Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: FAtYEJZIo8aA/A1jCeEHk0rihTkvubl4KgYpgOgUZKg=
Subject key identifier: F5:F5:8D:B7:2C:AD:64:14:E8:95:1F:F0:84:B0:01:F4:06:C4:64:61
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 019A5150EF9341F5776CE05FB4964CEE3B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:00:49 +0000
Manifest this update: Wed 05 Nov 2025 00:00:49 +0000
Manifest next update: Thu 06 Nov 2025 00:00:49 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: kUbXDV/L1PRlpyatzcgGyyKMYE6TqvN6j/mm59z+yUA=)
2: Knfth6txiDF12eWnRVMBTSZ3N7E.roa (hash: Erv1kSG7AIiPjVidT056wHHSwG5zaW2OWLCIEkBM0Dk=)
3: Wsb9iLccMA3IkT_2bsufbfAmx6s.roa (hash: EeNg1ELWa5JeZ0r5s7rlId0eyflaNS7CxDa9rMshhYk=)
4: XPixcvd-VZdDwp01qDyS6l8HyGk.roa (hash: nEM6mcnfwNKM+CYw9oKK1seFIgWAcWfoaoBK4ckQSSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ef:93:41:f5:77:6c:e0:5f:b4:96:4c:ee:3b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Nov 5 00:00:49 2025 GMT
Not After : Nov 6 00:00:49 2025 GMT
Subject: CN=f5f58db72cad6414e8951ff084b001f406c46461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:ef:7c:94:d5:0b:b5:34:2e:60:58:b9:a6:
33:59:98:b9:16:40:36:4a:42:55:22:a6:22:be:ef:
30:a2:33:ab:08:7f:8e:5b:60:4e:6f:9a:1e:aa:c4:
6d:ef:4c:3b:90:e0:48:fb:7a:f9:6d:1d:2e:ca:b2:
4e:0a:72:79:7c:11:a2:1f:00:05:3a:12:07:d8:99:
d6:7b:95:3b:f8:e1:02:93:25:85:82:94:21:5b:36:
4b:81:fd:ed:c8:7d:90:5e:0b:d9:0a:c4:c1:93:a2:
6d:57:22:a3:6d:6f:59:3b:e7:77:3a:a8:66:07:2e:
48:1d:38:cc:b7:5e:18:7d:18:b5:2d:2c:da:87:6c:
52:78:0f:77:39:6a:0c:62:ec:a1:7d:1a:b8:67:32:
57:7f:35:8c:7f:e7:91:ec:4e:63:a3:df:0e:30:32:
7b:39:15:7e:10:93:c8:fe:09:3c:b4:71:12:7e:13:
7b:2c:f5:2f:ca:fa:f4:0b:e9:7a:91:1d:24:2d:0b:
7c:42:d3:08:39:81:ce:48:3f:40:e5:04:22:a4:64:
78:fa:29:4e:9f:c6:2f:4f:ba:03:47:b3:ca:ec:da:
3d:59:2f:8d:16:c3:67:13:77:30:cd:bd:c3:d1:60:
46:de:0d:77:07:dd:cc:10:1a:fb:af:da:d2:f5:83:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F5:8D:B7:2C:AD:64:14:E8:95:1F:F0:84:B0:01:F4:06:C4:64:61
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bd:d3:56:e9:36:87:86:d3:14:16:43:3c:a0:6a:5e:e8:a3:
b9:b3:c5:02:da:76:70:af:72:ed:af:f3:5e:b9:1d:1b:a6:3e:
d2:05:26:f8:ba:32:e0:06:26:0a:ae:67:60:fa:bc:99:ca:35:
d8:0e:bf:2d:6b:f9:59:ca:30:06:e2:3a:33:71:61:5d:67:27:
ec:c0:af:59:22:23:77:55:92:df:14:a2:b8:2c:32:40:5a:8e:
08:43:b7:0f:5b:46:2a:2e:c1:fa:66:a9:8a:f6:a8:b9:b9:96:
01:df:f6:2f:b7:de:32:5e:ef:dd:2b:7f:20:79:93:a4:1e:cb:
5d:9f:d5:4d:12:58:9c:e8:0f:01:f2:ae:b2:75:b9:86:ce:c4:
d8:6e:1e:6a:9b:ae:a9:81:69:d2:ef:81:b5:4e:18:ff:54:8f:
4c:27:7c:12:12:4b:25:33:ae:5f:5c:3f:22:b0:8a:56:00:6d:
2d:42:67:ac:01:54:67:55:b7:d1:8b:38:dc:46:d0:f8:7a:10:
27:84:0d:31:33:66:b2:db:56:68:9c:be:29:d8:06:8d:58:ed:
a1:6b:a4:ca:f3:c6:2e:4c:1d:fc:cf:9c:e0:c1:37:8f:99:e0:
28:38:7f:70:35:27:4c:84:68:4d:98:c1:8c:79:a0:74:84:c1:
e8:0b:ce:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:24 2025 by rpki-client