cdAc.roa (hash: lsacutCDcdT1KWfBtvedBOBvauWcszwNt+V8+YsxMyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:96:a9:52:bc:db:00:41:eb:4e:69:3a:5c:e7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=49c7c0828c8bf4c21059a5afee512b8252322ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:60:fd:9e:29:f3:e6:a9:6f:fd:eb:c8:c8:78:
60:62:01:e9:b2:79:14:46:a6:33:41:12:e0:9d:b4:
6b:9a:6c:bc:eb:07:1a:16:c7:4d:c4:67:1b:4b:94:
12:7f:02:47:7a:f4:3b:ed:38:51:d6:62:ce:5d:68:
ad:f5:81:22:dd:91:0b:98:35:07:4e:da:10:91:1b:
d5:47:37:28:95:f8:68:e3:b1:e4:48:48:03:32:be:
a3:aa:e1:f3:8d:4a:ce:42:43:87:c9:bc:89:e9:79:
38:81:93:57:d8:79:54:97:8a:96:55:fa:16:a7:af:
5b:07:0c:39:40:f9:af:87:01:0f:c8:49:00:1c:77:
bc:4c:0c:00:d6:6e:4b:53:2a:fe:fb:74:f3:c4:27:
be:4b:1f:3b:e1:2a:73:d3:e1:f6:2c:a9:20:0f:a2:
67:04:e0:3e:a9:6e:a6:2e:68:16:9e:72:8c:fc:28:
bc:9f:14:51:8b:b9:ec:33:44:eb:17:f4:56:16:35:
ba:8f:d4:77:15:ba:2b:ad:d8:fc:85:3e:30:34:bf:
5c:c5:30:ac:5d:6e:2a:11:af:28:4b:8e:92:17:91:
1b:38:53:a9:e8:51:88:e4:b1:7f:d6:73:12:6e:bf:
69:91:91:38:40:08:ba:cf:f5:53:ef:48:5a:51:58:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C7:C0:82:8C:8B:F4:C2:10:59:A5:AF:EE:51:2B:82:52:32:2E:D8
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3b:ab:79:e1:f4:08:e0:0e:a7:80:a3:77:64:49:b1:de:23:
4b:47:16:e3:d2:61:e7:49:8b:d6:3a:0a:15:c4:d9:e0:70:f3:
7e:de:b9:44:97:2d:e3:99:45:da:fd:f6:a1:eb:87:8e:85:7b:
42:04:de:2a:fb:68:e4:f7:28:dc:cf:ea:91:d3:d0:4b:5e:d9:
2f:d1:fc:00:0c:a4:ad:0b:99:b5:d2:ba:ab:23:17:81:fc:b0:
04:a3:71:3b:b1:2c:57:f7:3d:dd:ef:15:e2:ee:d0:24:b5:3d:
26:59:ed:e0:7d:14:86:ac:5d:4b:d8:1b:6f:45:1f:19:ae:8c:
ff:d1:13:8e:17:58:6d:2f:ca:68:bb:1c:1f:be:fa:de:67:06:
5b:52:05:42:10:38:94:2b:21:e1:f1:b8:96:b7:23:b2:4c:6f:
79:3f:3d:c1:58:9d:31:b2:07:e8:e4:02:db:85:25:bc:ee:4e:
b5:5d:54:53:03:28:9f:42:8b:c0:3b:e2:79:97:89:a2:b5:2e:
e5:22:2f:00:81:65:80:94:2a:64:cc:76:ba:8a:97:46:0e:de:
64:cf:84:a8:52:a5:bc:95:4b:75:ee:b5:a3:cd:bd:08:d8:03:
0c:81:95:0e:83:bb:3e:10:13:ae:b6:69:5b:d5:51:74:7b:f5:
c8:c7:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:06 2025 by rpki-client