Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
File: SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json)
Hash identifier: hsgv2jhlZv8V8nTGNJ+I/uUfnrng2HKZUg7TffPYahA=
Subject key identifier: C5:44:5F:6E:13:41:9E:FB:0A:A4:B1:2C:06:D5:CE:D0:6D:EB:D8:B3
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial: 019A4DAAB1E90C80554616F376770E796599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 07:00:23 +0000
Manifest this update: Tue 04 Nov 2025 07:00:23 +0000
Manifest next update: Wed 05 Nov 2025 07:00:23 +0000
Files and hashes: 1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: v2VxL34AyyLJlLUnT0XOq/0a3KNfUlT40OsIUqPE09Y=)
2: bpYsiF18QRf5QtGXZ_iQjax9NTk.roa (hash: sxWNeli2Kw0W0CpyWRBKMIXDOOMhbuvbRuOafrwk3qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b1:e9:0c:80:55:46:16:f3:76:77:0e:79:65:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Validity
Not Before: Nov 4 07:00:23 2025 GMT
Not After : Nov 5 07:00:23 2025 GMT
Subject: CN=c5445f6e13419efb0aa4b12c06d5ced06debd8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:0e:7a:89:b2:41:fe:c1:d1:f8:e5:1c:45:
56:14:60:93:17:51:47:4c:06:56:c2:0d:3a:38:e2:
e3:1a:2a:3c:1d:9b:04:d3:c8:93:af:05:b9:fb:08:
df:fc:39:1b:f2:97:54:ef:2d:b2:cb:b9:b1:2f:c7:
d9:cb:bc:f1:5c:10:2f:0a:38:88:77:07:4b:56:41:
c9:b3:d2:28:1e:8f:58:a2:ce:f3:cf:b4:f1:c8:41:
31:41:d7:82:eb:23:d1:c9:b1:66:97:d8:9e:1f:e8:
fc:91:2d:9f:7a:c8:2a:8c:eb:84:d5:80:d5:4b:a6:
ef:72:3a:16:e8:b6:ac:21:dc:04:64:28:00:fd:70:
19:91:8d:9b:9f:d6:c5:fa:d6:89:d3:f4:7c:72:17:
46:c8:bb:0e:3a:e8:26:c4:04:2c:f5:1d:d9:01:85:
67:dd:9f:cc:5a:a5:ee:ce:dc:ec:7c:21:c4:e2:bb:
42:5a:86:9a:8b:f1:6b:c8:e7:eb:31:6b:e2:6b:e8:
19:7d:28:93:52:51:a0:30:97:2e:07:9e:46:8d:67:
0d:08:e2:60:04:d9:c5:14:f8:7a:3c:d6:94:e0:4e:
96:93:81:c9:d1:70:d8:7e:b1:74:41:ce:09:bb:d2:
ae:c8:34:5d:ee:45:fd:22:43:3f:21:11:e4:4c:62:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:44:5F:6E:13:41:9E:FB:0A:A4:B1:2C:06:D5:CE:D0:6D:EB:D8:B3
X509v3 Authority Key Identifier:
keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c5:a6:48:6c:f5:1a:b5:5b:c3:3c:4b:97:0d:4f:c1:28:1d:
71:f8:17:4c:0b:a9:6b:75:3b:a1:44:d0:7f:a7:91:13:5c:fc:
36:5b:1f:c2:fd:70:bd:86:cd:c8:45:86:f3:d5:14:50:7b:16:
a0:32:cd:76:70:85:f8:25:0a:01:ff:23:0f:03:22:4c:a1:81:
e4:51:35:d4:da:08:52:dc:19:3b:93:c4:87:6f:b3:eb:be:de:
cf:16:c7:c4:c5:a8:29:1d:f6:90:8c:b4:c6:72:18:00:df:4c:
2b:e7:89:b2:32:73:62:36:ab:60:4a:86:3c:5d:f3:b6:0c:87:
63:80:1a:74:02:1a:29:e3:20:83:7f:02:be:8c:5b:01:74:c6:
a8:d6:b0:c2:99:83:a3:6d:7d:c5:1e:c3:9d:33:60:79:22:d6:
c4:d5:30:6d:5b:08:17:84:4a:4f:b3:0e:db:45:1c:d3:92:c4:
73:1b:c0:61:d6:63:35:1b:f8:44:08:b3:b1:3a:04:aa:20:b5:
30:84:b6:6f:82:5f:99:9a:ec:b2:ac:e8:a2:7c:f4:77:6e:39:
f0:00:c6:28:3b:97:d0:5e:c4:65:32:93:d4:e5:73:2a:89:02:
2c:c0:b2:29:48:80:aa:db:73:82:d1:b1:8b:d6:ec:4e:19:e5:
b2:4e:5c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:08 2025 by rpki-client