Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier: Iyk7E73ISzqTkbhYShrGz0GeXTcgWKXno/5p1r0OmbA=
Subject key identifier: 22:92:79:38:FE:C8:B8:AE:F4:E0:06:36:0D:99:C4:60:2B:92:9D:20
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer: /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial: 019A5150AB882E97A0E043B3BB4B7A002CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number: 1650
Signing time: Wed 05 Nov 2025 00:00:32 +0000
Manifest this update: Wed 05 Nov 2025 00:00:32 +0000
Manifest next update: Thu 06 Nov 2025 00:00:32 +0000
Files and hashes: 1: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: a1+uThZQe4iqDcb+inAFg4Y5vPlkpuDOArthxaIH5xs=)
2: DuaqfpWRjQCcl_wmNFLt00a2Vw0.roa (hash: rQv6lxTZYs4XDzxYfgAGiCr8L0iuSbohO7siOw9JGpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ab:88:2e:97:a0:e0:43:b3:bb:4b:7a:00:2c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Validity
Not Before: Nov 5 00:00:32 2025 GMT
Not After : Nov 6 00:00:32 2025 GMT
Subject: CN=22927938fec8b8aef4e006360d99c4602b929d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:5f:eb:46:ec:e3:0f:ae:95:a3:1a:e2:36:
70:aa:e1:6f:5a:83:1f:42:38:c4:4a:85:ac:62:31:
d8:b6:c9:18:d4:20:5f:89:24:62:82:ba:48:cb:59:
b2:6a:99:af:8e:d1:20:20:6b:14:cc:41:ca:17:c7:
70:02:d4:4b:a0:6c:5d:ba:5b:f5:3e:7a:c9:20:82:
84:ee:96:8b:69:f0:7c:48:d0:32:75:59:79:01:bb:
6e:a9:e3:11:36:c6:d0:9c:46:43:3b:ea:3c:ab:0a:
f5:dc:76:c8:2b:12:93:89:46:f5:8f:bc:78:15:98:
b0:75:59:29:58:b6:25:18:c4:f4:bb:c0:54:b0:78:
38:bb:9a:ae:fb:ff:58:f5:1b:2d:a6:89:0e:ea:4d:
80:31:7e:77:1f:0e:b4:a4:8d:14:c8:11:38:f5:fc:
33:4f:40:c7:90:ab:03:58:5d:c9:5a:9b:94:9a:a0:
0c:2c:fe:cb:d7:35:23:b3:9a:33:b5:64:7e:76:31:
eb:e6:c4:83:5e:60:6c:9f:10:83:1b:80:bd:c5:36:
63:79:65:09:c7:20:f0:b2:1c:44:be:22:1a:42:c1:
92:ae:ff:9b:1a:38:46:d1:17:4e:97:c9:dd:f6:51:
57:d3:f0:0f:5e:04:fd:4b:5d:29:70:1c:e1:37:0b:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:92:79:38:FE:C8:B8:AE:F4:E0:06:36:0D:99:C4:60:2B:92:9D:20
X509v3 Authority Key Identifier:
keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:42:ea:c8:f0:a9:07:fe:0b:1c:7c:42:34:02:96:5f:15:64:
c5:4b:8e:99:27:34:20:59:b6:02:76:1d:9b:26:6c:a1:c6:e1:
69:0b:f1:da:1b:f0:4c:53:8c:30:c2:aa:a2:55:4e:d4:31:39:
60:c9:15:7d:fe:23:be:2b:fa:e4:1f:63:d7:51:83:bf:a4:68:
9b:3c:73:2b:98:ba:82:d9:9d:8b:48:54:5c:2e:57:a9:b8:f4:
69:69:64:6c:af:39:55:79:84:04:ed:f4:9f:42:0c:71:c7:14:
3c:50:a3:2a:08:ba:e6:ef:42:91:05:1f:1e:ab:ca:81:c3:3a:
74:7a:62:e8:74:39:34:a7:39:af:00:20:38:57:b0:f6:c8:78:
51:ab:88:62:b8:a1:1d:72:52:8c:f2:0a:9a:f3:99:34:06:63:
53:9b:c4:ed:47:55:2c:d1:51:db:31:24:d0:e7:d9:b4:d7:2b:
2f:3e:99:c8:5c:9a:22:9c:ef:cc:c0:c7:10:5a:f0:5f:be:fa:
f5:10:2c:ad:6d:79:28:1a:f3:9a:71:8e:3d:70:5b:a5:c4:07:
11:be:e2:e5:cf:49:37:e7:a5:73:00:86:28:57:e5:2f:b4:2d:
0b:c7:52:b5:36:1a:9b:d4:1a:93:0b:12:29:46:3b:2c:a8:6c:
58:55:eb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:58:56 2025 by rpki-client