Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier: x01Hqimpm0B3sy6tdfcax2W6mX3XvRqFDDg5kZerca8=
Subject key identifier: D9:82:5F:43:A6:DC:DB:C8:CA:E9:D8:F4:AC:7C:50:34:B6:FE:F6:00
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 019A52D1FA3781DBF13E2798B79964160D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number: 1358
Signing time: Wed 05 Nov 2025 07:01:24 +0000
Manifest this update: Wed 05 Nov 2025 07:01:24 +0000
Manifest next update: Thu 06 Nov 2025 07:01:24 +0000
Files and hashes: 1: Pmv8pM8XqssRTrBIwYfMIrBu2co.roa (hash: v4JQsWfqUQF/aizb6/kkH5lzSW7tzkWIy4FJVzppxAI=)
2: RQjHthweEF9-820WAQ_PQzmnlEM.roa (hash: nBMPnR4O6VvmGYLIOUpQxt7mk0o9gXGO9uw/qf7b94A=)
3: Wwvcf_CdHRy8gkrOQZUQURuseiI.roa (hash: xkPyebxyoo94+1+QeBv80ewSsDDTwjJTGd/zo7NXJ5g=)
4: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: 0oSGqFLto7epjiMfbrgpheLSlprQH19Fn3jatkMyC0w=)
5: lVsIvIm2siK76Iwlc1JEpwaFSPI.roa (hash: TUnieu9UOgS3hw0oaMGHMZ2FiYRQqrhlAMNc6BYERoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:fa:37:81:db:f1:3e:27:98:b7:99:64:16:0d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Nov 5 07:01:24 2025 GMT
Not After : Nov 6 07:01:24 2025 GMT
Subject: CN=d9825f43a6dcdbc8cae9d8f4ac7c5034b6fef600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:a8:5b:1d:a7:bf:a3:07:12:6b:9a:91:4a:
41:12:2f:03:58:bd:f7:90:61:b7:44:e8:96:2a:4a:
46:45:90:cb:67:ea:46:39:f7:c0:6a:09:ae:50:6e:
15:f8:00:aa:a1:5b:33:f6:4d:9b:c1:92:ea:e7:76:
29:23:11:b5:f0:d6:ba:bf:91:2a:15:66:d3:51:a7:
00:31:48:38:0a:d4:65:0d:e1:2c:62:33:76:b1:8f:
7b:40:f4:62:47:74:96:9b:ce:68:5f:b0:b2:93:fb:
fd:5e:66:90:70:58:33:a0:3e:cd:2d:55:a4:c5:d6:
ea:6f:df:63:51:cb:39:e2:91:28:a9:36:36:88:4f:
99:9a:0e:cb:41:5d:26:52:aa:81:1c:4e:96:26:3f:
9b:23:c5:b5:8e:84:3e:48:7d:e6:ba:8e:17:64:2c:
15:b4:ff:8d:7b:d7:a0:f0:40:ee:c4:70:36:c1:20:
1a:bf:95:d7:0f:cc:2d:ba:8a:d4:df:f1:f0:00:c9:
87:1d:06:fc:de:13:4a:d8:45:fe:98:b9:ab:f1:d3:
71:ad:d1:63:be:ad:ce:d2:7c:ed:98:85:1d:20:7e:
43:57:3e:99:d2:8c:0a:5b:17:21:b8:d6:2e:9e:d0:
8f:99:5a:03:2a:14:9e:22:b8:2a:f1:68:a3:89:47:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:82:5F:43:A6:DC:DB:C8:CA:E9:D8:F4:AC:7C:50:34:B6:FE:F6:00
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a1:ad:65:30:5e:7a:43:03:32:53:f9:43:40:53:7e:fe:ba:
b0:ed:0d:08:db:83:3d:69:db:aa:84:89:c8:68:b2:40:5d:00:
6f:4b:18:e8:24:83:34:b1:bb:c7:1e:df:49:88:d2:b6:cc:30:
b1:da:40:e9:cb:96:f9:00:52:2b:09:cc:e6:f9:ad:88:51:11:
2d:26:a6:2a:59:56:1c:79:97:f8:b4:20:f6:0b:d8:b7:92:e7:
d0:2e:75:a1:b9:8a:1c:aa:0a:a6:df:6b:10:17:5d:38:32:43:
9a:3c:f5:31:d5:ec:c9:ca:57:5e:20:d4:e3:65:72:4a:67:ed:
33:a0:66:bd:73:70:d3:be:45:80:08:e1:9c:b1:e7:01:20:50:
79:ee:14:3a:3c:8c:52:a5:d3:35:00:3f:5a:e6:a2:97:d0:24:
6d:92:50:fd:59:6a:2e:5e:5b:32:c0:71:e2:8a:40:c7:b3:16:
94:46:de:c3:05:6c:11:3d:1b:37:4c:45:85:9a:bf:97:83:1a:
f5:da:fa:21:bd:8e:7a:42:fe:d9:b2:c6:21:61:ea:11:80:7a:
7d:64:2b:cd:e8:8d:09:ae:f4:9c:45:9f:c4:79:83:58:91:f8:
dd:4d:c8:f5:cf:6e:b1:5d:9f:91:e6:e0:83:bb:d7:a6:71:05:
22:07:67:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:47:43 2025 by rpki-client