Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier: XG4lG64TBkqhE4rbiTJOCw+0L2ZMKYDIfbh5mS22598=
Subject key identifier: 7E:63:BD:CF:8E:B2:C3:33:7D:F3:8A:24:11:70:48:BC:B6:59:D1:35
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 019A7225FEA298C05A381989FB10E9B0B9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: Ao990PJ6T1oOHG0dTnf/59iUbnVMDnHCEL/v7LvHO5g=)
2: ZnV_8X8pYoAVKjZWPYlTDet39Po.roa (hash: AQ2CtHZNHtcjULxTw0rAIotVl7Ai3G/vKLwZOUyWiLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fe:a2:98:c0:5a:38:19:89:fb:10:e9:b0:b9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=7e63bdcf8eb2c3337df38a24117048bcb659d135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:71:f5:dc:3f:d0:f5:00:b7:59:9b:af:fb:
e2:e5:6c:0f:33:7d:f9:9c:5c:5f:2e:b1:33:84:9f:
b1:4c:65:96:20:ab:e8:82:1d:6d:58:d6:a9:e8:c9:
7e:17:18:dc:e5:ad:4b:73:25:70:23:d4:ef:42:89:
5a:b0:bb:a6:12:16:b3:34:1a:13:63:4c:6e:e0:63:
3e:74:c5:89:12:9d:9f:9c:39:83:c3:cd:fe:52:2e:
a2:ca:f0:e7:3b:52:e5:2b:7e:fb:11:c2:ae:0b:b0:
bf:b7:10:bc:5e:e9:b1:a3:61:de:f8:c4:28:a8:b7:
7c:40:f2:d6:be:c7:9a:8b:30:fc:dd:23:01:80:ef:
e4:25:fa:ef:61:7f:a3:c0:b7:3f:77:da:b9:11:e7:
ff:c9:04:7e:28:7a:ac:bf:f6:9c:76:a5:b4:44:00:
79:3c:b5:a3:86:4a:0b:a3:83:8c:59:59:81:85:79:
58:e8:f4:09:4f:d1:2b:79:92:98:5a:d5:38:17:98:
d9:cd:1c:9d:12:79:9d:8b:05:9a:86:5f:66:f4:d6:
b2:ad:2e:9e:83:4e:de:70:19:42:9a:a9:20:bf:1a:
b7:e7:6b:6b:b6:3f:93:7a:15:27:75:09:c9:12:3d:
02:a6:25:69:a4:4c:41:4c:03:70:82:a5:cd:67:96:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:63:BD:CF:8E:B2:C3:33:7D:F3:8A:24:11:70:48:BC:B6:59:D1:35
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9d:83:dc:c7:b1:87:65:ab:1d:e9:2c:f8:2c:ff:98:b0:f8:
9d:73:6c:1a:61:b6:cf:d5:ad:59:ef:3f:00:62:e1:d6:a5:7c:
b4:ab:a9:c5:dd:e9:db:41:39:31:a1:29:83:22:e8:f1:b8:af:
72:b4:cc:b2:41:d6:53:04:7d:16:cf:72:aa:00:76:33:cf:08:
6b:9f:41:52:fe:ea:b0:08:d4:b8:05:7b:0f:98:be:64:2b:ca:
1d:56:62:53:77:23:23:78:d9:39:18:6f:3d:94:58:b1:19:f9:
5b:69:3c:67:e9:2e:7b:65:43:a1:ff:dd:84:ec:02:76:c9:46:
15:e7:b8:c2:39:d1:9b:51:67:04:f6:98:df:9a:57:2b:6d:f1:
65:39:92:f3:56:d7:58:78:d4:ed:0b:63:6a:d2:bc:49:92:93:
d7:24:ad:89:b2:cf:73:09:18:7b:9c:1f:df:76:d3:a2:bb:18:
31:5c:5f:ec:bc:cc:69:9a:b4:58:b9:87:81:49:f4:d8:c9:d0:
c5:fc:24:7e:c6:47:2c:0a:bb:b4:fa:96:02:c5:89:74:1a:aa:
d5:ca:dc:17:2f:b5:fd:0b:a6:a7:47:22:fc:8c:fc:4c:2a:83:
b1:18:c4:a9:04:69:8a:bd:17:c2:ca:86:6d:34:5a:0f:48:0e:
3f:c1:c2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:06 2025 by rpki-client