Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier: lbn5uxTIi3rG5r+V7NZBCAHyGRyVevMAJdAgkY9hsW8=
Subject key identifier: A0:A3:E0:83:23:61:11:32:B6:74:83:65:D0:AE:F6:CE:2C:CA:74:47
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 019A5C7A9509F25CB317967E74087E2C0288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number: 1714
Signing time: Fri 07 Nov 2025 04:02:08 +0000
Manifest this update: Fri 07 Nov 2025 04:02:08 +0000
Manifest next update: Sat 08 Nov 2025 04:02:08 +0000
Files and hashes: 1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: h1uvvq816TjPU7zJM03s4N5TT2+/blS0xjdVhjDfyw4=)
2: P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa (hash: viXxvbgM6fcm3+uNTvobtmlKGENasOgtCzi4bFmu9u0=)
3: VjB61y70CykGJrI1joYA_LZs7BQ.roa (hash: 0fdGzWqdSh6FPKMh+lErtdFv9hP3dlRfbAfCokMP6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 04:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:7a:95:09:f2:5c:b3:17:96:7e:74:08:7e:2c:02:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Nov 7 04:02:08 2025 GMT
Not After : Nov 8 04:02:08 2025 GMT
Subject: CN=a0a3e08323611132b6748365d0aef6ce2cca7447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:05:2e:56:c6:50:77:d2:73:b5:3b:88:88:
ab:bc:fa:8c:d1:d8:f7:ce:11:83:5f:fb:cc:27:ec:
33:8a:e5:57:b5:0b:f4:bb:6c:52:11:31:ec:c5:54:
70:d2:02:7e:99:27:76:96:38:6e:32:e3:d4:98:59:
a5:06:d9:dc:ba:b5:f9:e4:84:70:24:03:94:1d:7f:
0b:2f:7c:0e:05:61:3b:ce:64:79:f7:72:20:b4:7b:
c1:65:0c:7d:77:3f:bf:6a:08:09:b0:fe:7d:d6:66:
89:b0:2d:66:d2:d4:0f:25:a4:08:c8:de:55:05:89:
b1:87:cd:8d:a2:a2:0a:22:1b:2b:0a:10:99:68:65:
3a:8a:e9:23:76:a9:a4:c8:04:c5:49:fe:00:c5:b6:
80:bf:d4:de:e5:a8:4e:d5:3d:41:79:df:06:b8:53:
07:c8:22:b2:e7:46:75:c1:a5:6f:29:6e:7a:75:f2:
f3:23:15:c1:a9:0c:65:3e:66:45:41:8f:2c:63:13:
79:25:05:5d:7d:10:f0:11:c2:87:0f:14:88:06:18:
07:18:a8:cc:66:53:37:1a:e5:2e:9a:a1:f5:d0:fb:
6e:ce:db:13:e7:f2:d3:1c:f4:93:2d:37:7c:ab:39:
cf:f3:93:0c:fd:cc:8c:31:24:e3:33:e7:a9:cc:d4:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:E0:83:23:61:11:32:B6:74:83:65:D0:AE:F6:CE:2C:CA:74:47
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cc:a1:19:4a:6f:ba:2a:47:b9:c3:25:84:71:e6:7b:b5:8d:
91:0c:5d:88:1a:4b:82:ca:ff:54:b5:87:9c:47:ab:84:e8:e2:
93:58:16:50:3d:c0:48:11:b7:c1:08:ac:fb:ba:16:15:7c:b9:
11:92:47:3e:a5:a3:fc:ff:47:d3:26:cb:b6:f9:3d:9b:4e:ee:
7d:56:00:6f:ab:f7:de:b0:ab:18:64:c1:e1:67:21:22:de:35:
de:ac:7f:ae:e5:23:af:40:49:2a:7f:0c:ac:48:09:1f:09:dd:
5a:73:cb:3e:34:f7:9a:d1:dd:b8:70:17:2f:10:81:02:0b:7b:
86:45:97:ec:09:98:67:69:83:f2:81:bd:b5:53:d2:91:d4:88:
07:28:5a:bc:4f:01:8f:8f:0c:fd:cd:a4:c7:2e:ad:03:38:d1:
a0:55:28:20:83:16:20:57:b1:cd:48:0c:e0:bf:32:a6:a4:09:
4a:d8:58:e7:cd:76:81:46:6c:78:53:95:fe:2b:d5:9c:e0:3d:
0b:b4:34:25:eb:b6:4a:e8:ff:9c:0d:ec:8a:5f:40:88:6b:a5:
6a:b2:03:e1:11:f3:bf:f2:03:cb:95:d6:25:8c:fb:01:d3:83:
38:e1:ae:dd:14:2a:ba:78:f8:c9:8f:8d:f3:9d:fa:ff:a2:37:
23:f4:35:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:57:48 2025 by rpki-client