Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
File: C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json)
Hash identifier: K1Q+3WwVsGH/fYnJt0/qe0M29AhJ4TNhBKYCJxEwJww=
Subject key identifier: 74:42:D8:F4:E0:5F:B5:50:42:63:85:BC:13:A5:D3:69:88:AC:57:67
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Certificate issuer: /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial: 019A26D491C28C2220365C6F29FDDBD5B00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
Manifest number: 1293
Signing time: Mon 27 Oct 2025 18:00:56 +0000
Manifest this update: Mon 27 Oct 2025 18:00:56 +0000
Manifest next update: Tue 28 Oct 2025 18:00:56 +0000
Files and hashes: 1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: mhGINQbu1El8C39S8NmbTmJ/g6zm8cNf7lnP1AEYE0k=)
2: ubaYGhsK3un9FzpeOuJImEsVY0k.roa (hash: GKSurghCGTsvWWfo6kF8DtoCXANGJM6Q52lyK44WE3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:91:c2:8c:22:20:36:5c:6f:29:fd:db:d5:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Validity
Not Before: Oct 27 18:00:56 2025 GMT
Not After : Oct 28 18:00:56 2025 GMT
Subject: CN=7442d8f4e05fb550426385bc13a5d36988ac5767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:5b:23:a8:b0:ad:4f:50:1d:4e:61:39:fb:
76:cc:db:8c:e1:b3:41:24:54:22:f6:b6:4d:4a:f3:
d0:98:6d:df:73:0f:09:79:79:06:b0:1f:ac:11:7b:
73:f1:79:18:4a:86:5b:55:fe:84:19:d4:b9:2b:08:
90:60:cc:79:28:00:df:f1:e5:cd:11:b3:32:7c:82:
17:9e:67:bc:e1:21:93:6b:96:a2:fb:77:4c:e1:05:
c4:40:61:87:f5:86:23:a6:93:31:86:2f:4f:89:27:
53:bb:5b:ff:8e:87:9a:c8:ea:d3:81:31:3e:9d:98:
5a:26:4e:3b:5a:f7:38:ec:9f:dd:28:53:11:e6:ff:
a9:81:88:8b:60:9b:e8:28:54:d6:47:a8:c7:1c:fa:
72:c1:0a:b6:47:da:b9:c7:3c:fe:6a:c5:6b:2e:fa:
c2:2d:70:fd:81:28:20:cb:49:c8:10:a7:f7:42:d6:
a6:47:8e:44:f0:46:49:63:69:07:93:e8:f9:d3:98:
cc:1e:14:20:24:eb:fe:14:0f:a6:78:b1:e1:42:86:
e2:da:66:95:d9:5e:53:fd:7d:59:0f:33:38:03:50:
23:bf:94:84:ae:0c:c4:1e:61:49:20:cf:38:68:17:
ef:e2:90:1a:39:78:45:51:b6:53:f0:2a:8c:76:0b:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:42:D8:F4:E0:5F:B5:50:42:63:85:BC:13:A5:D3:69:88:AC:57:67
X509v3 Authority Key Identifier:
keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:92:33:2a:fa:8a:71:7d:90:20:ef:63:3f:44:e6:69:73:ec:
6f:16:6a:36:df:4d:5d:70:78:89:c2:c8:ae:49:39:23:d8:2b:
ff:8c:38:56:f4:1e:06:0d:a0:27:61:78:f1:c4:42:46:91:62:
cf:cf:7b:e9:bf:50:48:50:3a:2e:54:75:77:21:3d:03:db:2a:
e1:b0:3c:4a:19:d1:c5:23:d1:02:5a:68:ac:38:36:c6:ac:ab:
88:36:c5:c2:c8:01:ab:fb:e0:91:dd:86:f0:f9:f1:27:32:16:
bc:41:08:bb:8e:87:77:52:98:31:f4:6d:a9:55:88:9f:75:cc:
f5:19:72:cf:69:36:56:64:f2:90:f5:13:98:20:aa:31:76:b2:
69:a0:9b:99:16:e1:0f:2c:78:5d:50:53:fd:e2:f8:db:2c:46:
d8:32:2b:e8:7f:96:ca:24:8d:3d:d3:5d:20:18:55:41:16:cb:
38:91:5a:59:6c:d8:81:83:e5:5e:ca:f9:6e:04:13:11:38:74:
5b:f2:e9:1f:9a:62:f1:94:ca:97:01:9a:f1:91:db:9a:44:96:
8b:d4:3d:16:06:43:b0:c9:cf:5d:94:de:90:88:c3:96:1e:eb:
63:81:ba:fc:03:4f:d7:d5:58:6d:c7:3f:8e:fa:e0:95:d6:13:
01:1d:08:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZom1JHCjCIgNlxvKf3b1bAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGEyMzdkMTE3ZGY3N2UwYjhhYTUxMmY2ZjI1ZmIyMDdm
OWEyYjEwHhcNMjUxMDI3MTgwMDU2WhcNMjUxMDI4MTgwMDU2WjAzMTEwLwYDVQQD
Eyg3NDQyZDhmNGUwNWZiNTUwNDI2Mzg1YmMxM2E1ZDM2OTg4YWM1NzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU9bI6iwrU9QHU5hOft2zNuM4bNB
JFQi9rZNSvPQmG3fcw8JeXkGsB+sEXtz8XkYSoZbVf6EGdS5KwiQYMx5KADf8eXN
EbMyfIIXnme84SGTa5ai+3dM4QXEQGGH9YYjppMxhi9PiSdTu1v/joeayOrTgTE+
nZhaJk47Wvc47J/dKFMR5v+pgYiLYJvoKFTWR6jHHPpywQq2R9q5xzz+asVrLvrC
LXD9gSggy0nIEKf3QtamR45E8EZJY2kHk+j505jMHhQgJOv+FA+meLHhQobi2maV
2V5T/X1ZDzM4A1Ajv5SErgzEHmFJIM84aBfv4pAaOXhFUbZT8CqMdgtYSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRC2PTgX7VQQmOFvBOl02mIrFdnMB8GA1UdIwQY
MBaAFAtKI30Rffd+C4qlEvbyX7IH+aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yYjU3ZmQtZGZlZC00MzYzLWI2YTIt
MjVjOWFmYmIzMjIxLzEvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yYjU3ZmQtZGZlZC00MzYzLWI2YTItMjVjOWFmYmIzMjIx
LzEvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5IzKvqK
cX2QIO9jP0TmaXPsbxZqNt9NXXB4icLIrkk5I9gr/4w4VvQeBg2gJ2F48cRCRpFi
z8976b9QSFA6LlR1dyE9A9sq4bA8ShnRxSPRAlporDg2xqyriDbFwsgBq/vgkd2G
8PnxJzIWvEEIu46Hd1KYMfRtqVWIn3XM9Rlyz2k2VmTykPUTmCCqMXayaaCbmRbh
Dyx4XVBT/eL42yxG2DIr6H+WyiSNPdNdIBhVQRbLOJFaWWzYgYPlXsr5bgQTETh0
W/LpH5pi8ZTKlwGa8ZHbmkSWi9Q9FgZDsMnPXZTekIjDlh7rY4G6/ANP19VYbcc/
jvrgldYTAR0IZg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:41:55 2025 by rpki-client