Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: TA4QikZ4GCZ2eizcQquSqLoPMyUz1u2sARTPhhw+P/o=
Subject key identifier: EB:50:FB:18:A5:00:13:EC:10:0C:E8:70:A4:B0:E8:F8:C6:5B:9C:D0
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019A725CAF2A056CFC5DA751C8D5D7AAA6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0545
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: 80Qo/+tBL31H53v8SuEaAg/lGBu4H3K6KERazPWg5rI=)
2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:af:2a:05:6c:fc:5d:a7:51:c8:d5:d7:aa:a6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=eb50fb18a50013ec100ce870a4b0e8f8c65b9cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:36:fe:ad:d6:0e:ad:05:18:01:60:ec:70:
55:58:b3:ac:ef:ed:dc:1c:db:1d:55:a6:4a:e9:e1:
9d:9e:ac:33:7e:e0:28:6e:3a:f6:1c:d1:61:c1:50:
d1:58:6d:f2:e3:d7:81:88:5a:3d:10:97:e1:e1:55:
4d:92:78:51:4f:c5:84:01:d7:52:da:d0:54:42:2d:
4b:95:8c:2a:32:77:0f:38:a8:da:8b:30:dc:03:e2:
26:ad:6d:53:21:87:b2:55:a8:64:90:3f:10:cc:9f:
9a:89:6e:22:bb:08:cb:74:29:5d:96:6f:07:de:2a:
07:41:7d:e5:d2:b7:ef:29:1d:c2:b9:29:c2:d9:6d:
be:f7:7a:bf:15:98:a9:32:07:1e:89:61:1e:fb:7d:
2b:da:a6:ab:c2:25:5d:7e:b8:df:62:e4:5b:49:91:
3d:e2:7d:d1:e8:4a:0c:15:86:47:5c:aa:a1:a9:04:
b5:91:1f:6c:ef:9e:ed:d7:b7:d9:d0:79:d8:b1:58:
20:2b:90:0e:c2:3f:db:ef:20:c7:a3:89:ca:eb:e0:
92:46:60:c2:da:d4:39:b2:79:e2:84:c6:ea:ab:ed:
9a:66:92:54:bf:f7:c4:c4:f2:75:f9:e2:20:58:fd:
08:1c:65:36:8d:2d:d6:e5:c1:25:a8:b3:28:56:a4:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:50:FB:18:A5:00:13:EC:10:0C:E8:70:A4:B0:E8:F8:C6:5B:9C:D0
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:87:e8:e4:a4:7e:bf:a7:15:f9:f6:af:87:6c:46:1f:2b:09:
11:d4:e7:f8:4f:68:fb:1b:21:e4:6b:19:7e:55:75:2c:5b:c0:
f4:9d:82:f5:e9:52:f1:65:f3:a9:5d:63:bd:56:50:e5:55:05:
82:de:9b:fb:69:14:5c:84:b2:24:c4:26:2e:bc:e6:bb:bb:3f:
0f:e0:3f:d5:c9:0f:c8:5d:ca:13:09:de:26:64:f4:6a:95:e6:
5e:a6:a4:f7:20:38:d1:fd:4e:7f:4a:c5:74:48:cb:03:7b:68:
d5:49:e0:80:1d:11:d7:3a:f1:87:35:86:fe:2e:a8:3a:ae:80:
60:ae:18:bd:aa:78:78:58:79:c5:86:ca:80:7d:f7:0a:21:3f:
28:2a:2a:d0:91:08:ba:5b:b2:2c:74:d3:3c:04:36:1a:9d:e1:
75:07:70:d2:8b:d6:ae:95:9a:fb:4c:4e:70:eb:f9:b9:24:ef:
42:b1:81:1c:69:1f:09:93:f1:c9:2c:0f:a6:79:9f:a9:bc:61:
65:fa:b3:ae:e8:4f:75:ce:d3:b7:1b:09:84:ca:83:3a:21:be:
53:0a:aa:ef:a3:88:c9:58:a5:c5:ad:f6:7f:c3:5d:36:bc:eb:
9b:fd:e2:8d:ce:85:22:e1:b9:4f:29:d3:7c:8a:fe:d0:03:c7:
5f:26:01:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:26 2025 by rpki-client