Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
File: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft (raw, json)
Hash identifier: n/62TbSCXgpkRH9YV+niIyGTucpGinTJpll4yjPHDOo=
Subject key identifier: 00:22:3C:62:B8:69:9D:92:69:72:BC:C8:C7:5B:6B:94:67:D0:B7:13
Authority key identifier: 0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
Certificate issuer: /CN=0b69087cef600358ef98c1c97da07234dfd0e037
Certificate serial: 019A72CA5929776ACB1D37B154BA6B80DAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
Manifest number: 0190
Signing time: Tue 11 Nov 2025 12:00:55 +0000
Manifest this update: Tue 11 Nov 2025 12:00:55 +0000
Manifest next update: Wed 12 Nov 2025 12:00:55 +0000
Files and hashes: 1: B9IzXLL2ixuUY8NCctMry3Z9SSY.roa (hash: LgY0TUvH+7Vh/0iBbmvFVKw12ZRzdi35NQADfuagyL0=)
2: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl (hash: S19+533FIWFvynHNbQBhNc/4KDapdtwhHOpycbQoJuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:59:29:77:6a:cb:1d:37:b1:54:ba:6b:80:da:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b69087cef600358ef98c1c97da07234dfd0e037
Validity
Not Before: Nov 11 12:00:55 2025 GMT
Not After : Nov 12 12:00:55 2025 GMT
Subject: CN=00223c62b8699d926972bcc8c75b6b9467d0b713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:d9:c9:c6:6c:73:7c:d0:39:4b:fe:02:4b:
b2:16:9b:45:44:0f:ed:91:a8:ed:c7:b0:3e:f5:01:
88:f6:32:f7:26:1b:ed:ac:92:76:f8:fc:50:61:a2:
01:57:36:1c:9f:84:44:95:21:d7:d6:f4:39:9f:ba:
f5:1e:f5:79:5b:5f:a6:40:bd:a3:7d:e1:9e:00:2f:
58:33:77:41:2d:2a:0a:7b:7e:0e:5c:5d:a2:15:1b:
3f:24:b5:44:95:84:5c:0f:9e:4f:93:af:62:a6:1a:
80:3e:da:f1:f0:73:8e:60:ac:1d:8e:f3:5c:c8:4e:
c8:ba:42:b4:cb:7d:4a:6d:15:89:41:e8:1f:d8:49:
d0:84:76:c7:c0:0f:fa:f4:c1:64:d2:f9:5b:e9:4b:
a7:67:a9:10:30:01:6d:95:df:5b:eb:f3:1c:8c:57:
4c:26:16:26:dd:7b:d0:88:f2:6b:4a:0a:6f:eb:ed:
01:d6:18:e0:3b:7c:05:be:14:fe:42:0c:9e:2d:7b:
73:13:d7:02:22:7d:7f:d9:3e:b2:dc:c0:a3:90:64:
24:16:e1:75:22:8c:59:be:0e:bc:da:b3:60:c3:ff:
c8:e8:3b:b5:8b:b8:f2:69:2b:64:bc:4c:20:21:65:
bf:8c:12:df:2b:3d:14:e4:a2:fa:ce:05:3e:91:bc:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:22:3C:62:B8:69:9D:92:69:72:BC:C8:C7:5B:6B:94:67:D0:B7:13
X509v3 Authority Key Identifier:
keyid:0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0b:de:4e:f9:31:14:93:ff:d2:92:fd:3b:0e:28:81:f2:87:
05:d3:d7:15:37:81:5e:ef:5d:a1:d3:ae:b1:6d:80:7b:a8:b2:
35:be:b8:6d:3c:04:2f:6b:35:5c:b1:8a:53:07:a2:3c:e0:e2:
f0:49:5a:1f:61:7e:3c:c1:44:cf:3e:63:e7:ca:7b:11:80:65:
d8:93:e5:fc:92:45:1e:e0:a8:74:fd:83:64:8a:43:36:c1:8f:
e7:52:d2:1e:c8:c1:b8:69:87:80:97:b3:b9:a4:cb:12:d3:4a:
02:84:8b:31:39:bc:42:02:b5:94:27:1c:14:2f:27:35:d3:a1:
44:30:0c:b6:1b:71:5a:09:bd:4b:bd:6a:e5:fe:c1:f2:39:87:
70:9e:96:29:c3:2b:e4:44:b6:ee:71:6d:e1:06:ca:7a:05:ef:
16:c7:73:c4:f6:99:5f:9b:8e:4e:2a:3d:62:b3:cb:40:c3:94:
e6:06:40:72:71:12:6a:a4:e5:21:85:60:44:e4:f6:58:21:91:
98:ba:83:ea:3d:2a:d2:d7:50:6d:0b:7b:eb:82:d4:44:f3:fe:
00:4d:c0:e3:ae:58:52:4c:cf:6b:a4:4f:25:44:8d:3f:c2:e4:
d2:78:a2:26:20:c7:76:14:f4:76:30:a5:f6:9d:85:c3:18:3d:
3d:f9:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:59 2025 by rpki-client