Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: yTmCRyeZ4/sVqq2CmZ5h7UXsK0vKKsWpmZnPECmFeJ0=
Subject key identifier: AC:65:CE:66:C1:B0:10:8D:F7:04:D0:B2:D9:70:CF:4E:21:48:92:B8
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 019A4EF48E057EA4FCDCF48A6933B60FDB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 13E5
Signing time: Tue 04 Nov 2025 13:00:41 +0000
Manifest this update: Tue 04 Nov 2025 13:00:41 +0000
Manifest next update: Wed 05 Nov 2025 13:00:41 +0000
Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: u78vIky/nH3nplo+MHSBjgJ6MIwSGAMIrUDXhk1fKtU=)
2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8e:05:7e:a4:fc:dc:f4:8a:69:33:b6:0f:db:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Nov 4 13:00:41 2025 GMT
Not After : Nov 5 13:00:41 2025 GMT
Subject: CN=ac65ce66c1b0108df704d0b2d970cf4e214892b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:a3:3d:ea:e1:90:68:43:e5:02:b3:6a:98:
84:1a:6b:68:52:cb:e1:69:c2:8e:c0:10:09:f3:2a:
e9:1c:f9:33:e1:e1:77:c3:14:18:51:51:f4:3c:68:
8b:a9:19:0f:57:ae:04:ba:04:3d:3a:5d:d3:e9:59:
27:cc:0a:16:7e:19:7e:f3:b7:b4:91:ce:dc:73:cd:
9a:e5:51:db:10:07:e8:37:ba:42:8f:48:1a:9a:b6:
44:0b:eb:d2:5a:44:a5:24:e1:51:62:8b:0e:3d:50:
99:e0:f0:7f:69:67:63:48:b6:ef:0c:6b:16:d7:ee:
75:44:55:ce:b9:9a:16:b8:1e:45:24:28:dd:00:0a:
a0:1c:71:0b:9c:43:5b:65:75:15:f1:f5:2b:f0:ad:
d5:54:a3:74:70:dc:00:96:67:a9:f6:6d:fa:f3:e0:
75:54:14:e6:a2:33:95:ca:a5:f3:f8:2f:7d:3e:82:
d6:cf:75:fd:9d:c9:4a:36:d8:ed:4b:40:97:11:01:
b7:39:05:ad:f1:af:cd:ce:a0:df:6a:18:8f:34:28:
e2:15:4d:96:ef:db:35:38:3a:fe:17:af:5b:f1:2f:
61:99:89:e5:a4:0b:11:8f:c6:ca:85:9d:7f:f4:6f:
23:6e:85:f2:85:62:09:4c:60:10:9d:27:54:35:fe:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:CE:66:C1:B0:10:8D:F7:04:D0:B2:D9:70:CF:4E:21:48:92:B8
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:91:fb:3a:b4:e3:c3:7f:67:c4:e7:17:7b:85:22:ed:c7:f3:
21:96:df:34:b6:7a:23:88:04:56:d1:7d:1f:e6:62:3c:6c:57:
f6:16:e0:0b:70:a5:c8:11:cd:c8:1d:a7:fd:ef:86:c9:7d:d6:
c7:19:8a:29:de:35:28:e6:fb:91:59:79:73:b2:6d:3e:4f:47:
76:45:6b:17:65:c4:b6:11:72:da:9f:ac:9a:a0:dc:a1:c9:1d:
4a:39:0e:c8:1c:fc:1e:6e:ea:68:05:f5:ed:99:8b:3a:82:e5:
cd:2c:94:20:5a:e4:a1:27:7d:06:f6:ef:32:6b:01:e9:57:ed:
99:29:d5:6f:0e:8c:a0:e5:78:5b:2f:fe:f7:42:4b:dd:91:3c:
3c:0c:d2:6e:f1:11:76:82:99:a5:18:a8:f9:8d:76:35:78:48:
c6:96:23:e9:a2:12:6f:08:e4:b8:ab:15:66:8b:76:75:fc:f5:
14:f9:84:d6:87:7b:92:9a:fb:b8:4e:b5:0d:c9:03:e4:cb:5c:
0e:7b:2a:d3:03:73:fa:5b:31:c0:1f:1d:d6:02:96:51:8a:4b:
9d:6a:da:2d:b6:bf:5a:58:85:f3:d6:d3:9d:93:ce:c9:49:5a:
23:61:77:c1:91:ea:18:54:70:53:dd:d8:7a:05:41:51:ef:1c:
17:5a:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:23:32 2025 by rpki-client