Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: 117xvotvPixvqCZG8s/ANGOeiuoOw4GjVEtUMu8GLcA=
Subject key identifier: B5:7C:07:28:68:83:1E:E2:13:4F:06:26:7A:1B:09:9C:2F:C3:65:6A
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 019A559B941D077D6887732D4F0B21E3F7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0C57
Signing time: Wed 05 Nov 2025 20:00:50 +0000
Manifest this update: Wed 05 Nov 2025 20:00:50 +0000
Manifest next update: Thu 06 Nov 2025 20:00:50 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: a5q0hdR7WnZMtk79CJvng/NJTDggS6xy0CS6HlSGaOA=)
2: ttJJaBUZDaYcQDBtp6etg0tHOcw.roa (hash: eyDaETbBTLM6QaTgVh4ZT2/g+b+CTdUyos3+nCYyg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:94:1d:07:7d:68:87:73:2d:4f:0b:21:e3:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Nov 5 20:00:50 2025 GMT
Not After : Nov 6 20:00:50 2025 GMT
Subject: CN=b57c072868831ee2134f06267a1b099c2fc3656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:7c:19:7d:5c:2b:cb:3c:a9:88:87:cf:6d:
56:21:cf:88:7e:6d:bd:c9:48:85:01:aa:d3:02:b5:
00:21:b1:62:37:5c:d5:7d:58:39:e0:fd:24:0c:b8:
6d:0e:7e:75:ea:4a:28:a0:10:37:d9:a1:6f:a6:cf:
9e:e2:72:b2:6c:cd:e2:cf:2a:db:85:c6:4d:e8:6d:
01:39:13:f3:00:64:3e:ac:c1:24:66:f5:9a:f8:ff:
ae:bb:b8:72:c4:c0:18:d9:d6:e2:fc:05:49:31:77:
5b:34:89:ac:c4:59:5a:82:d9:ea:65:1e:b8:2a:48:
14:75:ba:9a:2c:78:f4:c9:85:a0:b1:b0:e0:36:22:
08:d1:a4:c4:11:c6:9e:fc:60:23:cc:29:e5:25:87:
51:3f:a0:71:c4:55:ad:b2:bc:ea:42:ab:f7:eb:e6:
cb:8e:6f:46:61:9c:b9:30:e6:c0:87:60:0e:cb:74:
28:f0:67:48:69:44:5a:90:9c:fc:c4:9a:8f:34:76:
24:d3:a3:ac:77:cc:85:8e:67:d1:43:b1:1b:55:1d:
31:00:30:97:77:7a:96:71:29:df:f7:38:4b:0f:2b:
6f:1b:fd:3a:2c:28:87:e8:44:8c:33:59:fc:b8:61:
b1:e5:f9:92:29:3c:a9:3e:18:0b:6d:2f:24:65:7f:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7C:07:28:68:83:1E:E2:13:4F:06:26:7A:1B:09:9C:2F:C3:65:6A
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:af:f1:6b:87:6a:43:88:d9:79:6f:30:bb:5c:31:5d:47:cd:
37:6c:8e:e6:24:d5:eb:fe:8a:8e:3b:c9:ff:9e:68:8e:be:c5:
79:6b:d3:6c:a1:9b:f4:01:cc:28:91:a1:46:46:0c:bf:3f:a8:
99:26:b7:a8:7f:62:84:0e:4f:cf:04:eb:c7:71:2c:1f:7b:74:
e7:7b:a2:af:34:99:0d:14:39:d5:c7:15:e8:66:c1:d1:a9:fd:
c8:1b:c8:61:1b:35:38:59:bd:1f:0c:1c:b2:e3:56:53:35:82:
3b:e7:fb:e7:51:87:e2:9f:6a:78:59:24:11:ea:2c:6e:a6:9f:
80:bd:8c:3b:5c:b5:d5:c5:33:d7:bc:fe:e9:f5:7a:38:49:2d:
61:f9:e3:59:7c:e6:67:18:3f:51:58:55:d8:c8:92:58:28:bb:
bd:77:9e:2f:ce:23:9f:87:a7:6e:26:7f:3b:eb:9f:21:89:8c:
18:04:1b:7a:9d:84:2f:d2:09:31:f7:e8:68:2c:e0:5d:e4:f7:
4e:d2:d1:3d:32:d7:51:5f:a4:e5:ef:4a:f9:09:6a:36:d4:ea:
a2:3f:6b:ce:80:0a:56:95:2c:20:3f:cc:c3:a9:74:b8:7d:02:
f1:5a:a6:e2:52:f6:c8:c2:4e:e4:22:6a:1b:33:63:62:a8:ee:
32:2d:f4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:46:19 2025 by rpki-client