Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
File: C6BoSDrLyWox4ovNpUu-r-NILRk.mft (raw, json)
Hash identifier: 2soB6QP5Br91OrE2Ux7YXk4xIrYmZRodp/acl6lf5EA=
Subject key identifier: 66:2C:5A:02:4A:1A:76:69:3F:9A:0B:A2:14:85:1B:B5:7C:1B:1C:4C
Authority key identifier: 0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
Certificate issuer: /CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Certificate serial: 019A51878A9CB7F91C001BC37CB5D26346B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 01:00:28 +0000
Manifest this update: Wed 05 Nov 2025 01:00:28 +0000
Manifest next update: Thu 06 Nov 2025 01:00:28 +0000
Files and hashes: 1: C6BoSDrLyWox4ovNpUu-r-NILRk.crl (hash: JJGZ6ljXHBI5zGps45TrJC75i9ZGQ8xlK3STuzqvdbE=)
2: YZzAhQaL88-jCpJ3mBWG-64btDU.roa (hash: RCtjkx1poAnNZoTiswLMPNgLTI2laFXye8HspCS+ElI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:8a:9c:b7:f9:1c:00:1b:c3:7c:b5:d2:63:46:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Validity
Not Before: Nov 5 01:00:28 2025 GMT
Not After : Nov 6 01:00:28 2025 GMT
Subject: CN=662c5a024a1a76693f9a0ba214851bb57c1b1c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b2:66:44:99:92:0f:44:40:59:dd:69:b8:85:
56:e3:c1:fe:75:6d:3e:dd:09:51:a0:41:0f:39:79:
2b:ce:24:42:3d:7e:1b:a3:76:f1:cd:8e:58:46:85:
40:6c:19:94:53:76:cb:bc:32:b1:be:8a:04:98:14:
77:d0:a8:0c:e8:81:19:fd:e0:eb:d9:12:2e:f7:7f:
97:32:1a:cb:3e:9a:c3:fb:e5:c0:5c:7d:df:13:c5:
a2:d3:bd:44:b4:5e:3f:01:4a:50:94:c2:29:60:77:
c8:22:ca:4a:74:28:d5:22:b7:b5:b8:6d:64:e7:4e:
d6:3b:7f:31:4a:fc:ad:37:dd:7c:12:75:e5:48:31:
3b:c1:ab:3c:ff:92:54:8d:aa:f3:ef:a9:75:89:bb:
8e:ff:08:c5:5e:d2:3e:5f:ea:e7:d8:f4:cd:35:28:
d4:97:a3:1d:7f:cb:14:6f:4a:eb:d9:ae:cd:f9:32:
f5:7d:a8:b3:6a:0e:b2:8a:53:93:14:8c:e6:c3:5c:
6a:6f:af:b0:52:e7:a4:f0:04:97:db:b1:dd:71:d2:
03:ce:bc:cb:45:81:08:44:85:e6:9e:37:f2:eb:c0:
e0:94:21:6b:89:ae:78:cc:aa:24:eb:cc:52:dd:c1:
80:13:36:0d:34:7e:7a:02:51:01:04:8d:16:14:85:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:5A:02:4A:1A:76:69:3F:9A:0B:A2:14:85:1B:B5:7C:1B:1C:4C
X509v3 Authority Key Identifier:
keyid:0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:80:51:54:e0:ef:5e:4e:4e:1b:95:29:2c:74:ef:fb:5d:54:
69:05:ca:94:b3:19:21:75:0b:5a:b0:94:b5:ea:1b:9e:0f:ee:
49:65:20:eb:3e:d4:e3:cf:49:71:17:8d:36:f1:8f:fd:77:93:
26:96:b5:14:de:78:b0:c5:9c:1b:5e:b6:53:7c:ac:5f:62:de:
fe:42:c2:b3:5d:4a:8e:03:a3:db:56:cd:e6:2c:22:69:db:59:
84:28:8d:15:eb:28:6e:12:6b:2d:df:1c:1e:7a:ac:85:ea:80:
b4:b0:78:1a:f8:a8:94:3c:7f:6d:f0:b8:8e:53:61:b0:76:46:
0b:86:bb:1d:05:31:35:20:c4:e9:be:69:bf:21:9d:f2:4b:a0:
2e:df:73:9f:a1:e4:34:61:23:51:73:18:e4:dd:28:03:4e:f5:
30:44:67:7d:bb:02:90:81:8f:90:89:94:87:f3:52:ff:41:33:
13:c0:73:7b:4f:c4:1b:4f:c8:a6:c7:72:c0:bf:7c:b0:36:32:
2c:8f:ec:59:6c:06:48:4e:64:d5:f0:af:62:77:47:96:45:7c:
3a:68:27:56:15:40:75:4f:73:13:cd:2a:00:e5:17:be:38:4c:
cd:f8:0e:ea:9c:c1:58:eb:1a:1a:56:89:a6:69:46:e4:66:5b:
a5:88:5c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:04:03 2025 by rpki-client