Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: ZcrpkzwuDCpM8cy9t9SWxnB1uJb79MGueQkgaHCmfQQ=
Subject key identifier: FA:AF:47:8C:92:92:73:59:FA:ED:1A:09:6C:E1:C0:99:AD:A2:C4:32
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 019A0D4B31E38D24A30C7EABC2301868B805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 1688
Signing time: Wed 22 Oct 2025 19:00:22 +0000
Manifest this update: Wed 22 Oct 2025 19:00:22 +0000
Manifest next update: Thu 23 Oct 2025 19:00:22 +0000
Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: shAeasA6/7HXGKdmau5gQ5Y4STPtnCMsstDHvBj2Dlg=)
3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=)
4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:31:e3:8d:24:a3:0c:7e:ab:c2:30:18:68:b8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Oct 22 19:00:22 2025 GMT
Not After : Oct 23 19:00:22 2025 GMT
Subject: CN=faaf478c92927359faed1a096ce1c099ada2c432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:43:62:5d:cd:62:05:c4:7a:7d:ff:de:6c:
29:5f:ca:6f:0f:0f:2f:3c:b3:84:97:26:8f:9a:b5:
89:f5:58:1f:b0:19:82:d9:dd:73:15:aa:5e:fe:04:
b9:e2:a8:a4:f3:82:43:18:18:25:0c:1c:de:d7:42:
71:26:51:30:13:52:57:c4:cc:be:3f:ac:c7:4c:c2:
14:fa:4b:c7:45:c9:09:3d:9d:42:35:b3:a6:21:aa:
b5:ee:c5:98:06:b8:fa:ae:74:36:db:1d:18:c9:6a:
1a:78:20:07:fd:3c:af:70:90:a6:54:b8:d9:f2:eb:
dd:86:04:47:23:77:d4:87:28:42:c9:5e:c9:fa:aa:
b0:45:1c:25:34:91:39:c1:64:d8:e1:c1:2c:ef:33:
8b:41:aa:dc:4e:6e:2a:00:47:5a:92:d2:75:9d:d8:
69:92:b0:f7:17:fb:a3:54:90:26:c9:10:24:7d:27:
d1:8c:52:04:dc:46:a8:f4:eb:e3:9e:26:ae:6a:1a:
9a:46:72:b2:04:1b:67:f6:f8:9f:08:d0:fd:41:1c:
bb:30:ba:f1:8f:70:28:1b:e9:2b:57:ef:51:e1:de:
2a:0b:05:1d:aa:24:64:8d:6a:c9:4f:ba:f0:cc:65:
2e:6a:12:81:d4:61:f7:6a:30:2c:ed:40:1f:8e:7f:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AF:47:8C:92:92:73:59:FA:ED:1A:09:6C:E1:C0:99:AD:A2:C4:32
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6f:d1:82:29:b5:dd:de:70:67:5d:a1:59:0f:95:3c:bc:5a:
bb:a0:8d:7a:dd:39:ed:15:8b:db:2c:62:8e:bd:1e:3c:2e:30:
24:84:08:c2:8e:fe:c7:da:30:eb:6e:f3:e8:3b:88:db:ca:ff:
5e:54:99:aa:a9:62:d0:bf:de:cc:31:f1:fc:74:1f:ea:fa:ae:
af:48:96:dd:cb:11:85:f8:f1:71:f4:ad:a3:1e:85:5d:3d:82:
54:e5:52:a5:4d:78:c2:50:85:f6:33:7b:cb:48:aa:7a:8c:d9:
5b:0e:58:bb:ec:14:4f:4a:f0:5c:ab:7d:0f:8a:52:2d:ad:5f:
78:47:1a:11:9f:dc:ec:89:3a:d1:87:7c:94:36:5a:b1:fe:5d:
87:8f:17:8a:df:c4:53:35:73:f2:6b:9d:cf:f1:de:cd:9f:fa:
90:ec:c0:16:eb:4a:4f:44:88:27:0b:c0:79:eb:19:93:aa:4e:
28:dd:6e:3e:df:5a:7e:fc:2b:c1:cc:46:8a:d5:a5:a2:f2:c8:
f3:bc:fd:d5:85:d7:7b:27:9f:5a:04:59:24:fa:e9:80:66:c7:
9e:c5:01:29:f8:2b:43:bb:08:07:41:5b:b7:af:91:bb:e6:b5:
7f:63:81:e5:a2:b1:54:f0:95:e8:a5:40:65:4f:77:71:48:a0:
b9:9c:84:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:08:21 2025 by rpki-client