Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: A1Yw29+ID+imYDf5OSrund1fX9vZn2+lvMaW2lsWnDQ=
Subject key identifier: 07:EB:36:6A:09:FC:9F:62:49:4E:83:50:26:A0:06:CE:BE:71:2D:B6
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 019A51878CEAC624B5BD1093B051901BA905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 101C
Signing time: Wed 05 Nov 2025 01:00:29 +0000
Manifest this update: Wed 05 Nov 2025 01:00:29 +0000
Manifest next update: Thu 06 Nov 2025 01:00:29 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: BFFECvHHdoQlmy8HNyJpNUdxxh6N1gUOpJ644Ti6SKA=)
2: b-VOh1iyKHVcDysv8XYced0xnLo.roa (hash: 0b/hMsK4rsISxKd+Kzt0DOFihl9RrwFHAkmEpylmN4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:8c:ea:c6:24:b5:bd:10:93:b0:51:90:1b:a9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Nov 5 01:00:29 2025 GMT
Not After : Nov 6 01:00:29 2025 GMT
Subject: CN=07eb366a09fc9f62494e835026a006cebe712db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:45:1d:73:85:a9:c1:fd:59:dc:47:43:57:
15:8a:02:c4:61:c0:e5:d4:8f:b9:76:08:14:6a:83:
77:d1:0c:2b:6a:e9:c6:09:2f:00:63:31:7e:08:0d:
3b:f8:ea:7d:6c:ff:bc:bb:85:3d:df:33:f4:e7:fa:
a0:0c:9e:f4:59:f1:f9:64:a8:d0:f7:c5:4d:5f:44:
5e:60:c6:5f:e9:00:dd:d7:d3:bc:7c:29:ae:84:61:
7a:98:89:d9:d9:16:ca:5a:7b:56:75:a2:43:7b:d9:
85:30:5a:b9:ca:76:f3:ac:1c:b3:a4:06:c9:58:e3:
9c:3f:1f:78:2f:44:80:31:bc:4c:f7:a1:af:e4:3e:
12:ea:99:f0:7f:03:2b:ac:f1:e2:dc:92:8d:45:6e:
2c:cb:98:79:14:fe:e3:89:c7:48:11:32:c3:60:c2:
d5:5e:47:4e:e6:20:9d:33:aa:8e:59:85:50:25:d7:
d5:c6:77:69:f4:40:4e:82:4e:a2:be:86:1b:8e:81:
9f:ba:d0:d6:b3:3f:2c:14:b0:35:e7:36:2a:df:ef:
4a:30:82:0a:4a:1b:9c:58:b2:b0:c6:e2:d1:71:a4:
62:81:97:a7:78:df:cf:b8:e8:ac:dc:b2:a8:83:f6:
05:94:b5:5b:11:73:2b:a5:3f:4c:9c:00:db:ea:5c:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EB:36:6A:09:FC:9F:62:49:4E:83:50:26:A0:06:CE:BE:71:2D:B6
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:66:ff:99:56:8f:ba:c7:7a:7d:99:cb:6e:d4:a1:28:dd:f2:
b0:89:aa:68:dd:13:67:24:4d:d9:e0:21:76:6a:81:49:5f:90:
15:65:d9:88:1a:a1:c8:88:69:ef:a8:2c:ff:37:13:6b:a4:f5:
d5:9c:a4:50:9d:7f:cb:1d:1f:5a:3b:b8:36:18:c2:48:68:89:
c5:1b:97:c7:66:b1:e4:24:e2:43:82:40:51:95:3c:43:f3:d8:
03:dd:12:12:f7:aa:87:c3:6c:44:06:5b:91:38:bc:20:06:22:
d5:a6:91:e6:06:2f:e4:1f:97:dd:ab:82:dc:b0:dd:c5:3d:64:
1f:db:7d:f1:07:4c:f8:da:f2:b5:13:d8:37:ad:d0:92:13:a7:
dd:2b:45:09:9c:8e:ce:be:7c:5f:8e:a1:4b:94:b3:22:f2:0d:
da:b9:4f:f6:0b:84:c0:b5:a0:d4:9d:ff:cb:65:27:d1:4a:39:
56:98:b9:d0:af:99:a8:68:de:23:ea:ce:d8:b9:ab:0b:1b:90:
f6:4c:7f:e3:f7:97:22:ee:b7:f1:ee:7c:26:2e:46:e7:19:9f:
fc:12:0f:d8:4f:c4:c0:01:53:d3:71:af:28:22:30:81:6f:03:
fa:b8:cd:85:e5:5a:94:08:60:f3:36:1c:81:6e:2d:bd:3b:0b:
71:94:3d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:56 2025 by rpki-client