Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier: WdASlOUmDwqZLJUj6zFatZNZtwPysMzYgXQl+kzT8EM=
Subject key identifier: 32:AA:AA:3F:5F:5D:58:45:87:21:12:93:4B:44:BF:F2:1B:9F:E2:4B
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial: 019A533EDA38CFCF5889B2EA2BA6729060B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 09:00:19 +0000
Manifest this update: Wed 05 Nov 2025 09:00:19 +0000
Manifest next update: Thu 06 Nov 2025 09:00:19 +0000
Files and hashes: 1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=)
2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: Qp4fNP2HEOIOLfje3pyRG1o8G/vQu45JyJac+ZIAcRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:da:38:cf:cf:58:89:b2:ea:2b:a6:72:90:60:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Validity
Not Before: Nov 5 09:00:19 2025 GMT
Not After : Nov 6 09:00:19 2025 GMT
Subject: CN=32aaaa3f5f5d5845872112934b44bff21b9fe24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:ff:c0:54:e7:25:5b:d2:66:42:92:7e:d3:
32:3d:47:ef:e2:32:21:d6:8b:72:e9:79:e0:2d:73:
dd:83:a9:7d:d0:1d:ae:13:90:51:8b:cc:d7:89:02:
dc:8d:ef:87:cf:7a:f0:e7:3e:d3:d5:d3:91:dc:d3:
1a:cb:8c:55:e4:20:ab:ea:74:c7:ee:71:13:91:0f:
76:30:73:37:bb:60:56:92:06:a0:f9:54:ee:c9:5b:
10:c1:56:fa:ac:83:55:b4:b3:2f:69:03:f1:11:9e:
6d:76:c2:e2:58:0e:9d:03:b7:52:e4:62:ab:74:c3:
ee:e6:15:7d:8b:a9:e0:ca:b4:a4:a4:16:10:3d:d7:
31:ba:9a:ad:81:68:07:03:cd:3c:07:b9:0e:94:2b:
89:6a:a9:89:f1:19:61:42:a6:58:7a:41:84:3a:7c:
a9:ba:b6:75:fb:1f:06:77:08:ef:6b:cb:0e:c4:2c:
76:29:fa:bc:1d:3b:1b:fd:bb:81:a0:17:8a:24:f0:
76:99:4a:ca:3e:fd:6c:24:84:51:28:cb:33:e6:49:
a6:50:dc:00:bb:3b:d3:bd:c9:5e:01:9a:a4:82:a0:
39:99:3d:73:0e:bb:b2:62:99:c5:7b:b9:f0:2e:cb:
db:01:10:c2:6e:50:12:b3:4e:31:72:9d:d6:d8:db:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AA:AA:3F:5F:5D:58:45:87:21:12:93:4B:44:BF:F2:1B:9F:E2:4B
X509v3 Authority Key Identifier:
keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ef:52:56:ef:58:e9:16:9b:1d:66:11:cd:aa:66:29:5d:e4:
19:70:c0:c9:57:d8:5b:83:f9:bc:66:03:4f:78:2c:8c:b1:67:
e1:e4:0d:b3:f4:ec:45:f8:da:b0:c8:a5:3f:40:88:69:e5:cd:
8d:cb:e3:ca:b2:bf:a5:d7:fd:1c:19:22:bc:53:33:38:86:54:
98:0d:28:a7:6d:32:9b:f7:27:0d:20:6a:85:4e:f1:d2:84:bd:
0c:62:22:db:77:e4:70:c5:c3:b4:bd:63:a2:32:e5:d9:07:6a:
03:3b:28:f2:5c:1a:89:6d:18:73:ac:8c:2a:ee:94:49:e6:f5:
79:0d:a5:8f:50:08:80:36:af:18:f6:61:20:62:fa:03:32:2f:
e6:3b:8f:3f:a1:32:75:af:ad:b3:44:6e:11:40:78:04:16:59:
de:9e:6c:4b:a4:34:0f:26:a3:54:0b:62:c2:56:f3:e6:8a:2e:
24:69:99:3c:23:cb:f8:34:1b:eb:e7:83:59:1b:e2:4b:f9:5f:
c9:67:33:8f:ce:7b:77:d5:44:16:8c:3c:69:f8:5f:b1:f8:54:
85:00:1b:54:ec:58:84:d0:89:2a:87:c9:9d:b1:7e:fb:56:a5:
01:8d:54:fd:3c:55:29:a7:17:97:2e:00:45:69:cf:0f:74:7b:
fe:9b:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:56 2025 by rpki-client