Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File: C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier: smV2pvN0hb8vNGN8XoZvLTfB2dCAtBEp+uRIP/irlUQ=
Subject key identifier: F6:7B:B4:41:0D:65:84:FA:3A:B7:0D:0F:A2:39:D4:6B:A2:75:D8:23
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer: /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial: 019A1D2C2C656F6A717CBC02795C1220CA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number: 0721
Signing time: Sat 25 Oct 2025 21:00:25 +0000
Manifest this update: Sat 25 Oct 2025 21:00:25 +0000
Manifest next update: Sun 26 Oct 2025 21:00:25 +0000
Files and hashes: 1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: OahU2RxhbWm/EaM3+fDoW1OqRaV6wxRocC4OnPG+tjQ=)
2: dy6V06G8CC2FK34EGVuxtzegKH4.roa (hash: gPhDzrN8RIm6TShQaGb5YzX92bCG0Thu0kMn08thu4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:2c:65:6f:6a:71:7c:bc:02:79:5c:12:20:ca:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Validity
Not Before: Oct 25 21:00:25 2025 GMT
Not After : Oct 26 21:00:25 2025 GMT
Subject: CN=f67bb4410d6584fa3ab70d0fa239d46ba275d823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:99:17:2f:19:5b:22:6d:36:e2:09:41:4b:
e5:84:24:f3:cf:09:c7:4b:18:a0:f0:50:7e:56:25:
e9:2e:5e:ae:58:65:02:ad:72:2b:55:0b:ca:42:f5:
69:9a:1b:a1:34:71:17:8d:e9:dc:b0:3a:38:97:65:
01:ca:0a:11:40:c4:6a:64:0d:d4:49:93:f6:8e:38:
81:21:53:e2:f0:13:f8:81:44:e9:f7:dd:5f:42:63:
d6:92:19:0d:76:54:1e:d6:2d:10:53:a6:c7:50:ed:
f4:3e:22:2e:f1:b3:fe:c2:30:a6:0d:45:4f:54:b8:
e1:0f:6e:1d:61:50:8d:86:13:40:a4:88:02:32:26:
82:30:da:2e:0e:7f:a5:f9:41:83:61:10:5c:83:d9:
77:7f:0a:cb:fa:f2:e8:4f:4d:fe:cf:cc:1d:47:41:
08:69:3e:2f:fb:ff:c5:ad:8d:2a:b7:64:10:c6:de:
54:83:4a:1b:af:8e:60:6a:06:9a:21:af:cd:e0:e5:
47:28:5c:f1:7b:09:2b:61:c7:14:ae:2d:84:1a:b6:
88:f4:51:8c:cd:dc:94:47:80:51:28:c9:58:40:f3:
e2:91:ec:ec:24:39:ce:06:d3:55:e7:87:a9:0d:fc:
c4:9f:ef:55:9e:dc:96:49:ee:d4:a2:3c:ec:86:57:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7B:B4:41:0D:65:84:FA:3A:B7:0D:0F:A2:39:D4:6B:A2:75:D8:23
X509v3 Authority Key Identifier:
keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ec:10:0e:ca:c9:76:e0:a0:24:e0:35:f0:35:76:c2:88:0b:
96:fe:08:75:6c:68:24:b7:3d:a5:d3:e2:b8:29:f2:6c:f0:ca:
be:2e:3b:00:f9:b8:35:71:fc:65:87:c2:10:7f:93:66:cb:f0:
47:5e:1c:e9:90:25:98:01:e9:aa:0a:0b:9e:2a:51:41:11:e7:
d3:11:e8:0d:b1:f3:cf:45:d9:bb:e8:50:2f:5b:56:a7:84:00:
b6:d7:40:99:a9:2c:84:fa:45:8f:cb:c9:e6:22:76:36:28:5b:
dd:39:ec:08:a1:f4:24:8c:45:63:07:e7:2f:1a:34:47:20:49:
c9:c6:b6:bc:ae:e6:d5:15:f3:ca:fd:23:a4:d8:25:f0:55:a3:
4f:71:c8:65:c6:21:19:84:84:04:15:10:61:cf:b9:73:e9:60:
e1:6a:f7:75:a4:6d:cf:0c:07:d6:ae:11:d2:c3:e4:8d:31:77:
05:d8:64:b4:69:ce:8e:86:3d:d4:2a:51:48:ca:9b:ea:ff:bf:
1a:6e:71:5b:c4:e3:ce:3e:17:32:97:10:02:80:f0:47:25:e7:
79:0b:3a:f2:e0:c3:c3:f7:6e:6a:0c:ee:44:02:51:26:f2:4d:
72:4f:21:c1:2c:66:2f:1b:99:e3:36:24:75:12:12:ea:64:18:
b5:78:0f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:03:08 2025 by rpki-client