Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: 1B+kz3WKO5qcxrZ4jd4CG6mC4Ju4leH/BJfaQeSvhAk=
Subject key identifier: A5:62:A0:CD:51:EF:48:32:B1:79:25:F4:95:63:01:A8:9B:B4:E0:30
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019A51BE887FD0130CCB6AEC85EEAEA61583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 02:00:32 +0000
Manifest this update: Wed 05 Nov 2025 02:00:32 +0000
Manifest next update: Thu 06 Nov 2025 02:00:32 +0000
Files and hashes: 1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: 9/ze5MlaG4Pq6qLQCDVWKlrDQbo2swlKCAPG87AouJU=)
2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=)
3: jP0oG4-lTwdPgvwQsai3xzsKBUA.roa (hash: cwxrU32A7FjEaD6Xb0+naWkVMI0iVDnV1C3ohgsG2Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:88:7f:d0:13:0c:cb:6a:ec:85:ee:ae:a6:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Nov 5 02:00:32 2025 GMT
Not After : Nov 6 02:00:32 2025 GMT
Subject: CN=a562a0cd51ef4832b17925f4956301a89bb4e030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:5b:17:1b:1f:64:3a:9d:9d:aa:b1:47:aa:
50:69:e2:a8:79:9b:af:9a:0e:d8:bb:8c:69:ff:9c:
02:83:9e:86:20:dd:4e:ef:72:77:93:5a:d7:c9:b1:
66:fa:9a:c5:d2:7a:2d:79:10:a6:a6:fc:91:9e:20:
64:a0:93:65:2e:c0:99:6c:4e:77:5c:59:3f:6b:b1:
ea:36:41:57:e7:8b:1a:95:59:a4:6a:25:df:12:24:
07:05:5e:68:f1:4c:65:9f:f6:cf:b4:76:a5:10:08:
44:1b:87:e7:2d:0c:bb:ee:e6:15:42:cf:e5:c8:b9:
69:25:41:3d:1e:9c:87:3b:ab:76:d7:2c:8f:a8:f6:
18:e3:e1:dd:45:17:17:6c:10:95:71:c9:65:e4:73:
57:dd:c9:cc:bf:52:24:61:cf:6b:16:f1:d4:36:4d:
02:47:62:0e:b5:7b:36:f2:be:9e:23:b2:2e:03:5e:
7c:45:ee:32:d0:ec:5d:3b:01:db:68:62:48:d9:a3:
56:89:ca:ba:17:c9:5a:c9:e7:7d:a1:cf:37:2c:d6:
21:55:ec:83:01:0e:db:bf:49:33:a0:e3:a5:78:70:
32:68:0a:e3:0e:48:9b:ca:cb:75:df:64:6a:95:cb:
18:14:88:3a:e2:59:c8:86:0c:a3:cf:40:1e:2a:f6:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:62:A0:CD:51:EF:48:32:B1:79:25:F4:95:63:01:A8:9B:B4:E0:30
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6f:09:fc:0d:e7:fb:4e:fa:d9:03:c0:eb:42:a6:d9:97:2b:
87:99:47:7a:87:97:7b:95:18:1c:80:5c:14:ed:1c:58:80:7e:
44:6e:ca:26:0d:29:c0:95:00:b1:d4:83:90:f5:f3:60:59:b3:
9f:a8:55:a3:4d:63:0b:34:32:9d:46:7d:32:28:cb:30:88:e1:
00:59:ea:ab:9f:70:19:e0:96:71:8c:07:85:48:76:77:c8:1d:
78:9b:7c:56:f6:f7:84:f9:32:bf:5c:c3:ba:d2:31:b6:6e:45:
d0:78:08:b4:29:7f:2b:54:26:65:0b:8c:1b:59:52:dd:9d:b3:
31:1b:89:da:5f:a7:02:5f:55:56:bd:e2:69:fe:62:c3:1f:97:
99:0f:40:65:b9:23:cb:52:2d:62:fc:c1:70:85:98:cc:71:10:
ba:3a:8d:39:d3:f0:dd:56:96:68:67:a3:f9:ce:c1:dd:a1:5b:
58:a0:85:06:5a:a9:74:1b:c1:e4:1b:46:24:4e:53:f7:24:f3:
b1:57:a2:1d:26:a3:5e:9e:bd:b8:39:2f:ff:c1:04:26:d5:ef:
9e:33:6f:ad:0b:9e:02:84:54:49:6e:85:75:c1:74:eb:ec:97:
28:62:a3:e5:11:b1:06:51:82:62:ef:2d:03:cb:33:62:86:2d:
a3:75:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:45:16 2025 by rpki-client