Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier: zn6Xkla24Pijt4vQZqssThGJ1UjPN65pxwc2JOO+np4=
Subject key identifier: E2:73:A4:49:DC:09:D3:E0:94:6E:15:13:40:37:44:73:DF:8E:D3:57
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial: 019A239C13484409EE18E1CB786BBC85C6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number: 1689
Signing time: Mon 27 Oct 2025 03:00:22 +0000
Manifest this update: Mon 27 Oct 2025 03:00:22 +0000
Manifest next update: Tue 28 Oct 2025 03:00:22 +0000
Files and hashes: 1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: br+SQIrukzzrrneszvGndUI4SoVecssaC1LhKQC+usk=)
2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:13:48:44:09:ee:18:e1:cb:78:6b:bc:85:c6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Validity
Not Before: Oct 27 03:00:22 2025 GMT
Not After : Oct 28 03:00:22 2025 GMT
Subject: CN=e273a449dc09d3e0946e151340374473df8ed357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:48:f6:62:e7:86:b6:82:2a:eb:35:71:a9:e5:
5d:24:e5:66:f8:40:bd:a3:01:da:c7:61:e3:73:3b:
e7:24:ac:75:31:51:ba:04:f5:a6:d1:b9:84:2f:cd:
81:35:60:a4:21:b0:99:ea:8d:33:7e:24:c8:b1:54:
bf:97:23:ab:ac:91:ed:88:3b:48:c5:11:05:8c:5b:
63:22:3b:a5:53:e3:db:70:25:53:cc:b0:fb:ab:e2:
46:9e:14:a0:0b:51:90:c9:c2:e2:a0:a8:9c:5a:ae:
7d:72:4c:b5:b3:47:ab:4c:20:5f:9e:3c:da:89:0d:
74:2f:33:c5:2d:51:fc:34:ef:9d:5b:41:ce:2d:21:
a5:a7:a4:51:12:3e:89:9e:9c:c4:c1:1d:40:97:88:
9b:7f:f5:d2:77:c1:36:64:34:70:86:4c:78:1e:0d:
ff:4a:1a:5c:f8:a2:66:83:d3:90:63:20:7d:9e:fb:
ad:1e:f6:40:0e:62:3a:1c:cb:d8:7b:aa:a9:fc:6f:
d2:a5:c6:cc:fc:3f:fd:f6:67:98:c3:d3:4b:7f:4a:
39:27:3d:f4:1d:7f:b5:67:34:34:1f:1f:78:0d:ab:
cc:23:8a:fb:9d:7c:27:51:4b:9c:ab:b7:69:ca:2c:
42:e4:ee:57:3a:fa:e5:04:0c:d8:03:a7:6f:b2:5a:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:73:A4:49:DC:09:D3:E0:94:6E:15:13:40:37:44:73:DF:8E:D3:57
X509v3 Authority Key Identifier:
keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:25:6c:f7:a1:14:26:7d:5f:13:06:cb:c2:d2:33:a9:9f:78:
3c:f3:90:ad:cc:ca:8f:a4:b1:c9:b5:66:05:cc:76:b2:51:f5:
77:36:f2:d7:65:f2:0e:a8:a6:0b:47:ce:64:45:73:a6:8d:64:
5d:1c:f1:2e:63:79:b8:12:5b:f7:b2:52:c0:ac:1e:2f:e1:66:
1f:20:b3:2e:56:e8:4a:5f:66:61:65:e1:dd:fc:5e:21:10:c9:
9b:1d:cf:20:40:cf:0a:32:3f:f9:a4:84:14:b9:cd:ab:dd:e7:
07:e9:9f:dc:e6:a1:86:9b:48:99:ba:83:dd:2f:34:4f:ea:a1:
1b:3c:83:28:cb:23:17:d7:f8:fa:dc:f7:f1:4b:24:c1:8e:9e:
bf:65:09:ac:82:ba:d2:a1:46:d9:93:89:a0:52:f8:c8:42:e0:
33:53:ac:cb:84:16:0f:33:62:af:f3:d2:19:1d:ea:97:ec:3b:
1d:7d:18:89:31:30:24:f2:c4:08:d1:71:5c:c6:5e:2f:f9:28:
f0:17:96:ca:0c:c6:f0:05:0c:0d:6d:d1:a6:43:a6:b8:15:bf:
df:a6:46:68:44:c7:75:e7:8a:7b:e5:48:35:8c:6a:9e:2d:17:
5a:fe:16:e3:32:60:5e:09:68:c9:38:36:d5:e1:e0:82:7f:e3:
e3:f7:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:10:17 2025 by rpki-client