Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: J7ntzvfA8uLQYoVegLNl4bgrwwml8u3IObAJXcJwjt4=
Subject key identifier: 3D:CF:5D:5F:01:9C:0A:E2:1E:BF:DF:35:03:C7:46:52:B6:F5:D7:AF
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 019A4E868049D0DA40E68AD305BBCA1FE475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0A45
Signing time: Tue 04 Nov 2025 11:00:28 +0000
Manifest this update: Tue 04 Nov 2025 11:00:28 +0000
Manifest next update: Wed 05 Nov 2025 11:00:28 +0000
Files and hashes: 1: 5K2zlrIHADlFytOUhc54zx-uCAw.roa (hash: VJ3nEApsPTUcM1XeIb75bGQ+CbjZ/H8pdnWKdP3UYOg=)
2: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: Zrn1fu1gr3M8ff4yklyL3TcoJxSHEMScmzrfo1ztBx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:80:49:d0:da:40:e6:8a:d3:05:bb:ca:1f:e4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Nov 4 11:00:28 2025 GMT
Not After : Nov 5 11:00:28 2025 GMT
Subject: CN=3dcf5d5f019c0ae21ebfdf3503c74652b6f5d7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:6e:32:c0:ac:b1:96:e7:26:9c:6c:69:d3:
ea:05:e9:62:e8:eb:88:23:c0:0c:a2:d9:88:a6:5c:
0d:63:d2:c2:ad:d8:83:26:a1:78:6a:3c:13:96:70:
14:05:ce:9a:f1:45:77:c0:d9:1f:e7:25:e7:08:3e:
cc:7e:e7:1a:3c:f2:70:51:2a:88:1d:40:98:bf:47:
e9:a5:99:ab:5c:08:4f:21:b3:96:99:95:e9:75:ba:
8a:5f:32:53:c3:41:cc:c5:28:a7:5d:7c:f7:b8:b4:
82:59:13:fd:2e:a1:32:18:fe:f7:69:e9:36:cd:ce:
39:46:f4:f5:88:fb:c0:a3:8a:77:ac:e1:ed:01:4d:
50:d2:c5:73:9d:47:b5:5f:5c:07:51:84:e3:3c:b8:
5e:1b:fb:07:fe:c0:e9:db:ed:11:5a:98:55:16:e7:
4b:ff:64:4f:bc:84:7a:a2:af:ec:4e:fe:fa:32:0c:
06:59:85:9a:46:7d:43:14:c8:9b:27:f6:1c:f1:36:
a1:bc:6d:32:5f:87:52:7c:e0:83:fe:68:45:93:b7:
eb:4b:5e:a4:e1:c5:b4:8e:4f:0b:b3:e1:1c:f2:d0:
48:2b:13:97:c9:4c:12:72:50:b1:53:62:3f:3c:d8:
ac:99:e1:15:0c:1e:6f:10:e7:2c:20:ff:e6:79:70:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CF:5D:5F:01:9C:0A:E2:1E:BF:DF:35:03:C7:46:52:B6:F5:D7:AF
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:99:48:8f:a3:82:8b:8a:a1:4e:45:c4:83:ca:ce:16:52:c9:
ca:c9:74:4c:0a:c4:0b:44:52:65:8d:49:c4:7f:3d:55:1d:e7:
a0:97:0f:8a:fc:32:8a:f5:0b:2c:ea:50:f5:89:07:82:91:59:
49:e8:60:05:86:fb:df:25:c7:79:30:75:51:10:f1:12:ab:7b:
18:32:f3:33:ea:2a:fd:9c:55:b8:b8:9c:41:0f:00:ab:55:9d:
cf:a4:17:ee:c6:15:fe:e0:ee:24:96:31:09:ba:2e:6f:0c:23:
f5:9a:76:ae:01:8e:2a:6a:30:cd:bf:ef:e7:7e:17:47:18:45:
21:e4:58:4b:80:33:37:93:4f:cb:52:78:db:0c:77:7a:7c:16:
24:11:a6:0c:e5:f6:bc:89:d7:7e:bb:d9:0f:e6:06:d5:89:c9:
19:37:ad:0c:5f:47:94:2b:dc:68:86:51:c2:47:00:77:41:ed:
49:da:96:1a:50:74:2b:d6:a0:b4:a0:42:03:72:01:22:d6:8f:
71:29:46:8e:89:b8:2d:6d:f2:3b:e8:97:ca:73:5e:12:04:e9:
44:35:29:af:4d:50:52:74:d0:70:bf:b5:3e:13:ed:64:30:80:
01:b9:e2:de:f8:29:3f:75:9d:91:70:b1:ae:cf:a8:ae:3d:1e:
3e:f1:27:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:24 2025 by rpki-client