Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: RRwgiw+HxMonGbD4WIECyrl/TULTPKsodB49IrlVrsk=
Subject key identifier: EC:E0:95:76:F1:B0:0E:0C:64:2B:8F:E5:3D:59:5C:FC:6F:A8:05:A7
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 019A4F98E25C0711C9857DB00F1ED1CCAF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:10 +0000
Manifest this update: Tue 04 Nov 2025 16:00:10 +0000
Manifest next update: Wed 05 Nov 2025 16:00:10 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: eQuqQhEQVxERne+FT6TqrDezINGmB0eEiKBeceAzd1o=)
2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e2:5c:07:11:c9:85:7d:b0:0f:1e:d1:cc:af:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Nov 4 16:00:10 2025 GMT
Not After : Nov 5 16:00:10 2025 GMT
Subject: CN=ece09576f1b00e0c642b8fe53d595cfc6fa805a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:70:2c:b2:f1:56:dc:7f:d9:0b:b5:bf:50:
34:ec:6a:a5:a8:5a:7c:5a:3f:47:c3:85:dc:79:ea:
06:42:6f:e6:a7:3d:68:bb:f7:49:23:30:b8:28:77:
a8:68:4a:1c:93:f1:b7:4b:12:af:e3:af:52:66:78:
4a:4b:c0:a6:16:71:90:de:98:23:f3:df:e5:ae:60:
ed:9d:3a:5c:57:19:48:79:53:ea:f4:20:3f:76:36:
3b:c9:2c:04:0d:ec:49:5b:31:bd:a6:be:8f:cd:d7:
87:86:be:ce:e2:c2:b7:21:b6:99:37:ff:60:f9:89:
d4:30:df:3e:cb:1d:c0:14:8e:e2:91:19:80:ae:85:
71:98:0b:8f:dc:f3:1e:79:94:4e:6a:08:e7:c8:07:
5a:20:c6:e9:d1:7f:60:94:fd:94:83:81:1d:11:08:
80:41:95:6d:b9:e8:a0:6b:33:ab:b8:5e:29:82:4b:
86:50:68:ea:de:0a:09:cd:43:ab:c0:e6:42:31:f5:
7c:75:16:89:45:09:4e:8e:f4:e2:72:67:09:3a:5e:
a5:c9:97:be:4e:53:be:03:c6:ce:94:29:d7:7d:a1:
1c:9e:ef:38:b7:a6:8c:d3:83:28:09:e4:89:16:a0:
80:c0:5b:17:f9:f3:45:12:ed:d5:1d:dd:59:5d:85:
6e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E0:95:76:F1:B0:0E:0C:64:2B:8F:E5:3D:59:5C:FC:6F:A8:05:A7
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:92:2e:09:00:ee:51:72:4a:a4:1e:46:a8:01:39:6f:e3:17:
9c:78:7e:d5:5d:94:20:5b:99:d6:9d:7e:c2:4f:21:03:e5:73:
0c:3d:d1:24:6a:6b:5b:75:44:4e:cf:68:02:b0:30:a3:e8:70:
e1:db:11:72:1c:5b:6b:f4:2b:4c:bd:e4:8e:4c:75:b4:67:20:
84:5f:f4:5c:4d:ad:97:56:b4:0d:0b:54:ac:17:b2:e4:1c:fd:
56:98:68:85:c2:8d:73:6a:ff:96:af:4f:4c:63:c6:ea:53:39:
39:64:60:57:d7:8a:49:45:15:7c:cc:11:ca:d5:3e:ef:c4:7e:
57:09:68:e5:dd:f9:b4:3b:84:55:32:85:ad:45:7c:e2:76:e1:
a7:d8:e5:b9:64:f3:23:ba:4f:88:16:03:72:1e:2c:04:87:a2:
8a:03:0f:b7:5b:a3:c7:5b:3e:ab:51:b3:0b:36:7e:58:6f:3d:
85:fb:47:c6:7a:20:5f:d0:30:af:5a:2e:b6:a1:82:f2:5c:f3:
01:92:c1:57:53:e9:a6:b7:36:ee:0b:25:fb:09:59:ce:14:fb:
8e:77:0a:9a:4a:97:e6:69:f5:91:af:34:8a:ac:81:ac:91:e7:
b3:8c:c5:dd:72:88:3c:cb:9c:28:b4:7a:51:ce:a5:9f:cc:c0:
2e:04:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:05 2025 by rpki-client