Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: w1XwDU3qT2RkO6RBLS1b47k/te4VozTByB1gZkeAigM=
Subject key identifier: 80:B5:9E:69:F6:D9:BC:16:BC:DA:96:98:C4:F9:C7:5D:B6:C3:2E:76
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 0199500A43EA661345EDA47224DF6A370680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 1688
Signing time: Tue 16 Sep 2025 01:01:13 +0000
Manifest this update: Tue 16 Sep 2025 01:01:13 +0000
Manifest next update: Wed 17 Sep 2025 01:01:13 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: dbrwsqunBgyZvxYG1lFXnx1Y/f7EYgkLM2vL5hUm3Ic=)
2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=)
3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:0a:43:ea:66:13:45:ed:a4:72:24:df:6a:37:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Sep 16 01:01:13 2025 GMT
Not After : Sep 17 01:01:13 2025 GMT
Subject: CN=80b59e69f6d9bc16bcda9698c4f9c75db6c32e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:14:e7:c2:69:3a:4b:03:7e:6a:51:dc:3b:
46:89:55:84:6b:8a:26:09:c7:34:21:fb:74:3e:db:
c7:1e:04:6b:1a:5c:9f:d5:df:47:4e:32:21:b8:d8:
f3:a2:27:ec:3c:d6:3b:4c:72:53:37:b2:56:d5:fc:
27:f0:49:e1:dc:6a:35:e5:ab:3c:c6:46:8f:a1:da:
7d:34:80:be:e6:71:47:0b:1c:ab:99:98:c4:94:b3:
a3:35:11:55:a4:be:1e:41:d0:c0:7b:61:f0:5b:30:
3b:e2:9c:92:e8:b9:07:98:a3:0a:03:40:7f:fe:7a:
bc:8b:bb:a0:1e:c3:3e:58:cd:66:e6:a5:16:cb:97:
1c:43:52:76:cc:78:dc:34:5c:69:a5:84:50:3e:7b:
33:44:1a:78:6e:0f:6a:8a:56:d3:61:3b:9b:c1:3b:
16:8f:b4:37:6f:f2:3d:a7:f1:ff:a4:87:42:71:2d:
f0:f1:23:c5:28:5b:e3:d7:d4:90:5e:6f:ae:a0:3b:
e0:74:86:8e:04:a2:87:e7:81:a7:38:09:8b:84:ed:
8b:a2:1a:0c:9c:f0:f1:e9:91:32:63:75:0f:46:0c:
89:ef:dc:74:31:63:9a:37:a3:eb:8f:78:ac:a6:da:
1f:6a:35:57:e6:3c:ed:99:a2:1c:c9:9a:7a:cf:93:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B5:9E:69:F6:D9:BC:16:BC:DA:96:98:C4:F9:C7:5D:B6:C3:2E:76
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:70:b6:93:5d:a2:08:71:2e:1b:61:81:18:1b:b0:a4:87:da:
e3:3b:10:4a:aa:7d:04:90:a8:b3:ff:02:5f:94:a9:bc:00:f5:
04:76:4d:fd:78:7b:cf:16:ab:5a:df:ed:a8:1d:99:92:91:9f:
87:fd:3a:a1:31:2f:83:13:1a:6f:a9:53:b5:a0:66:f6:ee:22:
03:19:1d:20:20:9a:12:0b:7d:c9:3c:70:21:78:90:cb:e2:46:
0b:12:0e:48:d8:cd:dd:ee:ea:50:1c:bd:14:54:2e:15:8f:6c:
be:25:34:be:c7:49:8b:1c:44:15:b1:61:84:62:39:77:3b:d5:
aa:c7:82:64:30:95:60:f7:c9:16:f2:19:6e:9a:9a:df:08:dc:
5a:f5:86:84:4c:9d:c2:dc:7b:0d:52:bf:d0:17:ef:ff:4f:33:
39:86:b9:25:46:30:5d:a9:d8:8a:6c:04:35:40:5e:da:f6:96:
bb:d9:5c:9c:a7:69:29:90:5e:3c:e5:f1:3e:13:7f:2d:22:7a:
8e:b1:b3:77:91:59:d9:32:4b:4a:b8:cb:cf:14:e3:9d:b6:5e:
74:ec:09:47:4c:0b:25:ea:13:a9:55:e3:c6:e0:2b:85:b2:22:
84:73:dc:c7:fa:03:59:b3:c4:f6:2b:a4:96:a2:f1:3e:b2:d9:
53:a5:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 08:49:24 2025 by rpki-client