Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier: RygdyQCpnVIMxTFuOUUx46FyjHFCnpfTLkixsER3CV0=
Subject key identifier: 49:BD:1B:E5:E8:18:D8:35:A5:A6:8F:06:70:00:40:39:FD:04:F6:24
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 019A5376041235AC18801F21138BE04B8C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number: 0EC2
Signing time: Wed 05 Nov 2025 10:00:34 +0000
Manifest this update: Wed 05 Nov 2025 10:00:34 +0000
Manifest next update: Thu 06 Nov 2025 10:00:34 +0000
Files and hashes: 1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: fFtcm3wmhpq4Q24wLqLNBjo/2+tSbp+z+q87ocN78L4=)
2: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (hash: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=)
3: INWe7JHY3LSZtRLCNKJA9CyWVj4.roa (hash: Yo4nt69BrN4AQ4hoMVSQ6OOsFPB4EPZWgV8+aVYUE7U=)
4: nGmNNcPYPqUlkXgs_RQgBIHWHdU.roa (hash: qd/h+GWajfOX6OMR5HYNSJZTt3Etfb5C3Mcx9RhNRgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:04:12:35:ac:18:80:1f:21:13:8b:e0:4b:8c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Nov 5 10:00:34 2025 GMT
Not After : Nov 6 10:00:34 2025 GMT
Subject: CN=49bd1be5e818d835a5a68f0670004039fd04f624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:78:a5:88:64:9a:02:05:6c:b3:ed:81:a6:20:
ac:5c:70:13:c9:06:10:ba:b7:c1:4d:f6:44:c8:ab:
74:ef:e4:0a:30:1b:14:9a:30:c2:f7:df:bd:3d:b9:
aa:34:a5:68:74:01:81:8b:f1:3f:4c:81:34:48:78:
46:a3:ee:4d:82:41:12:20:e4:d8:80:36:a7:db:40:
20:f3:2a:d1:86:96:c1:f3:db:c0:b6:e4:31:66:6c:
27:75:88:33:4c:9d:53:e5:39:a3:bc:9c:83:85:47:
99:25:0e:c3:71:23:7a:f4:7d:85:fd:c2:70:ea:41:
1d:36:7d:87:45:5e:c0:70:0b:ec:68:f6:23:49:a4:
be:02:a7:b9:38:e6:e0:d9:09:47:74:fa:90:14:1c:
13:51:f3:1c:db:f2:eb:9a:e5:c0:c9:9a:99:99:fe:
be:a8:a0:55:5e:ed:55:ec:ee:42:72:0a:f0:fb:dd:
0c:4c:5c:23:b8:22:09:75:6d:a8:2d:0b:5e:5a:0a:
a2:2e:6b:f6:6a:84:63:0f:f0:24:26:8d:35:56:aa:
86:0f:29:34:37:f4:2b:2b:65:a7:d5:d1:81:3a:5c:
76:60:1a:ff:73:b0:ab:90:2f:64:6f:eb:7b:d4:f0:
ce:d9:69:3e:de:93:3f:00:79:01:0d:20:68:87:39:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BD:1B:E5:E8:18:D8:35:A5:A6:8F:06:70:00:40:39:FD:04:F6:24
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e6:fa:ce:43:92:86:f5:00:49:48:02:b7:9d:44:a5:ce:8c:
af:d9:9a:d3:9e:dc:da:83:2f:89:e0:bf:40:c5:42:fe:3b:55:
38:83:00:28:ff:16:c7:6e:83:0c:9f:2a:54:f2:42:c6:6e:c9:
ad:d3:ba:a4:06:06:3a:6d:33:89:a0:eb:0b:dd:af:49:a4:40:
42:47:aa:a8:15:d5:01:83:4b:ed:13:64:f2:ee:9f:a0:a2:af:
2a:0f:0b:d4:0e:c4:1c:c7:96:5d:ac:17:a6:2f:53:7b:b6:70:
58:46:cf:9d:26:4e:52:0a:73:c5:10:e2:f7:e3:3a:cf:12:e4:
84:d4:9b:3c:a2:0a:30:64:23:bd:63:94:e3:16:54:73:26:05:
18:71:67:fb:37:df:94:ba:2c:80:8f:09:28:fe:73:aa:4e:41:
b6:fd:63:15:88:de:9b:37:77:c5:9a:37:8b:b9:bf:50:f8:c2:
65:12:c6:2d:f1:9f:c7:b8:bb:41:e5:72:9b:ae:76:1d:80:f5:
77:e0:82:72:54:20:df:27:b8:bb:b2:f5:5a:b8:65:8b:01:8b:
f5:89:da:e0:d1:18:99:f3:39:70:bf:7b:ed:fd:91:65:4f:be:
b5:4c:c8:2f:f2:c0:a3:86:88:4f:6a:24:9a:96:2c:95:9a:ea:
b1:2a:75:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:23 2025 by rpki-client