Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: LlUe6jymro3QUmMPH2PlynZKrj3OY3+UdqDFmqCbiSw=
Subject key identifier: 5D:5E:A2:9B:6D:68:F1:C8:4A:03:43:7E:57:30:68:B4:45:65:D4:A1
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 019A25C12C3D810F039604929F8FF3D93994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0B36
Signing time: Mon 27 Oct 2025 13:00:07 +0000
Manifest this update: Mon 27 Oct 2025 13:00:07 +0000
Manifest next update: Tue 28 Oct 2025 13:00:07 +0000
Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: Wqt3xgT3gvsPxLeuP1Ao4i9O36CvsWMF+G+V2qKEb8Q=)
2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:2c:3d:81:0f:03:96:04:92:9f:8f:f3:d9:39:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Oct 27 13:00:07 2025 GMT
Not After : Oct 28 13:00:07 2025 GMT
Subject: CN=5d5ea29b6d68f1c84a03437e573068b44565d4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:91:9d:48:41:84:3c:dd:ee:cd:b2:e2:18:
4a:41:a4:37:8c:14:53:66:d1:88:a7:da:eb:72:6f:
eb:52:84:98:21:45:e1:ef:c8:28:ac:4a:bf:12:20:
aa:10:d7:78:c2:1c:b8:22:f0:73:3d:b0:09:08:e4:
bf:0b:1f:fb:f0:08:8d:03:c5:cf:b6:a6:cb:1e:37:
cf:b1:2b:53:2f:47:01:1b:65:1b:52:91:f7:2c:42:
05:85:93:4e:68:48:50:f4:27:1b:c9:47:74:39:ef:
da:89:4c:25:fe:ca:2e:fc:46:57:08:f0:cd:73:eb:
4c:dd:a9:5a:48:40:30:9d:5f:f5:29:a4:7a:cf:df:
bd:48:52:a3:39:d4:e7:58:85:db:4f:b5:a5:b5:62:
4c:07:61:a5:7e:86:6e:87:e3:69:74:d1:d0:0f:cf:
65:76:38:00:5d:14:1b:51:2b:38:57:44:e3:e1:7e:
8e:0e:83:1d:02:98:ad:d4:f7:ac:d2:52:b1:f4:4d:
e4:17:c5:02:1a:87:28:05:be:db:63:83:a3:4d:b1:
55:21:25:89:e1:84:d4:6d:8e:81:1d:17:67:e3:61:
08:ac:05:77:ac:aa:15:d1:4d:d5:1c:86:70:e7:7c:
a3:57:52:de:12:bd:fa:3d:c2:57:3a:76:55:59:5a:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5E:A2:9B:6D:68:F1:C8:4A:03:43:7E:57:30:68:B4:45:65:D4:A1
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:54:10:eb:b5:aa:42:ec:7b:e1:80:d3:e7:a7:bc:91:0e:47:
27:a8:b4:24:4a:b5:ae:5b:f2:15:70:e4:2d:9f:95:e3:53:16:
1a:21:f8:d8:45:16:48:17:a9:40:7c:0b:60:f0:ed:fa:7a:9b:
0d:5a:43:97:60:1d:48:f7:f0:16:81:29:2c:fe:46:78:6f:f7:
44:dd:b9:5d:a7:08:38:c3:51:ad:f9:1d:49:95:13:ea:e4:e0:
6c:65:6f:ab:bc:88:39:d3:e2:bf:6f:b1:62:8c:6e:da:09:1c:
87:78:cd:28:b7:1f:65:63:5e:58:ea:c9:dd:89:7a:cf:2e:a8:
63:14:ce:e3:9e:ca:b9:36:a9:60:27:16:6f:d8:b7:29:57:8c:
47:8b:ea:d9:46:5c:47:8d:5c:37:53:22:54:77:5f:53:4c:08:
e2:f2:c3:66:9a:37:02:6a:47:61:f0:38:20:64:15:97:00:bf:
48:e0:c9:e7:3e:2f:f0:56:8f:0b:68:6f:d1:d5:4b:68:99:dd:
3b:51:9e:65:4f:08:79:7f:98:03:a4:32:c4:ce:8a:f0:e9:90:
c2:4a:f9:8f:7a:fd:db:2f:ac:1e:ac:49:91:86:c1:c0:42:76:
7d:7e:b6:48:20:be:f1:da:20:a8:f4:8f:1a:6e:5a:c2:c0:05:
45:be:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:06:23 2025 by rpki-client