Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: +tdFTi3ruNisC4w2e814deAj9AWCrKxkrCrvsr2AETo=
Subject key identifier: 1D:82:AB:0D:26:2B:81:25:30:C6:69:8C:F4:0E:BF:B0:0A:70:D1:B7
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019A4DE16C20C01910B991BC4637FD913067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0B79
Signing time: Tue 04 Nov 2025 08:00:10 +0000
Manifest this update: Tue 04 Nov 2025 08:00:10 +0000
Manifest next update: Wed 05 Nov 2025 08:00:10 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: hGwhHyyvx91xc2f4NyrdUoJEvHY97q84XNRb3DKSdxc=)
2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6c:20:c0:19:10:b9:91:bc:46:37:fd:91:30:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Nov 4 08:00:10 2025 GMT
Not After : Nov 5 08:00:10 2025 GMT
Subject: CN=1d82ab0d262b812530c6698cf40ebfb00a70d1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:20:5a:3c:dc:dd:c9:f6:bb:51:71:6e:e7:
15:a4:da:22:a7:dc:e5:d4:91:ca:8e:57:bd:ab:41:
68:c3:68:70:bc:1f:70:3b:87:83:46:2f:da:c7:03:
b7:b9:c0:f9:15:5c:7f:b2:1f:4f:0f:ae:77:60:08:
3a:7b:0a:a6:79:93:f9:df:35:48:23:3b:9c:78:b4:
71:45:54:15:8d:36:99:26:44:05:5c:20:5e:5f:75:
2d:75:4f:03:b6:27:3f:2f:90:14:79:1d:c2:78:2d:
27:df:1a:db:35:1e:a1:6e:c3:1d:7c:a0:8c:66:b8:
43:78:00:1a:04:2c:64:5e:37:35:11:fe:f5:6f:42:
b6:c9:af:d4:eb:43:0e:42:a5:f4:3d:61:3d:69:7b:
be:7e:ba:b6:31:4a:2f:86:df:05:fc:09:86:e4:09:
9f:96:0d:6c:e7:b1:6b:5c:e3:fc:56:12:26:c4:3e:
4a:f2:a6:94:43:3d:08:17:d0:7c:3b:aa:87:a7:d2:
af:a9:5a:12:e3:f9:b1:b6:2f:11:8e:71:ec:9f:e4:
37:ec:3a:9d:4c:92:63:dc:02:de:5b:c3:e9:06:d0:
69:90:56:d5:c6:d7:af:58:83:aa:91:19:fa:dc:db:
10:80:b3:9f:20:23:1c:2e:1e:5e:3f:19:d3:2c:87:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:AB:0D:26:2B:81:25:30:C6:69:8C:F4:0E:BF:B0:0A:70:D1:B7
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:80:b2:ff:21:a1:02:ee:d4:c0:85:d3:6e:af:48:50:b1:44:
4b:a6:25:93:31:f5:e8:62:87:8e:dc:d7:af:ab:12:71:e6:60:
e6:11:30:fc:d3:73:a4:c5:d3:02:4e:04:50:72:e1:ec:47:47:
51:36:85:69:46:e3:7b:7b:87:43:44:bc:8e:fc:c1:e8:06:29:
fb:5b:da:fe:e5:5a:15:a6:ac:7d:bd:81:24:7f:03:7e:b6:1f:
d5:9d:a0:42:a8:d1:e9:92:98:8a:19:b2:60:f3:a1:80:3f:e1:
04:7f:0f:3d:90:ef:ce:4f:fc:40:60:82:07:0e:72:fa:a3:8d:
d3:b0:f0:99:46:ee:4e:29:cb:bb:42:95:9f:be:8a:df:cf:6b:
73:56:59:86:0a:c3:31:85:42:bc:60:b1:ee:d1:5f:d4:82:34:
d8:88:80:12:c4:82:ac:6b:79:9e:d7:2f:24:68:70:ef:18:cc:
5f:59:22:9e:b7:a6:1b:00:b8:73:6d:49:f0:dc:53:d9:8f:46:
22:d5:4d:68:66:14:b4:1b:d3:9c:cc:0c:8f:2a:11:98:bb:e2:
47:41:ef:61:2b:77:ce:75:bf:01:04:d3:53:f7:0d:83:a5:8a:
8b:f9:a8:46:18:f4:5d:b1:7e:b8:d3:40:e2:97:5f:ba:5c:25:
dd:77:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:16 2025 by rpki-client