Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: ZOHCB3opEi2XUFrtC1QZymZTwgAHYq8iv1/nu24P81U=
Subject key identifier: 92:43:32:FC:14:38:78:F1:F6:5F:44:69:BD:47:EC:08:A2:F7:2B:54
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 019A503DE78A5839545DAE9AF99A228FE5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 13FD
Signing time: Tue 04 Nov 2025 19:00:25 +0000
Manifest this update: Tue 04 Nov 2025 19:00:25 +0000
Manifest next update: Wed 05 Nov 2025 19:00:25 +0000
Files and hashes: 1: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: tR3kq+AbPMbEWZJLPDpixGT5dNOJlSDr64UwAeG7XzQ=)
2: iViHONOdVrtJaKvFtb1zW5ZiFfE.roa (hash: y//sfFe0FaBOPBIT3c460VOfTsEZyJ671nHpKb/hUio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:e7:8a:58:39:54:5d:ae:9a:f9:9a:22:8f:e5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Nov 4 19:00:25 2025 GMT
Not After : Nov 5 19:00:25 2025 GMT
Subject: CN=924332fc143878f1f65f4469bd47ec08a2f72b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:25:d9:fa:d8:e5:c9:c1:ef:1c:57:6b:c5:
89:39:e2:dd:82:6f:2f:8a:1b:e7:67:cc:cd:a1:74:
59:d4:13:0b:dd:cc:30:fb:68:91:e5:48:32:da:62:
bc:4a:eb:5c:57:4b:5a:04:81:da:78:47:ab:a4:0b:
4b:62:7d:70:63:f6:7e:a5:b3:cd:21:06:ed:99:3b:
ea:39:a2:fc:3c:ae:4e:5f:fd:17:2a:e2:30:3e:08:
b3:ba:2e:f5:c7:6a:68:43:71:96:ef:14:72:bf:cd:
7c:38:17:9d:4e:2a:1f:88:1b:d6:60:89:3a:43:e1:
04:af:f4:55:5c:a9:d7:ce:1d:96:cf:21:20:b3:22:
94:b8:4b:a5:a6:f4:09:9e:68:b7:f6:62:af:ab:d5:
df:3d:68:23:dd:83:7f:54:a7:ef:7c:50:7f:71:2b:
14:c2:d0:e7:35:ff:55:1c:9d:bf:29:a2:f5:df:e2:
74:52:cb:cc:1c:8e:74:1a:68:bf:ea:ba:64:18:7b:
11:7f:0c:1e:49:c5:7a:4c:7b:9e:21:d9:a5:fc:eb:
f1:ce:ef:0d:9c:92:c8:3e:bc:41:14:b1:dd:eb:40:
f5:93:62:a8:47:97:82:16:8d:4f:59:e3:57:93:e5:
c4:f7:a1:ab:44:ad:e4:f0:d0:b6:08:e9:ad:7c:18:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:43:32:FC:14:38:78:F1:F6:5F:44:69:BD:47:EC:08:A2:F7:2B:54
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1c:70:02:18:2f:d0:0f:54:64:49:59:a1:b6:38:ce:85:55:
d8:d7:db:85:9c:e2:63:2a:31:2b:f8:5e:21:48:f3:dc:2d:9d:
9f:ac:9c:bb:4f:8a:b5:bf:e3:dd:81:58:ae:bf:66:1a:85:6c:
ac:33:a1:2b:6a:38:c0:37:f0:5d:c8:ba:6c:99:6d:3b:2b:a4:
5e:20:fb:8b:3f:be:e8:b4:c6:c7:d8:20:16:bb:ba:94:57:b0:
ee:57:7e:00:6d:6c:bb:d6:bd:08:bb:7f:88:87:11:73:cb:2e:
57:97:a7:fa:78:fe:79:0b:70:bc:05:59:a4:ce:88:41:aa:65:
14:5e:fb:78:47:0c:74:e2:7e:6e:60:da:07:7e:ed:fb:a2:da:
0c:20:ba:88:07:b2:e7:1e:92:65:d4:1e:f2:06:2a:a4:5c:87:
54:bb:02:0c:76:4a:49:a7:8d:3e:e8:ee:dd:ac:b0:b4:96:b9:
83:72:f7:f2:c8:1a:76:e6:40:1f:a1:4e:e8:6b:d2:54:5d:70:
f9:9b:73:33:0a:78:5b:44:1b:40:39:00:38:d9:3b:f2:2a:54:
80:9b:2e:10:29:25:45:fd:81:ef:81:2d:2c:38:3f:d8:15:28:
06:81:17:99:47:fc:57:f5:f0:e6:f1:70:93:3a:a4:4b:fd:db:
e2:cf:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:50:07 2025 by rpki-client