Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: mL2TD7RYIB4LBkk4PUg6qgHoawZAdR+PADR2mOpowOQ=
Subject key identifier: E3:81:FB:75:53:BB:03:C5:07:D9:E6:76:FE:4D:3F:75:2A:08:96:8E
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 019A51BEEBDA5D3ED94D48DFFC20EBEE0B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 0A3B
Signing time: Wed 05 Nov 2025 02:00:57 +0000
Manifest this update: Wed 05 Nov 2025 02:00:57 +0000
Manifest next update: Thu 06 Nov 2025 02:00:57 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: UO1+xCXx7WxJPygmVc1bvre/C/l+Qgkas650IT3LK7E=)
2: eTuN91J09OBNoZtxEtruVhH4DbY.roa (hash: F1iOkNAfZrkXFWgz/sdsk9Ul6Wkc9BDyHiaUC1recQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:eb:da:5d:3e:d9:4d:48:df:fc:20:eb:ee:0b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Nov 5 02:00:57 2025 GMT
Not After : Nov 6 02:00:57 2025 GMT
Subject: CN=e381fb7553bb03c507d9e676fe4d3f752a08968e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:ea:ad:62:73:83:5d:c7:f8:76:16:a4:a6:
1f:8e:22:48:3a:9a:ca:2e:08:71:92:7e:5b:52:c3:
78:b0:4f:b3:96:10:27:a6:ae:5d:90:ec:67:67:05:
14:d5:02:a9:73:9e:6e:55:c8:e9:a5:ce:57:1a:d6:
8c:b7:94:09:56:7f:08:2c:ce:5d:13:72:69:ea:da:
fb:79:f7:80:b6:21:90:f0:10:29:6b:55:e5:fc:9f:
fe:d0:ca:2a:a9:a3:ce:7c:38:b8:42:75:e4:31:57:
bd:dd:38:72:ff:fc:73:6e:6a:ca:34:aa:59:be:29:
41:b1:4f:da:7e:10:f8:4f:7e:4f:04:24:ae:33:45:
d3:b0:37:ca:1c:9b:03:14:c2:ee:8c:cd:bc:15:ba:
92:9e:bf:fc:f3:ff:ca:93:53:46:18:96:81:38:75:
bf:86:7a:db:cf:10:44:fc:23:3e:73:e8:37:e9:4e:
50:86:1a:7f:43:60:53:5c:8f:87:1e:26:f2:f3:de:
a1:23:84:e1:e3:90:db:76:17:81:ed:4d:21:06:24:
90:4c:a2:64:bf:69:69:49:27:29:9e:44:77:45:46:
7f:b2:f2:9b:ba:b2:7b:a4:1c:59:c2:d5:eb:d5:33:
99:a0:df:c8:f1:88:6e:d7:03:61:34:09:59:6c:d3:
6f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:81:FB:75:53:BB:03:C5:07:D9:E6:76:FE:4D:3F:75:2A:08:96:8E
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a7:2d:d9:8a:60:37:04:2a:ff:1b:69:fc:4b:fa:1d:2b:2e:
88:48:34:42:d3:32:c2:f6:8d:bc:71:db:c1:c5:9d:a7:51:b1:
b4:6d:a0:4c:aa:6f:b6:82:b4:5b:0b:d1:6d:ea:93:4b:ba:40:
d0:60:8a:8b:44:3d:11:b2:e6:6e:22:74:8b:58:bc:8d:c0:b8:
72:b4:ed:14:6b:59:00:7b:45:b2:91:59:67:cb:c6:82:91:8c:
77:46:1d:5e:fc:cd:f0:92:4d:ca:b1:d8:0c:dd:d0:5d:3e:5c:
d1:a3:b2:8b:80:20:1d:9c:2c:b4:ee:88:24:2e:55:9a:f0:31:
0c:c0:74:02:25:f4:7e:5b:eb:fd:3b:66:07:7c:35:0b:e5:20:
bd:9e:36:04:91:6f:0d:50:09:ac:d0:57:29:ac:dd:ac:4d:c6:
d5:5f:65:7c:03:6f:9e:15:b7:76:6c:b1:e3:b3:84:6f:50:44:
e2:05:89:21:5d:6a:f8:be:fa:04:13:98:90:f9:35:41:6c:58:
ad:60:77:a5:ee:18:d8:6a:f2:76:42:df:0b:9c:12:c3:44:73:
5d:5f:c6:70:67:a6:ae:5a:9d:6a:e9:ae:af:49:0a:d3:1a:54:
49:e6:fc:8f:52:d8:40:68:16:de:fe:06:5b:e8:5d:c5:a9:ac:
c1:2b:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:56 2025 by rpki-client