Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: IDPOv9RgFACcAqwZW89ZmVme7FsmLl56u6XMYfR4oHs=
Subject key identifier: 5D:3F:E3:56:27:12:F5:A0:B9:1C:8F:9C:3E:4C:E7:31:B9:3F:5A:A3
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019A228B28A204257AD82AE2CE891B34E3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 22:02:16 +0000
Manifest this update: Sun 26 Oct 2025 22:02:16 +0000
Manifest next update: Mon 27 Oct 2025 22:02:16 +0000
Files and hashes: 1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: ymZ/vc2U0VVGRBXV8MLJAyP92yFDDPffrkccYIFS6DA=)
3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8b:28:a2:04:25:7a:d8:2a:e2:ce:89:1b:34:e3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Oct 26 22:02:16 2025 GMT
Not After : Oct 27 22:02:16 2025 GMT
Subject: CN=5d3fe3562712f5a0b91c8f9c3e4ce731b93f5aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:ef:7b:1a:18:90:a1:9c:17:88:69:88:3a:
c1:83:c5:57:89:40:7c:f4:86:c5:d0:a8:f6:fb:d9:
77:b9:1d:5f:bc:a7:63:ce:80:76:df:d4:17:51:cf:
43:ff:26:9a:6b:71:6a:bb:d9:e9:b3:41:59:d0:2d:
67:d5:27:65:7b:20:2e:01:48:de:a1:ca:5c:28:af:
e8:44:24:5e:df:a4:aa:6e:3d:1e:b9:2a:1c:ef:3b:
87:a3:85:13:aa:ae:6c:73:2b:e2:90:aa:f3:30:06:
b4:83:53:3b:1d:65:81:85:ed:86:54:4e:cd:ba:bb:
d9:e5:cc:da:46:4d:8a:70:8c:82:1e:a3:0c:2e:fe:
e2:c5:b8:bb:76:c9:fb:e3:ae:bf:d0:2f:f1:11:15:
47:5d:cc:de:90:36:25:90:31:b6:24:eb:09:12:25:
d5:b8:7f:02:cd:99:7b:6b:b7:69:74:ab:35:7f:c3:
c4:37:a6:15:87:c4:11:7c:8a:7d:c7:44:4c:f8:ee:
51:79:70:dd:1d:e0:13:b0:8f:82:bb:f0:15:42:5e:
a7:08:4b:4f:ac:38:32:b9:a7:6a:a2:39:08:bc:26:
bd:e0:b0:00:ec:d5:45:32:59:88:7a:ce:6c:e4:e2:
34:47:1e:18:aa:80:ae:47:bf:4d:00:6c:db:2d:a9:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3F:E3:56:27:12:F5:A0:B9:1C:8F:9C:3E:4C:E7:31:B9:3F:5A:A3
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d5:8b:d7:8f:ca:6b:b2:2f:17:68:d8:bd:a8:58:a5:2f:af:
f5:f1:a2:12:09:81:31:58:7e:2c:30:78:59:a1:15:e8:02:e3:
51:e2:e4:bd:99:7b:9f:d3:65:07:1d:c2:3c:8d:6a:c1:29:ce:
0c:dd:9b:3b:c6:ea:63:b1:00:4d:4e:e2:82:2b:98:e4:0d:1d:
00:54:da:d9:a0:4f:da:df:58:75:76:c6:ac:30:68:1c:a0:25:
a2:63:dc:c3:55:5d:6b:fc:ee:f7:81:db:ea:33:fe:ee:87:8a:
0a:a3:92:7c:d5:14:3f:62:1a:53:fc:98:44:dd:21:43:b8:13:
a2:c9:5d:27:01:95:06:67:4a:6f:ba:dc:9d:64:30:9c:32:93:
a0:97:8c:cf:bf:d9:5b:27:93:20:29:c8:ec:af:4e:5d:1b:3b:
9a:ea:6e:a3:48:7d:52:20:a0:74:05:df:c0:39:d9:af:df:f3:
b0:69:84:f7:b3:76:c5:98:21:3f:3e:5a:0a:ef:75:14:d1:20:
7f:94:8d:4a:c6:5f:ec:05:e4:cb:db:30:0d:4b:a7:ac:9c:f9:
f6:8d:c1:53:37:5f:57:6d:70:d1:b6:c5:b3:d2:fd:10:c0:96:
b5:f5:dd:bf:2c:0a:84:e1:d5:0b:27:df:30:b4:5b:63:70:4b:
56:b6:b5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:40 2025 by rpki-client