Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
File: CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft (raw, json)
Hash identifier: t2FwOMLomytnR3Kr1gUubTIbmmN7y6KHMvUJB48HEsA=
Subject key identifier: 74:96:35:15:BE:7E:C1:E9:BA:5F:3C:3A:72:CB:7F:56:4B:ED:F5:55
Authority key identifier: 08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE
Certificate issuer: /CN=08c7b65ba6659e27570773c508558754eb490dde
Certificate serial: 019A70A5044F51AFF72B25B71E1F176DA954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
Manifest number: 8E
Signing time: Tue 11 Nov 2025 02:00:53 +0000
Manifest this update: Tue 11 Nov 2025 02:00:53 +0000
Manifest next update: Wed 12 Nov 2025 02:00:53 +0000
Files and hashes: 1: CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl (hash: /rR07bATznOkXLb0+rZxxRoGmxvme4sukG5iS16yWaQ=)
2: Ud-XAg37mML14PlGMC-MtLQMglE.roa (hash: 18isVv70Mwq2NQGwUDi88omuA2Y/FqQMJz3QrvT4ZPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:04:4f:51:af:f7:2b:25:b7:1e:1f:17:6d:a9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08c7b65ba6659e27570773c508558754eb490dde
Validity
Not Before: Nov 11 02:00:53 2025 GMT
Not After : Nov 12 02:00:53 2025 GMT
Subject: CN=74963515be7ec1e9ba5f3c3a72cb7f564bedf555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:f7:fa:cd:5c:bd:7e:ca:e1:d8:8f:f7:1e:
f4:fe:58:c6:e0:7c:f3:cc:6c:6f:03:b0:68:ff:23:
b2:65:48:26:7f:8c:bc:b1:f7:6c:ad:8b:05:49:57:
a2:6f:58:fd:29:46:d0:16:4f:28:ad:e0:75:19:02:
3e:d9:cf:5d:30:7b:b5:e0:44:8d:38:6e:91:33:45:
44:37:2e:6c:95:12:1a:c2:7b:a1:77:24:fb:b9:3f:
e3:dc:65:bb:b4:48:41:89:cf:aa:29:c8:f5:e5:58:
a4:d4:cc:b3:b0:03:b7:d7:50:f8:ce:f6:a7:6e:cf:
ca:64:ba:cf:bb:cb:ea:2f:66:66:c9:e4:4a:43:37:
e3:e4:19:ad:1c:df:36:a4:13:8a:74:f7:df:35:36:
f8:dd:9e:72:b6:db:ce:60:be:a1:89:de:b3:d3:99:
58:1b:64:5d:5b:3e:8d:c4:36:2b:4d:96:d6:33:be:
6f:06:e7:27:31:fd:2f:1f:f8:cc:53:53:c7:8b:a3:
1d:85:a2:52:e2:8b:49:44:24:8e:50:34:c7:95:86:
b4:79:aa:39:de:c8:15:b7:ae:0e:8e:27:03:41:df:
fd:76:56:d2:ae:3b:68:09:a5:a8:ae:b6:ae:08:7a:
cc:fa:55:15:63:1f:98:73:72:e8:64:5e:38:44:9d:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:96:35:15:BE:7E:C1:E9:BA:5F:3C:3A:72:CB:7F:56:4B:ED:F5:55
X509v3 Authority Key Identifier:
keyid:08:C7:B6:5B:A6:65:9E:27:57:07:73:C5:08:55:87:54:EB:49:0D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMe2W6ZlnidXB3PFCFWHVOtJDd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/166b33-f79d-4308-ad07-5b7b9570099e/1/CMe2W6ZlnidXB3PFCFWHVOtJDd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:eb:8e:c1:22:28:75:32:1c:a7:6b:ad:66:81:13:85:6c:29:
fc:9b:9c:6b:fb:a6:74:bb:ff:07:57:6f:ef:54:9b:16:ce:4f:
ce:23:2f:cd:c9:a0:6d:4b:71:71:ee:77:95:9e:7c:35:13:41:
3a:5d:5f:0f:80:2f:2a:3d:82:e5:54:b6:23:b5:91:e2:32:05:
ae:98:59:2f:a3:5e:04:e6:87:f2:ce:4b:c4:af:a5:a4:d7:65:
c8:31:71:87:29:5f:58:9a:55:c7:cd:dc:3f:75:f1:fd:d3:46:
da:3d:8e:ce:d0:1a:e3:70:09:72:02:46:d6:cc:a9:5b:b1:33:
b6:2a:a1:ef:98:b8:c2:36:99:5b:65:79:43:5e:07:ee:45:c8:
f4:f5:51:a5:d7:22:da:63:1d:11:a6:21:5a:e4:7f:1a:87:2d:
b0:82:46:07:1e:e6:d7:28:14:f5:55:1c:49:e5:3c:11:2b:d6:
86:33:83:92:4a:b2:41:9f:5f:be:2b:ee:5c:09:18:16:41:0d:
90:04:96:18:fc:31:fd:da:d2:d0:92:ff:b9:72:e6:ff:3b:e3:
0f:d5:fb:49:c2:66:80:5b:01:03:b2:da:83:31:d3:61:7a:83:
20:be:dd:2e:7d:c8:25:93:1a:3e:4a:66:e1:05:3d:a3:84:4d:
7e:50:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:31 2025 by rpki-client