Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: 5SFcLneBWusk4HoPSFLsMhv4I0DOnC6oggFfQ1GQY4s=
Subject key identifier: 44:85:18:98:0F:1E:CC:26:F7:72:EF:24:83:05:7D:46:F4:6C:FC:B8
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 019A2B1F199936ED15F424542BA4172E7E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0B22
Signing time: Tue 28 Oct 2025 14:00:49 +0000
Manifest this update: Tue 28 Oct 2025 14:00:49 +0000
Manifest next update: Wed 29 Oct 2025 14:00:49 +0000
Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: 2CLZuEG+itzwDZV3/ZxQ4Yvuw+xa4ZW+CWH7YIXBZ0Q=)
3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1f:19:99:36:ed:15:f4:24:54:2b:a4:17:2e:7e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Oct 28 14:00:49 2025 GMT
Not After : Oct 29 14:00:49 2025 GMT
Subject: CN=448518980f1ecc26f772ef2483057d46f46cfcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:76:e6:80:04:56:85:fa:80:b2:c8:87:d8:
45:2a:1c:24:a3:65:1d:d8:73:65:8c:11:70:7e:96:
f9:42:62:ba:de:c7:d6:ec:ca:39:ba:71:ac:9a:47:
6c:19:df:2e:86:a9:80:6f:52:b5:7b:ae:77:2b:29:
ef:a3:b8:1b:2f:03:13:59:38:7b:3d:5a:13:4d:0b:
96:f4:78:74:62:74:cb:4a:7d:c0:17:0d:af:46:88:
a5:55:b2:e8:04:00:f7:35:e5:41:ed:27:ff:95:98:
80:62:fc:d1:39:c6:b3:45:4d:28:12:2d:45:ed:e9:
8a:5d:6e:97:1e:45:47:9d:f9:b5:e3:01:fe:02:ba:
ea:bb:dd:3c:34:8c:a8:79:d8:37:1f:a3:fc:6a:68:
84:d2:4c:ff:d0:ab:0e:ec:d3:26:5b:05:39:d9:31:
e3:85:fa:20:cc:dc:3f:2e:81:a9:eb:6e:97:59:04:
ce:93:b7:62:7b:13:65:03:d4:d4:ed:5e:01:dd:d1:
a0:43:e9:5b:e2:84:5a:d3:1c:41:41:a3:18:bf:28:
dc:db:10:23:1d:be:b6:ad:eb:f2:19:4b:e4:a5:39:
eb:26:3d:b7:ee:13:90:d7:11:86:78:61:d8:b1:18:
7e:2d:6f:3c:59:f7:46:6c:15:63:20:ee:a0:07:37:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:85:18:98:0F:1E:CC:26:F7:72:EF:24:83:05:7D:46:F4:6C:FC:B8
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2f:8d:f3:57:cc:d7:1d:3a:9b:45:54:95:77:6b:d2:f2:75:
74:7d:11:64:92:3f:ff:d3:5e:02:d9:c4:0b:de:03:9b:f3:b3:
cb:a1:cd:ea:fe:d9:51:cc:e2:d0:10:c0:07:3a:fc:d1:5a:ed:
e0:e4:b2:1d:5e:a2:4b:6d:0a:19:e1:61:0e:a3:f2:28:37:3c:
94:7d:1a:7e:12:35:09:bf:1f:2b:f1:61:51:d0:15:c8:23:53:
3e:e5:d5:11:4b:58:c7:81:4a:00:ed:a9:ed:58:84:d0:2c:88:
f5:2c:86:9f:aa:11:ec:33:3b:29:9b:f0:56:c2:bb:39:4a:7b:
21:97:7f:b2:12:5b:05:12:8a:a1:46:79:05:65:e7:a6:f0:f8:
a0:c3:f5:4f:a1:98:06:57:6e:19:34:e4:84:0e:08:a3:49:c2:
16:2a:95:a1:fa:61:7c:86:83:ac:a1:37:41:a1:06:88:f1:0d:
26:a4:ad:97:e3:ac:9b:64:18:ed:2d:38:af:a2:1a:79:08:b3:
1c:b4:c3:f0:b3:75:4e:75:b2:5c:7b:b5:68:2f:e5:f8:85:be:
f8:64:7d:13:b8:69:da:27:77:42:0d:27:05:c0:b4:63:6a:a7:
89:ec:2e:08:88:c3:c3:4d:b6:69:5f:79:59:34:c7:70:fa:25:
50:fc:1e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:01:31 2025 by rpki-client