Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: oO7wPlU3VpFakW6GSkOYADFKHfNJ0pYgubYG9R8mcUs=
Subject key identifier: 66:08:CD:2A:39:A7:D6:F6:7E:94:5A:D7:6D:0F:DB:71:A8:57:95:41
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 019A4DAB0CDDC8338B20051C6F95AC44DF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0B35
Signing time: Tue 04 Nov 2025 07:00:46 +0000
Manifest this update: Tue 04 Nov 2025 07:00:46 +0000
Manifest next update: Wed 05 Nov 2025 07:00:46 +0000
Files and hashes: 1: 2JA-ZwNyhJfjy4iRgBz6O7qcilU.roa (hash: CuX1HDub6jnp4XmLQgh/JslHvidglBPgi73piILRqao=)
2: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: IlZjk5UiogbvLp5/Tx9acvxKgPuQUsRraNtUSjEg6mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:0c:dd:c8:33:8b:20:05:1c:6f:95:ac:44:df:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Nov 4 07:00:46 2025 GMT
Not After : Nov 5 07:00:46 2025 GMT
Subject: CN=6608cd2a39a7d6f67e945ad76d0fdb71a8579541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:2b:5d:ff:07:3c:28:71:24:17:74:80:c0:
b7:79:86:88:19:eb:4e:58:e9:a6:0d:d5:20:56:18:
6a:9c:54:a9:97:fc:41:88:ae:2c:cd:64:70:b4:67:
b6:39:ab:6b:a8:29:0e:99:1e:43:16:8c:2a:fc:be:
bb:6e:b4:3f:98:34:2b:51:37:84:85:dd:ca:91:6f:
16:99:a7:ae:8e:17:eb:25:d8:d8:e1:1b:b9:87:e3:
cc:78:c8:ae:67:f7:ca:f0:c3:93:ad:5b:99:59:28:
82:f0:8f:d3:e9:65:c5:cf:79:25:6f:8f:8c:d6:73:
ce:4f:96:94:e5:5b:be:73:df:bc:7c:36:c7:23:bc:
fb:e0:73:8e:2c:8c:d4:43:f6:75:30:11:22:56:e3:
da:dc:bb:21:49:53:f6:ee:e7:0b:3c:db:5e:3d:0e:
3f:d4:7e:2e:69:80:b2:b0:8e:66:f9:51:1f:51:63:
85:bc:67:42:fe:4a:6b:83:8a:7f:e7:f2:04:54:38:
47:7a:d9:e9:3a:a0:19:9d:d8:1a:26:37:b7:65:89:
2e:12:7f:89:fd:4b:96:0e:94:e1:64:ad:3d:ab:c3:
eb:8e:82:dc:16:f0:a7:c1:80:e0:0e:fa:13:40:55:
cb:6a:6a:90:00:54:2a:1b:62:d8:2f:43:fc:c0:fc:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:08:CD:2A:39:A7:D6:F6:7E:94:5A:D7:6D:0F:DB:71:A8:57:95:41
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ab:d9:c3:c2:1f:56:71:b3:3d:da:38:34:07:8f:bb:c9:ec:
0e:ea:64:db:d3:92:5e:61:22:9d:c7:00:25:e7:c4:69:a6:51:
c5:aa:24:92:41:be:db:2e:26:1b:7e:da:10:9d:11:c5:94:d0:
bf:58:61:ab:0b:13:95:a3:8a:91:6a:f8:35:ac:26:8c:74:8f:
c1:d3:73:f0:54:02:4d:66:57:5f:8e:6c:7d:2d:de:d2:7a:db:
08:a9:7a:e7:d5:d7:90:c6:37:1e:4f:d5:6e:a1:81:93:f2:41:
ae:af:5e:c3:ab:02:0e:52:0b:1a:29:57:82:ec:98:90:60:6e:
cc:0e:ca:a8:44:19:46:95:a8:b0:93:70:d8:31:6c:96:0a:ef:
ce:7f:f7:c5:91:c8:9f:43:fd:d5:e3:99:ae:77:53:05:78:cc:
39:d4:3c:f3:72:02:cc:9e:3d:24:13:71:17:cb:35:6d:ab:0f:
78:73:38:44:fc:36:f4:5f:de:06:a8:a8:d9:87:19:f3:b7:f4:
d1:2d:82:f8:9e:7f:5c:1a:bc:c3:23:46:67:7c:63:91:7c:0c:
86:f6:35:17:30:a5:59:14:12:fe:d1:48:67:70:b5:97:24:4d:
3d:46:bf:c2:39:70:a6:f0:fe:9c:0a:6c:df:c8:c1:4e:4e:90:
c9:03:04:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:23 2025 by rpki-client