Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: P2HZD5QHpE05uDfSf28F6pQeXneK0S58JvH55fv3Rag=
Subject key identifier: F1:9A:C7:F6:46:13:B8:3C:85:8B:BF:A8:F8:B4:D1:AD:D8:6C:77:61
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019A4138AFCF114A00CB7C9DCCF460BE2821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 1709
Signing time: Sat 01 Nov 2025 21:00:25 +0000
Manifest this update: Sat 01 Nov 2025 21:00:25 +0000
Manifest next update: Sun 02 Nov 2025 21:00:25 +0000
Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: +Ej4ctaz7PsQqWXLeoF255QzHqffw9n7tzqzFc1ZIsU=)
2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:38:af:cf:11:4a:00:cb:7c:9d:cc:f4:60:be:28:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Nov 1 21:00:25 2025 GMT
Not After : Nov 2 21:00:25 2025 GMT
Subject: CN=f19ac7f64613b83c858bbfa8f8b4d1add86c7761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:bc:2b:17:32:bf:81:75:cd:e3:0a:6d:bf:
e7:1f:aa:47:13:fe:aa:ea:fe:b2:a8:44:7c:c0:51:
b3:54:40:e7:8e:0d:a3:67:58:c4:1d:65:ee:d3:de:
e5:24:82:16:6c:e7:6f:ca:6e:fc:d2:11:6a:17:4b:
fe:4d:cd:8a:ec:fb:59:88:b2:a2:71:5c:ba:54:95:
ac:30:d2:42:05:38:65:92:91:73:27:12:87:09:fd:
0e:17:44:6c:0c:90:03:e6:2f:d1:3d:03:15:5f:90:
07:2f:86:90:9c:e7:52:69:f7:26:15:3b:c6:74:14:
14:8c:48:57:72:bb:25:50:b8:7f:a8:84:3d:d1:3a:
6f:f3:f1:ff:56:63:db:b1:8c:b9:b5:1e:44:f1:49:
07:a1:6f:37:b0:5f:f5:85:ca:d9:86:fd:be:0f:e4:
62:66:1f:ce:64:20:a6:f3:4f:f8:18:f2:25:89:3a:
63:be:a4:38:5c:83:e7:d4:54:00:00:a3:97:9e:d4:
69:50:ea:f1:58:99:b8:d8:56:fb:b0:c0:5a:ab:6a:
da:a9:cc:43:7f:6c:55:ae:44:5c:89:15:24:af:c7:
5c:ae:49:98:1d:d3:56:d7:72:71:92:07:4f:84:66:
14:16:0c:ff:16:f5:7d:c4:26:5d:89:d1:0a:9d:67:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9A:C7:F6:46:13:B8:3C:85:8B:BF:A8:F8:B4:D1:AD:D8:6C:77:61
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:dc:7e:43:72:f3:c4:c5:40:92:ba:a9:dd:29:94:02:67:b8:
a2:e2:76:77:4f:18:67:ce:56:5e:7e:ae:db:a9:f0:78:81:04:
df:0a:98:c7:6c:8f:76:b2:31:eb:10:3f:4c:79:ad:61:08:c7:
56:97:69:ed:20:69:7a:06:15:d6:8c:8d:da:f2:9e:bc:fc:97:
dd:96:41:72:13:c3:d9:3b:29:79:0f:ec:bf:cb:2c:3f:d7:89:
6e:20:37:97:46:53:b0:23:24:40:0d:30:12:5a:9a:91:48:2f:
e3:f5:e7:2b:34:7e:d8:41:de:3f:9d:54:b7:c5:70:ac:db:a3:
c1:dc:dc:4d:c1:45:50:1a:9d:ee:c9:01:18:5e:d3:41:1a:8e:
5e:ac:3d:40:bc:74:64:80:12:5d:53:79:bb:78:c0:e4:25:7a:
a3:8b:83:9c:00:46:6b:2f:c3:94:20:69:de:e0:65:c0:d5:43:
2e:0b:87:24:51:c7:e4:3e:d2:a3:c3:0c:eb:3e:3e:df:9d:99:
a1:b6:96:0c:fa:26:58:73:23:12:22:65:72:47:63:cd:8a:4f:
2a:ff:58:26:82:b5:52:5c:3f:3b:b6:7b:d1:9a:25:21:a1:fa:
b1:85:14:45:bf:3f:f5:be:27:19:36:f8:aa:a2:b0:28:47:4e:
c1:73:4b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 00:15:28 2025 by rpki-client