Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: SrZWYA9ZFhmgFicioTOduzkvS+/CMeMD5RCIAm0hxDE=
Subject key identifier: 6F:BB:E1:BA:31:61:A0:6C:B5:07:EF:CA:D2:21:AE:AD:57:88:AA:57
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 019A4EF5F998F47E371D1C49568EA4E0A181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 0637
Signing time: Tue 04 Nov 2025 13:02:14 +0000
Manifest this update: Tue 04 Nov 2025 13:02:14 +0000
Manifest next update: Wed 05 Nov 2025 13:02:14 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: gvK7FLBwDpesPs5/NCCw9CRiZAZ23nt9WmUOathLV+I=)
2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f9:98:f4:7e:37:1d:1c:49:56:8e:a4:e0:a1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Nov 4 13:02:14 2025 GMT
Not After : Nov 5 13:02:14 2025 GMT
Subject: CN=6fbbe1ba3161a06cb507efcad221aead5788aa57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:b1:b2:87:46:f7:0e:a2:62:1f:c6:24:30:
ad:81:02:6c:26:c2:b1:f1:80:a1:41:13:3b:bc:05:
e8:6b:11:64:29:8e:ed:e5:9d:52:67:af:ec:9d:1b:
cd:ff:15:34:02:6b:8c:06:e5:d2:f1:5b:00:ef:14:
06:e4:12:c1:55:38:eb:01:18:6e:cc:73:6b:bc:0f:
06:d6:14:ea:02:7e:ad:8d:34:b9:41:d6:2d:82:0f:
9e:21:73:ce:6a:fa:f6:fc:0e:cc:9b:22:7a:e5:44:
20:39:c7:61:01:c0:b8:f2:9a:89:0a:51:c7:4c:64:
f9:4c:a2:eb:02:e9:f2:5c:68:a4:78:e6:e5:a2:f4:
65:21:b8:2a:e1:06:4a:85:c4:a7:cb:7d:e5:fc:e4:
2c:80:23:a0:72:c9:06:fa:fb:18:f4:ab:71:e1:60:
1f:a3:dd:1d:6b:ee:ac:01:a2:88:96:15:84:e2:88:
67:e2:f9:11:04:10:98:02:1f:d5:d6:79:00:b9:0e:
2a:96:76:7f:1d:d0:14:8a:40:13:f0:c0:19:ce:de:
69:b2:0c:a0:31:ae:64:c7:67:b0:18:24:5c:92:60:
43:16:8a:4d:e0:6a:00:44:66:b0:e9:56:fe:fa:57:
24:58:0d:e4:df:25:1b:0c:72:87:47:40:3b:a2:4b:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BB:E1:BA:31:61:A0:6C:B5:07:EF:CA:D2:21:AE:AD:57:88:AA:57
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:28:1b:68:66:8a:9f:f6:d5:61:b1:c1:83:07:bd:bd:a2:7b:
e9:ca:ef:99:eb:af:df:91:a0:c3:72:fe:e8:c6:17:d6:0d:cd:
01:15:e4:c8:b7:01:0d:c6:7a:53:7d:7c:7b:98:0a:9d:82:83:
6f:0e:b0:c1:ba:b7:f7:08:e7:0f:b3:a7:5e:1c:3c:08:37:98:
0a:bf:b3:99:30:fe:0e:dd:3e:9f:91:de:ce:03:fd:59:aa:39:
50:35:d0:72:be:bb:51:94:36:a1:62:42:c8:10:8b:32:0a:8b:
d9:d2:13:33:b6:fb:60:c2:9d:5d:fb:4c:a9:14:85:dc:8c:c8:
4a:31:d4:a2:a2:67:f8:67:69:36:e3:e0:23:18:74:d0:12:f2:
52:b4:5b:d1:fd:9c:0f:33:a5:4c:a1:a7:cb:8d:0a:f5:cc:ff:
a1:2c:2e:a7:ee:04:21:33:cb:36:7a:4b:20:1e:8e:2c:11:a1:
3f:17:3e:84:0d:29:f4:be:26:fc:56:c4:7c:e9:b8:eb:cb:bf:
89:5b:26:f2:4d:84:34:05:26:a6:e9:d9:fb:84:98:96:a1:40:
ab:23:46:3e:4a:dd:71:08:1e:51:7c:71:f6:36:7d:bd:1b:a5:
07:a6:ac:73:29:d5:54:cb:51:4f:47:4d:99:52:7f:68:65:c1:
45:1c:9b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:13:44 2025 by rpki-client