Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File: cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier: H9zC9ceezdJCSkz1t8RMSYOy0BkPuUkRfMdjLOPjRH0=
Subject key identifier: 7F:74:29:D7:31:0C:B3:93:A2:43:40:6D:7D:4F:60:3D:62:14:8B:47
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial: 019A4C97F2FFEA2FBAE80DF6D7FE3C88AD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number: 130F
Signing time: Tue 04 Nov 2025 02:00:17 +0000
Manifest this update: Tue 04 Nov 2025 02:00:17 +0000
Manifest next update: Wed 05 Nov 2025 02:00:17 +0000
Files and hashes: 1: VABLE3iBHalb6Jl_c3u-oyHeiS8.roa (hash: s1CBILyJSh7gNgL+QAYvHKZM5KaEqmZAwVEcKOw0A0E=)
2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: YmR5LcNLgmjXzQGyiv/DHKJeqr5eXooT0Gh2sjh0O+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:f2:ff:ea:2f:ba:e8:0d:f6:d7:fe:3c:88:ad:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Validity
Not Before: Nov 4 02:00:17 2025 GMT
Not After : Nov 5 02:00:17 2025 GMT
Subject: CN=7f7429d7310cb393a243406d7d4f603d62148b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:46:d8:b6:ab:79:46:cd:2c:c2:91:a8:b3:
e6:6d:44:3a:6a:fb:16:73:20:44:36:54:01:b8:b2:
02:59:2c:ba:55:6e:bf:dd:b4:d4:6d:1c:00:62:a1:
f6:6f:c7:7a:5b:f1:fd:91:64:5f:86:f3:e6:db:f5:
26:f1:e6:04:f0:bb:29:0b:e9:97:b8:97:59:2f:66:
f3:f1:ef:14:6c:c8:1d:c5:e9:32:bd:7a:96:4a:2d:
a2:08:64:28:4b:7a:75:8a:ea:6d:94:a2:2d:f1:f0:
f7:df:95:f4:a6:d5:3b:b8:ce:d6:7e:29:19:65:1d:
8c:c3:6f:dc:d4:c5:9e:de:5b:f2:a4:a7:cf:67:93:
d3:09:0d:04:a1:d7:82:e9:bc:58:24:1d:8d:c4:17:
9e:49:c3:5a:3f:b1:fc:e6:bf:38:14:0c:14:f8:45:
25:ec:07:c3:bc:72:ae:51:7a:0a:b8:b5:d4:ec:e1:
f6:6d:93:73:8a:9e:bd:19:5e:3c:1a:31:18:be:91:
1c:c8:a3:02:4e:67:7c:89:e8:d8:d0:50:44:73:ef:
8f:31:1f:f7:70:77:25:e4:dc:4c:ba:8d:c0:0a:66:
53:37:d3:5c:53:7e:10:af:5c:d5:98:d8:40:a8:37:
71:b8:a7:b3:2e:ca:cb:d5:fa:88:31:06:40:70:16:
f3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:74:29:D7:31:0C:B3:93:A2:43:40:6D:7D:4F:60:3D:62:14:8B:47
X509v3 Authority Key Identifier:
keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:74:63:ea:08:b7:a5:03:8a:91:d1:7a:17:85:6b:09:fb:0d:
eb:34:c5:93:b6:94:54:b8:67:ce:08:63:2d:d0:7e:7d:70:94:
bd:b9:ad:81:d9:2f:35:a5:63:b8:37:13:d4:3c:ed:9c:b5:d8:
98:b1:28:39:8c:00:95:00:da:24:dc:01:39:5d:93:dd:b4:96:
05:e1:6f:d9:80:b7:45:b4:3c:56:83:3e:54:e9:c7:8f:31:ce:
a8:a3:41:2d:98:bb:26:f2:6a:d1:bd:5e:a1:9f:1f:6b:48:22:
6c:ab:75:18:e9:22:b2:74:f8:d0:bd:a9:84:e8:06:0f:da:91:
69:ec:2d:c6:8f:76:50:e2:0c:1f:c5:eb:27:fd:a5:4c:8b:89:
87:2c:7a:43:dd:5b:c6:67:75:74:8d:4b:a5:a0:08:6b:88:d4:
c9:d3:10:ff:41:5f:bf:cc:9a:f2:74:a6:f7:bf:a5:01:70:e3:
a0:e3:c0:05:fe:1c:01:03:86:2e:f8:ae:90:c1:f5:b9:2e:40:
16:8d:27:86:ef:2a:e0:5c:af:b5:c5:41:3d:b2:a7:af:9e:5f:
9d:77:1f:10:6c:5a:92:35:ca:f5:ab:38:e4:d2:9d:4b:00:16:
a3:26:2b:df:76:c1:74:60:f9:9d:97:93:97:e2:b2:5a:d2:96:
71:49:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:50:58 2025 by rpki-client