Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: DdNXPPjlCfiYoYyjoOvDxYLPopWZ4yPr8f1dL4WfiIM=
Subject key identifier: F6:65:03:A2:A8:C5:CC:0C:29:70:06:37:67:CB:92:CA:C0:D2:47:EA
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 019A20D211A52A2A83E9241DA8CEF1153270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 1187
Signing time: Sun 26 Oct 2025 14:00:29 +0000
Manifest this update: Sun 26 Oct 2025 14:00:29 +0000
Manifest next update: Mon 27 Oct 2025 14:00:29 +0000
Files and hashes: 1: HTKjluKoMYE3YnxNS8OX7g6z7cg.roa (hash: sAIqDaQKvUjEGEm5NaK3hjATSYMoprKa9F9LOvjEkOU=)
2: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: tqGLoGsXp0110d3J2bdEyAbyQKn9fRo3jKmC+fi7BOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:11:a5:2a:2a:83:e9:24:1d:a8:ce:f1:15:32:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Oct 26 14:00:29 2025 GMT
Not After : Oct 27 14:00:29 2025 GMT
Subject: CN=f66503a2a8c5cc0c2970063767cb92cac0d247ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:40:d0:5e:91:34:46:83:e8:cd:4f:50:09:
db:1b:ca:2c:42:63:3f:c4:c1:32:7d:8a:d5:48:f4:
e7:08:b2:ea:e3:53:6b:f4:95:b2:e8:f5:9c:af:e6:
26:1c:77:05:7e:21:b9:f7:89:81:05:a9:ca:d6:84:
fd:68:3d:6a:70:a3:e0:6d:93:73:a9:50:81:38:1e:
f6:b9:be:4a:c2:51:b0:11:dc:4f:24:a5:c2:67:01:
d1:a1:e3:5c:7b:82:22:0c:82:c8:f7:7f:96:20:93:
5e:41:d6:ba:a5:4d:ae:66:b4:36:51:48:ab:c7:88:
34:d2:70:73:69:db:74:73:4d:72:3b:bc:38:7d:80:
84:59:8d:44:2a:db:98:48:d1:a4:16:26:9b:85:f4:
3f:e5:00:7c:64:c0:c9:76:79:f9:e7:0c:0d:80:98:
34:ea:4d:e1:a8:78:78:2e:67:b7:ad:1a:7b:36:3b:
61:1e:4e:ee:e2:79:d5:b2:86:fd:7c:22:33:9d:9c:
9b:fa:2a:d8:f0:68:33:6b:c2:2b:30:f6:f9:6a:0b:
8a:32:2a:70:3f:dc:c9:40:de:5f:78:68:7c:04:bf:
5f:d3:5d:47:a2:94:d9:c9:28:4e:2f:60:2d:61:0e:
ab:5e:c8:18:3b:9f:f9:bd:0b:f6:ad:7a:86:c7:22:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:65:03:A2:A8:C5:CC:0C:29:70:06:37:67:CB:92:CA:C0:D2:47:EA
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:24:35:da:4b:4c:ab:8e:21:52:82:2a:6b:9f:62:af:fb:18:
29:74:06:28:59:66:ff:8a:8f:4f:fb:62:9f:aa:5b:51:fc:38:
d5:74:54:2c:9b:5a:a9:45:a3:79:81:8e:f7:e5:39:ed:e3:4a:
21:89:dc:32:3f:23:98:06:76:e4:00:a4:09:d1:e8:b4:8e:9a:
a8:58:dc:ab:c0:d7:b8:a5:02:aa:4a:94:1e:f9:c0:a6:90:fe:
95:b2:e8:af:0e:dd:b5:52:48:dc:e6:97:ae:ae:7e:5e:d0:cd:
00:a9:02:e3:dc:c9:45:b5:be:21:72:ae:da:00:e0:68:68:a9:
77:88:1d:14:b8:77:44:60:20:79:bd:0f:aa:44:14:0b:d9:9e:
de:fc:32:30:27:c8:54:dd:6c:b0:84:a0:89:62:13:70:56:c6:
6d:cf:00:e5:62:a3:a0:58:8a:88:e3:80:6d:d3:87:73:cc:71:
20:2f:88:b5:d5:80:33:6a:88:05:5a:69:81:59:5a:dc:ae:98:
a5:34:7c:0d:08:60:33:e6:a4:24:59:ff:1e:de:6a:13:e8:31:
ec:68:c5:e3:c6:33:69:57:6a:ef:89:ae:f7:b9:3f:0d:97:ff:
c3:c1:9a:c2:c7:d2:5f:8c:76:f5:49:25:8a:35:e7:8a:cd:32:
36:02:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:34:29 2025 by rpki-client