Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: KeVPJYrkpp2vi9Q/67PmFqxZndt5cS8ihgPanpClqFs=
Subject key identifier: C5:53:AE:62:F3:D3:82:AB:48:D2:E7:D6:54:F6:F4:48:A9:2E:E1:00
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 019A4F6281FE3645D1C3F22E15102A727586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:46 +0000
Manifest this update: Tue 04 Nov 2025 15:00:46 +0000
Manifest next update: Wed 05 Nov 2025 15:00:46 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: qulRDin+nZM9W+RJ4xV1OuavKeJQuoFTCj9u1EB4Hn4=)
2: Knfth6txiDF12eWnRVMBTSZ3N7E.roa (hash: Erv1kSG7AIiPjVidT056wHHSwG5zaW2OWLCIEkBM0Dk=)
3: Wsb9iLccMA3IkT_2bsufbfAmx6s.roa (hash: EeNg1ELWa5JeZ0r5s7rlId0eyflaNS7CxDa9rMshhYk=)
4: XPixcvd-VZdDwp01qDyS6l8HyGk.roa (hash: nEM6mcnfwNKM+CYw9oKK1seFIgWAcWfoaoBK4ckQSSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:81:fe:36:45:d1:c3:f2:2e:15:10:2a:72:75:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Nov 4 15:00:46 2025 GMT
Not After : Nov 5 15:00:46 2025 GMT
Subject: CN=c553ae62f3d382ab48d2e7d654f6f448a92ee100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:8f:cb:7e:7b:6d:14:b3:97:91:c7:da:63:
5b:11:42:84:e8:c8:c0:9a:22:17:25:13:e0:30:b0:
37:89:a0:84:fb:38:e1:43:80:97:62:40:73:14:f1:
71:2e:65:77:50:68:c8:d1:ab:f4:42:69:82:03:c9:
c8:e2:83:28:66:c3:d0:e3:07:3c:9b:41:23:1f:93:
df:41:c5:3f:08:43:28:00:5a:52:16:14:ba:0a:db:
0f:77:39:4e:5a:f3:31:67:f7:3b:64:d9:38:6c:91:
98:31:d0:9a:c7:8f:53:20:0d:99:da:40:2f:05:4a:
2a:70:b7:b5:77:2e:1d:9d:d7:76:46:b3:46:2c:55:
bb:ff:8e:0d:ce:fe:30:09:31:3f:e2:30:63:a5:fe:
aa:35:93:75:d9:51:2b:ae:0b:47:d4:01:5b:95:fc:
6b:59:a5:5a:fd:dc:58:26:09:56:50:6d:92:81:e3:
02:68:06:84:26:5f:7f:c8:de:26:3b:df:35:96:a7:
8f:7d:f4:dd:81:fa:a5:dc:c1:33:1c:83:63:1b:03:
87:22:f9:36:26:b0:5f:36:2c:87:06:15:57:d2:61:
97:57:1f:11:20:b6:fa:6b:82:90:9e:51:c0:e5:67:
b4:9d:ad:84:40:fa:1d:be:31:73:e6:d5:3c:bd:a2:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:53:AE:62:F3:D3:82:AB:48:D2:E7:D6:54:F6:F4:48:A9:2E:E1:00
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6c:99:da:79:f4:99:a5:da:ca:9f:7f:9f:86:0d:dd:73:71:
8b:44:ff:a4:92:2b:f1:c5:26:33:ed:c7:fe:53:79:1e:35:d6:
90:fb:bb:e7:98:1e:15:64:c7:0d:79:f0:bf:e9:7d:2e:92:3f:
24:8f:0b:0d:d0:02:67:3e:50:62:85:1e:9d:e4:f6:03:44:90:
d9:16:25:2a:61:7a:01:4f:23:49:27:6e:4b:71:57:46:92:50:
40:10:f6:82:fc:bb:45:4d:98:d3:87:73:9b:16:90:7a:53:46:
ec:e2:23:14:21:0e:d7:43:b4:e0:4d:b1:f7:98:c0:6d:88:1d:
f7:1d:c6:94:33:44:69:d1:6f:dd:a3:52:c6:c4:af:24:8e:1c:
86:07:d8:94:cc:52:d2:7c:e2:57:e4:58:11:74:0e:18:0d:c8:
8c:24:7b:7b:c1:da:a6:0d:02:91:ae:33:d1:c8:c6:bc:15:7a:
91:34:39:d9:3f:e8:61:92:5b:91:8e:79:17:8d:54:37:64:cc:
be:95:62:04:43:32:8b:58:8f:74:a9:fe:53:a3:9a:ca:3f:26:
52:15:94:e3:df:ca:ea:67:47:df:cf:f9:7e:80:d7:f4:a3:9d:
50:dc:23:8a:a1:5f:e1:5a:b3:dd:a4:db:d8:c2:d7:0b:a4:92:
4c:28:c3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:29:53 2025 by rpki-client