Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier: sEZ2ULpqjYcaLrcqzsvuADVMWvnaeKMiZKd2Mvq+QUQ=
Subject key identifier: AA:F2:FB:C7:58:4C:88:A6:03:CF:10:0E:89:30:A4:BC:C5:F8:DF:68
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 019A4E1897E9FFEF9FC2218CFCEB5EC7CB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 09:00:25 +0000
Manifest this update: Tue 04 Nov 2025 09:00:25 +0000
Manifest next update: Wed 05 Nov 2025 09:00:25 +0000
Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: tR7vJngCaxVs4q93SWemt6Wd04zFBBIcE+uaaWACCys=)
2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:97:e9:ff:ef:9f:c2:21:8c:fc:eb:5e:c7:cb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Nov 4 09:00:25 2025 GMT
Not After : Nov 5 09:00:25 2025 GMT
Subject: CN=aaf2fbc7584c88a603cf100e8930a4bcc5f8df68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:0f:69:e1:7a:1e:45:8c:7b:19:ef:df:26:
e6:98:96:15:52:05:a7:ee:bc:01:9e:0b:6c:75:98:
cd:af:62:f8:60:0d:1b:2a:e8:fc:d6:ce:0d:c7:0f:
fc:e6:e8:07:ce:6b:4e:56:b0:b1:cd:dd:52:f9:bf:
73:75:9b:cf:9e:dd:e3:47:c5:07:a0:37:bb:06:68:
9b:6e:c0:25:58:17:b9:21:1d:15:2c:3d:26:e0:99:
5c:6b:17:d9:4e:15:06:42:7f:38:a2:37:88:64:f2:
ec:47:49:19:ee:8a:ce:b3:30:6a:45:5d:f8:9a:cb:
a6:00:e1:1a:b0:9c:be:55:00:67:50:fe:12:5e:6f:
05:29:90:37:04:11:c4:99:24:d2:ea:da:6e:e3:7b:
3b:5d:71:9c:25:76:8c:d0:cf:86:7b:87:1e:f8:a8:
a1:42:27:d3:dd:c2:6c:64:54:c1:49:65:b0:c1:3f:
8f:9c:eb:cb:3f:05:32:44:e3:b0:44:fa:aa:b4:1d:
88:4b:c7:0e:0a:66:90:bb:75:7d:19:48:04:3b:fc:
cb:aa:b5:79:f7:e8:ac:bd:f8:a5:2f:a5:c1:cd:40:
99:d1:c7:12:ad:22:ed:29:e2:ed:c2:62:92:e6:9c:
24:dc:d9:32:43:92:f0:1a:30:2b:62:99:9a:4f:bc:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F2:FB:C7:58:4C:88:A6:03:CF:10:0E:89:30:A4:BC:C5:F8:DF:68
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7b:b0:6e:21:45:bd:bb:71:cc:4d:13:b8:ac:cb:90:35:5f:
5e:5d:07:57:dc:c1:09:e9:1a:02:19:00:1b:66:40:e3:1a:2b:
ec:3e:1f:19:71:a7:64:7f:40:e6:02:80:fc:54:f3:ab:84:5d:
04:cc:1b:46:8d:6c:4f:5c:fa:ca:b8:7d:39:b2:2a:e0:a0:f1:
53:96:9d:4e:5f:79:5d:7a:4c:47:67:05:94:93:c3:3d:93:3d:
ae:2b:41:28:6d:c0:f8:08:d5:85:02:94:98:65:01:77:0c:30:
22:58:ac:33:2b:cc:5f:42:73:85:a3:66:ab:25:6f:05:0b:41:
a7:f3:5b:e2:9f:5b:e3:e6:f4:69:f8:d9:c6:8b:6e:72:c1:e1:
4d:0c:40:b2:3e:39:74:91:35:fd:06:d7:cb:e0:0b:02:8e:03:
dc:88:94:0f:fd:ee:05:64:66:d3:8a:d3:10:14:73:77:a8:de:
16:59:d0:16:70:7e:b6:8a:a3:26:24:cc:ee:24:9b:fc:e6:ac:
5c:0f:9c:3d:0e:3b:ad:ec:ad:bc:a7:36:c6:1d:8d:a5:5f:fc:
83:04:89:69:7f:99:79:e1:f2:a5:eb:e1:20:55:dd:e5:3d:7b:
e1:0b:4c:41:ec:78:38:fe:54:6b:79:b8:62:f7:0a:9a:b6:06:
c6:2b:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:56 2025 by rpki-client