Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: QDcsSZRCWLL/xijA71Ih0OfsQrVBaJNWKvnoBim/tfU=
Subject key identifier: 8C:E3:99:EF:89:14:E2:1B:95:E7:00:9A:A0:7A:80:8A:4B:B2:BF:79
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 019A51BE817BC586779FBB1CC0AC6F24F160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0B36
Signing time: Wed 05 Nov 2025 02:00:30 +0000
Manifest this update: Wed 05 Nov 2025 02:00:30 +0000
Manifest next update: Thu 06 Nov 2025 02:00:30 +0000
Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: 2z0a2VYUXZXF7vpcgnQeONBk+u4B8JuCxldZ/hfe3J4=)
3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:81:7b:c5:86:77:9f:bb:1c:c0:ac:6f:24:f1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Nov 5 02:00:30 2025 GMT
Not After : Nov 6 02:00:30 2025 GMT
Subject: CN=8ce399ef8914e21b95e7009aa07a808a4bb2bf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:ef:10:9a:bc:e9:d7:f1:0c:04:c3:0b:34:
40:6b:51:e5:79:68:d4:de:cd:83:24:3b:c1:09:3f:
41:f9:d5:ab:4d:c0:3f:83:7a:10:53:e0:45:2a:f3:
5b:1a:39:99:64:36:53:c6:1a:14:51:be:e8:04:44:
05:04:43:bc:e8:a1:f6:7e:d5:2a:69:ba:ec:03:25:
6f:b9:5a:b6:85:f6:a7:59:19:74:a7:23:fe:6a:5d:
fd:c2:48:d8:48:53:5c:49:4d:1e:a5:71:4d:03:b4:
f0:5f:e0:46:a7:3c:a7:09:e8:d6:91:0c:00:6b:08:
46:20:9a:35:ff:b9:fe:4e:dd:33:28:bc:9e:97:36:
29:d1:41:00:7f:84:1e:b1:44:2f:3a:e4:3c:a0:5e:
52:9f:c1:ac:96:db:e6:a0:31:3f:f0:22:3b:87:6d:
f9:58:8b:d6:f4:42:65:44:f1:79:49:1b:a0:36:61:
38:dc:1f:af:07:06:52:32:78:98:ca:e8:6a:29:c4:
9e:23:cb:c1:ea:48:77:11:e1:b4:57:9f:7c:f3:7a:
3b:36:ca:69:4d:c9:a1:95:84:69:f7:24:aa:d5:f4:
4a:02:53:ad:d3:4f:5a:42:bd:21:e7:9d:3a:32:37:
53:75:4e:da:d8:3b:32:42:4c:9d:13:a4:df:11:4d:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:99:EF:89:14:E2:1B:95:E7:00:9A:A0:7A:80:8A:4B:B2:BF:79
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:64:41:6e:06:35:cf:21:1c:a2:44:22:df:2b:c8:ad:99:41:
72:10:a1:0b:e0:a0:e7:cd:0c:97:80:a5:22:73:25:2c:b8:80:
cd:f6:cc:56:8d:7e:be:36:34:c1:da:47:da:ad:51:69:82:6a:
a4:95:62:69:f7:15:a0:e2:3a:31:6f:4e:3e:cc:63:a9:34:ac:
8f:e1:a6:70:42:1d:08:ef:7a:0c:07:0b:65:f9:27:ef:bf:4d:
7c:47:92:d3:a2:80:f8:0c:b3:3e:2b:6c:9b:00:d5:56:43:4f:
e9:4d:db:1f:33:5b:f0:f1:c4:3d:5f:ca:1b:85:7c:70:91:a5:
5c:6a:34:bc:2f:9e:09:54:36:c2:26:ef:b9:af:d8:13:d1:09:
6f:79:96:02:b5:e6:6d:35:5e:2e:52:94:9c:e8:a2:ae:1f:26:
d4:9f:b8:26:13:27:d2:c4:be:bf:0e:bc:98:fd:f1:d1:50:df:
03:d8:bf:48:6b:83:e5:f6:46:53:e7:d1:8b:7c:44:00:76:52:
dc:c3:00:bc:38:6d:21:1b:64:53:00:e7:93:3f:cb:74:92:57:
b4:25:8c:50:d0:7d:ab:3b:4d:b0:0d:28:53:46:21:02:7a:32:
a7:3e:3c:c4:06:3f:6f:2e:c4:20:76:5a:5a:55:08:36:01:f2:
46:9a:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:50 2025 by rpki-client