Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File: c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier: 26nKgRLUAFlvwSm2GHFfbbIaV3VrEZcRgZdlsdOFVl0=
Subject key identifier: 3C:DA:B8:77:5D:A6:6D:8A:93:13:A2:C1:A0:C7:88:2E:2C:61:48:6B
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer: /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial: 019A7180976011A82B8BB80E35EB7047E963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: 7GG+oe17VdgNje+Vt047oSBdnBEszA29YLiPI21MhGM=)
2: itE9wE1JCUjzPQMC17zph5bag1o.roa (hash: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:97:60:11:a8:2b:8b:b8:0e:35:eb:70:47:e9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=3cdab8775da66d8a9313a2c1a0c7882e2c61486b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:b7:88:25:0c:83:e8:d1:49:9c:68:98:02:
c9:85:a8:a9:b8:30:1f:53:e6:e6:75:07:ef:3b:95:
c9:65:85:97:43:ae:2d:d8:c1:c9:ec:89:bc:da:3b:
85:cc:5a:d6:f7:e7:9d:80:53:c8:dc:41:11:29:8d:
2d:d4:e6:02:1d:92:6a:6b:35:d4:25:31:8f:b3:3f:
a8:d0:5b:93:14:b6:f5:f2:39:3f:81:3c:0d:34:6c:
fb:33:5c:fc:10:21:f4:de:ab:fe:6d:f9:6d:5e:e8:
f9:76:f7:9d:47:11:d7:d7:8c:72:d4:84:0a:87:8e:
db:9b:21:77:b6:92:70:27:85:fc:a6:5d:19:a7:b3:
e1:10:e6:64:cc:45:23:cc:f7:c1:85:0f:24:08:bb:
76:81:10:13:1b:1d:63:98:25:fd:35:b3:44:e1:f9:
6a:1d:fa:fb:da:1f:05:85:c7:9d:6d:7c:1c:87:52:
61:5e:30:3b:74:0b:8c:21:f1:7b:88:14:97:f5:de:
b6:2f:be:8c:fa:88:17:89:20:f9:3b:00:c7:93:06:
3e:db:5c:45:7b:43:ad:5a:46:91:ce:2d:49:87:e5:
61:99:e4:46:0a:be:37:bb:6c:3f:66:bc:2b:1b:8b:
a0:58:2d:6b:f8:10:13:7f:b5:4f:ff:38:80:1d:b6:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DA:B8:77:5D:A6:6D:8A:93:13:A2:C1:A0:C7:88:2E:2C:61:48:6B
X509v3 Authority Key Identifier:
keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b7:fa:88:4e:b7:b7:dc:a7:e1:90:a5:d5:f8:c3:59:52:45:
cb:4d:d1:c9:ec:99:23:c9:d5:93:19:10:31:67:67:42:71:de:
14:22:df:1f:41:35:06:4d:a9:46:e8:d5:be:c7:bb:45:0a:a5:
7f:e8:cb:51:62:e3:d4:58:22:84:12:4e:d7:7f:3a:a2:4f:d0:
ed:c3:d5:f0:d2:99:66:57:7f:6d:45:96:5d:02:e1:93:5b:90:
bd:5c:61:47:65:7e:08:b9:7d:9e:cf:44:4e:7c:63:25:55:52:
56:3a:81:d1:9a:d3:da:27:a1:5d:51:da:6e:d6:5c:b8:8b:b4:
e8:7e:14:71:9d:09:6c:94:c7:20:3e:d3:f5:09:2e:f5:53:16:
d3:40:81:fe:56:42:bd:6e:01:00:e9:2e:fc:91:93:60:91:d9:
b4:60:74:71:46:1a:87:23:95:3f:7b:df:28:7a:8c:38:94:0a:
4c:71:cd:dd:20:f3:3f:e8:1e:e1:fc:0c:48:5b:e7:69:13:31:
77:60:a7:f0:08:d3:da:0b:82:27:45:ad:79:e1:e8:58:51:7a:
4d:68:41:43:25:68:31:3a:c3:16:98:3b:25:14:2b:1a:0a:a1:
20:d1:af:a0:d2:cb:12:ac:fd:a5:96:2a:dd:25:e2:9f:33:1e:
75:98:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:19 2025 by rpki-client