Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File: cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier: Q3IacQAqFVqZ+jLly1GSnCBG1hrVa+ckG/x0649RxgU=
Subject key identifier: 17:20:89:B9:1A:EA:A6:EC:70:0C:5D:9F:B3:A3:A8:CA:B7:E6:FA:62
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 019A51F53A2E281433001721FD296A78C014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 03:00:16 +0000
Manifest this update: Wed 05 Nov 2025 03:00:16 +0000
Manifest next update: Thu 06 Nov 2025 03:00:16 +0000
Files and hashes: 1: Wk-27-wm2MeWL1AcRJVfERPG3M4.roa (hash: /2ZrWGFGh9bM8J1i4JDEX8CG9Dlb6SOL52JzWa/nfw0=)
2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: 3NvaUH31W+pdNDQUyvH3N+up+JSrARoCjRRnmUZxX2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:3a:2e:28:14:33:00:17:21:fd:29:6a:78:c0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Nov 5 03:00:16 2025 GMT
Not After : Nov 6 03:00:16 2025 GMT
Subject: CN=172089b91aeaa6ec700c5d9fb3a3a8cab7e6fa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:f2:03:35:b4:61:2d:4e:62:10:8a:69:da:
a5:29:7c:34:58:7d:eb:0e:22:86:81:32:b2:9f:4f:
68:85:94:ef:f9:42:89:86:43:7e:df:85:3b:fe:5f:
d8:f5:6d:62:d2:bf:a1:04:e8:7d:2c:1a:c2:9d:5a:
99:4f:56:04:82:f0:80:3a:01:d3:f2:24:eb:84:9a:
96:ba:d0:81:62:51:4f:7e:a8:11:0f:e3:7f:0b:3c:
99:b1:62:2a:c4:bf:ef:c2:a9:95:a8:e2:a1:46:fb:
ce:52:b5:e0:a4:2f:26:24:eb:6a:d8:82:49:0e:be:
f9:54:33:2a:c8:90:a8:a2:a1:53:c5:f1:4e:0f:94:
3d:0c:d4:01:93:2d:e9:88:10:31:82:f2:27:19:5a:
10:bf:02:a7:fd:22:0a:01:56:53:57:48:a0:61:55:
6e:ed:6a:a9:ba:2f:05:85:e7:a8:24:26:48:40:cc:
6b:70:e2:0e:bb:0f:e4:84:55:b7:a3:01:6d:41:47:
cf:74:d2:7c:5c:4b:33:d5:60:fd:da:db:fb:84:33:
8e:dc:3e:b8:bb:57:ad:30:2e:df:5a:c7:98:1a:c6:
ed:33:e6:b4:66:10:6b:96:58:11:49:eb:ff:a3:79:
79:c8:7e:df:4f:7f:d7:ac:d3:cf:c5:0d:21:09:d7:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:89:B9:1A:EA:A6:EC:70:0C:5D:9F:B3:A3:A8:CA:B7:E6:FA:62
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c4:21:51:71:4d:a9:da:03:70:87:ac:12:34:0a:1b:38:6d:
97:22:c2:16:7d:40:2e:74:2b:d5:82:03:03:a5:cf:c9:5a:ac:
5c:b0:33:cf:54:3c:cf:e0:fd:e6:2c:01:50:38:17:50:55:ec:
af:1f:98:c7:e9:e1:3f:e9:94:eb:e6:64:52:ef:90:6d:7b:86:
c6:ad:cc:b1:8d:ac:9f:27:92:32:a1:4f:6e:0a:cd:8e:34:0e:
d9:fd:8f:88:68:d5:cf:48:36:2b:38:f2:70:81:43:3e:e0:64:
d1:1c:69:9a:8e:7d:19:5e:02:5c:d9:0d:58:b0:11:ce:92:56:
0d:f0:44:6b:41:5e:93:60:c4:d0:1f:5e:b1:cd:d9:9e:d8:9a:
37:8c:44:55:9f:c2:3d:93:c1:4f:07:89:ff:4e:7c:ed:03:97:
e1:f8:66:cc:5c:2e:fe:c3:07:f2:e8:f5:b9:fe:64:25:37:cd:
99:7a:d9:48:aa:67:8f:8f:db:c7:b1:fb:96:6b:d3:52:ac:74:
89:18:28:ce:47:f2:ff:e9:b6:7a:9f:c7:cf:e8:69:48:45:97:
dd:bf:86:65:98:b7:79:a4:f9:aa:97:a2:3c:db:3e:73:1c:9d:
bc:ae:7d:ab:16:b5:35:d6:bf:2c:e9:f0:f6:bd:dd:e5:86:5f:
bd:7d:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:40:44 2025 by rpki-client