Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: Yb2ZXlLDb52MTu2JmavCD0u2/ii6QPiFCN6WlGuU6ZY=
Subject key identifier: 53:12:F8:FE:FF:8B:4B:CA:4C:A8:7D:3E:79:09:BE:6D:9C:95:DB:B3
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 019A23D35AA1125674935ABC7345512898CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 04:00:45 +0000
Manifest this update: Mon 27 Oct 2025 04:00:45 +0000
Manifest next update: Tue 28 Oct 2025 04:00:45 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: ON21xmvizr2DqwdPSSh2eSDtAJUl4hwR7YWw0FhQExA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:5a:a1:12:56:74:93:5a:bc:73:45:51:28:98:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Oct 27 04:00:45 2025 GMT
Not After : Oct 28 04:00:45 2025 GMT
Subject: CN=5312f8feff8b4bca4ca87d3e7909be6d9c95dbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:6b:b6:4c:9b:a7:20:40:64:2a:a4:9b:1c:
6f:45:6f:de:d9:f2:ab:92:d4:ec:19:04:19:a3:31:
02:df:65:b2:e8:06:5c:8f:ab:6c:ec:c2:9c:31:96:
df:ac:fc:f6:38:c3:7f:b7:d8:5f:cd:85:c3:c7:f1:
e9:fb:f8:a1:35:c4:39:5d:c4:c9:35:18:36:b9:2e:
04:2f:4f:4c:c4:53:b0:41:85:9b:36:dc:e2:ad:3a:
7c:48:87:60:53:09:6b:ae:91:26:ec:0d:4e:e0:06:
8f:24:93:fb:60:67:9c:3a:93:4d:8a:59:49:65:ef:
7c:be:35:e2:5d:b0:b5:42:20:49:28:ff:4c:3e:46:
43:bd:1c:41:99:f7:b8:1e:a5:88:a7:76:bc:81:96:
4a:5d:cc:32:69:a8:fc:40:f5:34:a7:b0:cb:3b:ee:
5f:ba:cb:22:6c:00:04:c6:d0:67:52:1d:8a:5d:dc:
d2:20:d3:9f:65:38:9b:8e:8b:d4:ef:59:2b:e7:35:
fa:d0:7d:7e:33:bb:5b:0a:a9:d2:fb:19:23:87:68:
8b:17:0f:ec:55:0c:81:da:fe:e4:4c:7c:d4:6e:d0:
35:5f:3e:d4:1e:9e:df:8c:8c:68:3d:fd:b0:e3:ee:
03:54:98:be:2f:64:93:6e:42:f6:1a:c0:a8:aa:c0:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:12:F8:FE:FF:8B:4B:CA:4C:A8:7D:3E:79:09:BE:6D:9C:95:DB:B3
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ee:bc:c1:38:65:06:01:cf:21:07:15:d7:f5:df:4e:76:56:
18:0c:fb:27:8d:1f:37:97:3c:5e:bc:83:39:4b:a3:61:b9:b5:
ab:75:09:a2:6e:01:ca:06:16:3d:ce:48:2c:0d:6f:bd:c0:93:
28:59:57:6c:09:52:8d:0b:d9:34:0e:c5:e6:4e:7a:14:90:37:
9a:d1:40:7b:18:0c:a0:5c:ae:92:b8:b8:1a:c2:01:b1:44:a4:
b2:78:1e:4a:0d:4e:ff:36:0f:13:b8:34:69:99:a6:f1:d4:7f:
6e:d1:68:51:7a:93:f8:20:c3:9d:a6:25:cf:70:d6:5f:6e:e2:
2b:51:d2:65:3e:fb:44:61:da:f3:62:be:f9:22:a2:b7:26:50:
ae:a6:04:82:48:bd:92:75:63:98:c1:f2:df:f0:69:fe:d2:74:
ad:5f:29:c8:3f:68:6d:af:2c:93:72:57:d4:37:a3:57:ee:ef:
c2:48:d7:b2:bb:b6:1a:36:0e:40:34:93:c7:af:ca:55:a8:9d:
a4:f6:48:c5:cd:79:9c:a7:4d:34:e6:69:1e:a7:42:59:6b:95:
1e:a5:6b:80:43:3d:a8:6f:d8:e3:3f:fc:06:48:35:66:79:98:
76:c3:ef:7a:ea:36:18:2f:95:78:ec:9a:6e:90:be:e1:2a:0d:
87:d7:d3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:23:39 2025 by rpki-client