Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: Le53j9rjGAcJfrVKscvMXsF0L9scFVhToz12sxEVeIU=
Subject key identifier: 72:A9:DF:0D:67:6B:22:F4:FB:FD:FA:C2:A1:3D:91:8D:03:8B:A6:DB
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 019A4EF486F51868163A63D00974B12171BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: DGcmcX4JwWsZV4aJTU4Zd+c0N6Hst5PWYiDgghT6FIM=)
2: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (hash: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:86:f5:18:68:16:3a:63:d0:09:74:b1:21:71:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=72a9df0d676b22f4fbfdfac2a13d918d038ba6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:5c:9f:b2:b2:5b:fd:38:da:79:27:51:5b:
43:e0:54:44:3f:7f:2f:9e:72:f0:d5:f2:0f:88:e7:
95:7b:59:73:d4:23:17:b4:50:92:cd:89:50:ed:2e:
2f:4f:bd:19:74:82:3f:d9:f1:a3:b3:d4:35:05:e0:
5f:45:85:25:0f:23:ab:8f:5b:b3:7e:c8:20:e4:07:
3e:b7:06:83:e4:23:0a:41:96:f6:7d:c8:c7:21:f3:
50:b0:1a:1e:15:ff:5b:3f:1d:a0:ae:0c:74:81:13:
8a:cf:24:b4:3e:ce:6a:4d:26:9e:2a:66:cb:c8:83:
ed:2d:18:27:3d:8c:7e:77:33:79:ca:75:99:84:ae:
71:b2:9d:bd:dd:6f:ea:2f:a1:2d:8c:36:df:d8:73:
e4:5a:b9:1d:bd:23:13:0b:17:c7:ac:80:fc:76:3f:
4d:65:87:66:d1:df:5d:93:d6:01:27:5d:35:3c:29:
6f:98:ce:82:e7:a2:f8:d0:31:ec:f7:5c:34:ed:fa:
42:72:3b:13:40:9f:b3:75:73:90:24:a9:ab:8a:d9:
8f:fb:98:f5:68:d0:a4:94:de:f1:28:8d:21:85:f8:
1a:e6:44:84:c3:e9:72:d4:4b:6f:62:8e:45:bf:ef:
89:cc:66:d2:90:f3:a7:ae:07:ca:e1:89:07:c6:a1:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:DF:0D:67:6B:22:F4:FB:FD:FA:C2:A1:3D:91:8D:03:8B:A6:DB
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2f:a6:91:7a:7f:10:34:03:51:24:56:9e:26:25:2d:b4:8f:
d6:ad:d5:ba:57:a9:cf:bd:9e:59:9c:8d:29:7c:7f:0d:94:45:
0a:a4:ad:09:96:4f:fb:29:36:57:8e:8f:a7:b2:82:33:fa:87:
66:44:f7:2e:ce:4b:92:a2:a0:40:3c:48:44:72:ed:41:a5:06:
d9:3d:37:07:02:7a:54:f8:25:01:9f:d5:cc:6e:cf:3b:48:c8:
6d:9a:8f:44:ad:07:ef:ca:24:a8:ef:3b:65:6a:67:c4:42:5e:
0b:18:81:1e:cd:88:0f:23:08:e0:6f:95:3f:6d:8b:dc:16:fb:
cf:cb:68:95:6a:9e:52:fc:e9:28:09:fd:39:d8:fd:8a:db:96:
bb:a6:eb:53:e7:de:10:b7:66:86:b7:fb:2f:70:41:da:12:bb:
52:1c:9f:00:17:ff:36:e2:15:ad:40:64:59:9a:b4:4a:68:99:
3e:ba:ca:ef:5e:83:a0:83:96:73:a8:ab:e4:fc:2f:80:d8:a5:
93:57:24:cf:24:59:17:9b:46:d3:3f:a2:59:2e:e3:f9:b1:e6:
b0:df:3a:77:d7:e0:47:9a:42:45:ad:4f:fa:7e:21:e4:fb:88:
2b:4b:f1:6b:a5:19:3e:67:81:00:62:08:21:0a:e9:08:73:7f:
e9:7d:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:55 2025 by rpki-client