Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: G2EIpJgbc6eFFiGNe+syFIr49MMc159+0/UGaYPP4+M=
Subject key identifier: BD:A0:5E:22:E9:51:41:5C:8E:6B:15:BF:39:08:E0:EF:E0:0B:46:B8
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 019A4F62194EAF4C752763A4B42CB308D50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0A55
Signing time: Tue 04 Nov 2025 15:00:20 +0000
Manifest this update: Tue 04 Nov 2025 15:00:20 +0000
Manifest next update: Wed 05 Nov 2025 15:00:20 +0000
Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=)
2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: pC28CVBGkkBonuFhxmwEHIDExymrMMcOAXH9lddGo/Q=)
3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:19:4e:af:4c:75:27:63:a4:b4:2c:b3:08:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Nov 4 15:00:20 2025 GMT
Not After : Nov 5 15:00:20 2025 GMT
Subject: CN=bda05e22e951415c8e6b15bf3908e0efe00b46b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:91:27:33:7f:fd:0e:8e:3a:06:3c:87:03:9b:
da:25:75:1d:2b:3b:30:5c:ae:f8:28:60:4c:34:ee:
a6:35:7c:7b:2c:39:90:32:eb:29:95:c7:99:ca:31:
f3:4d:ea:de:dd:45:96:dd:24:dd:c1:6f:8e:4f:46:
d1:77:8a:63:2c:19:b4:d6:78:de:68:4d:27:83:a0:
be:cb:e9:c1:17:d4:8a:13:4e:27:75:ba:24:79:3c:
c9:e9:7f:6c:5f:7a:84:ea:44:c8:ef:b6:e5:bc:e4:
19:19:3e:4e:7a:12:72:d7:65:b7:fa:8c:74:b4:55:
ef:39:a0:e6:6c:78:ac:05:44:c5:53:a3:ab:53:d3:
fe:0c:02:89:fa:df:89:80:5f:f4:9a:25:bf:da:35:
60:6c:58:f8:c6:32:a2:00:0c:66:15:cd:83:e7:e1:
1f:6c:64:a8:ee:17:10:91:b8:11:2a:8c:4d:d6:7a:
5e:ef:ee:b7:2a:4d:7c:d0:7c:4c:67:09:04:e9:a8:
4c:af:3d:17:98:dd:aa:67:fa:0e:e0:e4:1e:da:57:
9f:ab:a7:7a:2a:53:c8:7a:a4:62:c7:30:be:70:7a:
74:a0:a1:36:b7:9d:86:f7:d8:b5:c9:d4:83:11:e1:
9f:85:ab:04:bf:59:fb:a6:fa:c5:7c:47:17:7d:99:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A0:5E:22:E9:51:41:5C:8E:6B:15:BF:39:08:E0:EF:E0:0B:46:B8
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d7:bb:ca:d7:78:cb:07:1d:6b:89:16:bc:a7:b5:78:a0:15:
cb:be:15:bb:0a:e6:dd:eb:2d:32:56:af:b1:04:28:95:7e:bf:
5b:f7:ab:12:f1:e3:93:b5:1a:3e:84:c9:9c:51:e9:fb:a8:35:
d4:f3:01:9d:72:a8:b1:a4:03:e1:3f:76:b7:26:e9:0c:62:97:
45:2c:b8:57:89:f1:fb:22:2a:d2:af:a3:91:13:65:97:50:0c:
02:17:67:7a:f6:03:cb:b4:af:f6:3e:5d:0f:22:50:7b:6c:94:
e3:4c:dd:b2:90:48:c6:94:b6:93:6f:22:f2:e3:ca:bb:f8:b6:
31:c2:63:53:ca:55:ed:c0:d4:cb:19:71:86:ed:f2:2c:bd:e4:
d6:e0:d1:46:f9:4b:0f:de:8d:38:04:92:6b:64:ce:1d:78:5b:
af:46:75:51:be:1d:a6:c3:a1:7d:c6:7a:8e:84:6f:98:54:de:
56:8c:df:d3:86:3a:3e:1b:1d:9d:c6:4b:f8:07:c8:09:7b:79:
12:dd:f9:a5:da:af:33:d7:10:47:cc:b5:df:ca:5f:bc:a0:b7:
93:64:14:73:22:c2:0a:e5:7a:08:24:b4:eb:68:1a:a9:01:db:
b6:c3:21:66:f9:bf:34:fb:2b:e0:20:79:14:4d:7b:bb:fb:a1:
58:ff:e1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:58 2025 by rpki-client