Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier: ZE5ytprSSTsRG4bIw5aC+vt3S5ABTjj4QjKEgNFhfUo=
Subject key identifier: 63:D5:55:3E:F1:7E:50:21:08:A4:7D:A1:CC:A2:5A:A4:92:6A:CB:10
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 019A71B87F84CE2297DA81D62AB113FBBA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: xdDaXUGUoJxd/tXOpIsZpKgHwHOLIYP4sTIBs6ZIKGE=)
2: P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa (hash: viXxvbgM6fcm3+uNTvobtmlKGENasOgtCzi4bFmu9u0=)
3: VjB61y70CykGJrI1joYA_LZs7BQ.roa (hash: 0fdGzWqdSh6FPKMh+lErtdFv9hP3dlRfbAfCokMP6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7f:84:ce:22:97:da:81:d6:2a:b1:13:fb:ba:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=63d5553ef17e502108a47da1cca25aa4926acb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:ed:69:26:64:82:1d:51:16:89:3b:85:7e:
b9:1c:57:db:5a:74:09:ab:4a:34:f1:20:6b:27:49:
f9:8d:47:b1:91:11:2f:56:c6:61:c4:6e:29:4a:8a:
59:8b:d5:27:59:b2:38:78:61:33:69:0f:73:6c:5f:
19:41:7a:27:6b:5f:03:f7:d1:3a:c4:da:7d:f3:62:
0e:79:a1:1d:00:6c:ac:fc:c1:43:77:b9:b4:c0:91:
21:94:5e:5d:06:aa:d2:18:10:14:97:08:36:93:f6:
b1:bc:40:bd:50:e7:64:c0:29:1e:30:42:c0:49:96:
75:f4:35:15:7d:1f:36:2c:c1:1d:2e:e6:77:21:b6:
f7:ef:d2:e8:47:e9:35:4e:f6:68:cd:6b:40:08:22:
cf:cf:e9:0e:09:1a:19:6f:66:0b:57:ed:10:fd:ef:
d8:97:c0:78:30:68:bb:2e:73:34:96:74:6b:3a:8f:
12:23:2a:56:fe:95:46:72:50:ba:eb:8f:4b:0b:28:
f6:57:dc:70:f4:07:b6:18:9b:d3:12:8a:c4:89:15:
af:69:c0:4d:c8:2b:0c:f7:2f:3c:62:d9:32:ca:5e:
be:db:c1:ed:8d:05:9b:d1:2c:4e:1e:5a:a3:eb:8e:
0d:4c:3c:49:82:25:06:4e:cd:a3:2e:06:e6:cc:e1:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D5:55:3E:F1:7E:50:21:08:A4:7D:A1:CC:A2:5A:A4:92:6A:CB:10
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3a:1c:1b:53:41:49:14:0a:81:f0:5b:2b:7e:2f:98:0b:e9:
f9:8d:f2:28:7b:63:36:65:16:ac:c2:ab:4b:22:95:63:0a:31:
28:8d:b7:af:ad:05:87:c8:fd:1b:79:2a:f3:b7:d2:b1:dd:9c:
ce:ca:2f:d8:4b:ab:47:0d:21:70:22:2b:13:ed:1c:e3:d7:20:
a5:87:e9:b6:43:eb:f6:cb:eb:fa:8b:e5:07:49:97:25:55:83:
99:a9:32:06:ef:85:29:e8:14:53:c5:8d:44:2f:36:30:7d:4d:
70:45:d3:c3:8d:d0:5d:70:88:3f:c0:6c:62:e9:bc:35:68:d7:
b4:cc:4a:1b:85:29:12:1e:e3:c3:06:c1:34:f8:24:85:f2:37:
96:3b:0c:31:cd:3c:d6:a9:e0:3f:b6:c4:a2:41:72:4c:40:51:
82:4f:be:64:4d:59:58:ac:87:ef:7a:75:df:75:44:02:d0:ff:
7f:ad:0a:74:e6:4b:77:c8:fe:5d:f4:fb:72:6d:ec:2c:14:6b:
7a:8c:c6:9f:75:75:97:41:85:cc:0d:fe:f2:35:37:ce:1b:02:
9e:fe:77:b6:3d:ed:63:48:33:74:a5:40:ab:2b:6e:05:47:7e:
4f:36:5c:73:f8:dc:85:41:0b:18:26:2f:98:e8:17:59:29:ff:
4f:d2:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:13 2025 by rpki-client