Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
File: cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json)
Hash identifier: eF/qhkt06m+ZM7BKMrYxLNy1fXZKMY9mZKSJZ8TanZk=
Subject key identifier: 68:ED:CD:40:BC:E5:6C:35:6D:9D:42:6C:EB:EB:34:49:2B:E6:47:DD
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 019A7225E792F8F61021CD7EC40D6B91DDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: fWCFDMRuhsiL4C/PLI96Jwh+0ZKVYjfSl1P3b1orVZ8=)
2: iXldcpMNtu5kim9vQXhjht5Ha_0.roa (hash: OZZlPHrzKaaexsTtY7l0u4aOhC15J2UaGXg/fHHU/6k=)
3: lishyzU5fcRQD0UnbZJENmou-sc.roa (hash: OXZjviRf58gZnLzaiDcKdYvZD8OZRwCWQQj7e3qyEJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e7:92:f8:f6:10:21:cd:7e:c4:0d:6b:91:dd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=68edcd40bce56c356d9d426cebeb34492be647dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:19:2f:f3:db:2a:eb:f2:57:0f:3b:da:a0:
e2:8e:03:4c:25:a4:9b:78:4c:85:97:12:09:98:5f:
8c:3e:05:f4:cf:17:d3:9d:26:18:66:f2:ed:ff:98:
87:dd:57:d5:c9:f0:8b:b7:49:7a:62:45:88:2b:2b:
d3:5c:88:57:4b:37:46:66:3e:9f:9f:2e:a0:bf:46:
76:66:d1:9c:d2:18:a3:16:96:39:95:61:d2:0f:f0:
58:3e:f0:ea:9a:73:68:84:7d:76:3c:c8:cc:fc:e0:
4f:fb:27:54:9b:d3:51:c7:21:6d:e4:d7:34:62:fa:
8b:0e:5c:28:cd:4b:b8:3b:b4:6a:c9:5d:a1:79:13:
fb:75:1b:98:0c:2f:dc:01:b6:bf:1b:1a:d5:ea:30:
20:6a:e7:6c:7f:47:57:80:ee:9c:d1:68:2b:83:ba:
62:8d:c0:e3:79:d2:6e:fa:59:38:91:31:95:3e:a9:
c0:38:c6:a5:a3:24:31:f2:09:33:76:06:9f:47:b8:
ba:c6:e0:87:c5:e6:93:50:3d:62:10:0e:d1:23:2f:
0e:8d:3d:7e:33:64:0a:e1:50:70:3e:d9:96:4c:3d:
93:71:88:ea:d5:53:54:e7:7c:03:ee:1e:29:fa:e3:
eb:92:64:f6:c6:25:aa:36:2e:64:ed:af:b3:98:89:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:CD:40:BC:E5:6C:35:6D:9D:42:6C:EB:EB:34:49:2B:E6:47:DD
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cf:95:5d:5a:3c:0b:51:af:db:13:30:c2:4b:2a:62:f3:af:
13:68:c6:49:7e:fa:25:2e:4b:df:8f:6c:a5:2b:b6:c5:8f:c5:
5c:25:21:80:0e:92:cb:b7:c9:5c:27:89:97:da:0e:71:78:26:
a4:91:97:0a:95:45:a0:d8:df:31:28:ef:c2:98:06:8d:bf:c0:
a6:f5:79:85:9b:ea:db:8e:8f:b1:8b:50:e8:62:e8:27:24:79:
24:74:e8:78:d1:b3:44:60:5b:ab:26:f5:17:c4:01:e6:2c:77:
f1:db:56:70:09:dd:8f:c0:2b:eb:a4:5f:a2:77:0c:76:4d:08:
46:90:60:25:ec:92:9a:99:de:d1:19:a6:dc:6f:ff:51:b1:97:
45:d7:55:51:13:c4:c8:fa:94:0d:b9:74:a0:54:cc:c9:34:1f:
5b:ac:0c:8b:07:b6:10:98:67:64:ab:ee:46:c5:bd:fc:ec:ec:
99:87:44:df:a4:57:65:29:c0:dc:e8:c6:b7:19:3e:fe:c3:da:
e4:00:8b:5d:58:90:48:98:b6:0e:6a:f4:fe:cb:ac:37:db:ed:
85:ad:f0:f6:5c:d0:b3:25:18:47:4b:ee:84:fe:6a:df:0e:e7:
1a:06:35:83:11:a8:2a:60:f0:d7:14:4c:70:44:9f:e0:83:4d:
a9:7f:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:02 2025 by rpki-client