Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: LeZ/wF45U0d96G+zjordQSHfC//of9T7SjTfc8pCtWE=
Subject key identifier: 8B:52:56:50:57:6E:95:88:E8:F1:E2:5A:EB:B3:C6:36:ED:45:BB:5C
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 019A4F98DAC86C346D49C722414A6CD587A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:08 +0000
Manifest this update: Tue 04 Nov 2025 16:00:08 +0000
Manifest next update: Wed 05 Nov 2025 16:00:08 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: XHHbS7XXYE5B/LXyl34obbeMvQm69PlxxofPs8vgla4=)
2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:da:c8:6c:34:6d:49:c7:22:41:4a:6c:d5:87:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Nov 4 16:00:08 2025 GMT
Not After : Nov 5 16:00:08 2025 GMT
Subject: CN=8b525650576e9588e8f1e25aebb3c636ed45bb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:d6:e9:21:bb:eb:e6:44:a8:df:a0:43:86:
fc:cd:df:59:12:c1:7b:a8:9f:08:03:14:bd:a9:b0:
d4:25:ee:20:41:a5:01:a7:17:a3:13:95:b1:5f:5c:
cd:0e:8c:3b:99:1c:46:7f:67:8a:00:18:c4:c9:38:
90:1f:fd:d5:20:12:b2:20:21:87:2c:af:04:a1:0b:
e2:43:e0:93:77:cc:43:bf:b9:a5:88:30:93:f5:a4:
3e:1f:08:5e:5a:fc:a6:f6:58:ba:af:f8:85:19:9e:
8f:8b:2b:71:83:e9:a9:61:79:5a:c9:24:fc:9e:46:
ca:35:a4:63:cd:e1:81:90:f1:38:cf:a5:d5:e4:5c:
78:6b:ad:a0:5b:46:63:d5:f4:5e:13:c7:76:22:9c:
ef:ec:c6:bc:26:10:a5:00:e2:db:52:ca:e1:27:42:
eb:ed:a2:66:12:b2:02:19:fb:44:77:b9:d1:33:6b:
ab:ef:8a:b4:88:ec:74:b7:a9:8b:a3:a1:51:89:b5:
a5:18:02:d5:81:a9:1f:bf:75:2a:a4:13:9f:5f:54:
bc:f2:94:c6:1d:dc:99:93:72:af:7f:5a:a9:38:83:
b1:86:6a:34:3b:72:87:f4:16:b1:a2:5f:d7:c6:c5:
3a:40:25:87:04:ea:48:fa:87:91:13:15:29:12:f7:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:52:56:50:57:6E:95:88:E8:F1:E2:5A:EB:B3:C6:36:ED:45:BB:5C
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a9:b0:97:07:63:cc:7c:64:19:f2:37:ca:e4:45:6f:36:9d:
5a:24:cb:a9:61:0e:aa:de:2e:c5:66:de:02:59:09:6e:fa:a6:
ac:60:1d:a9:b2:ca:03:39:03:f8:00:7f:48:21:19:8a:c5:f4:
9a:3c:bc:e5:5d:ae:de:19:39:35:aa:01:1e:5c:2b:9d:4e:80:
9c:23:7e:36:6e:ed:38:04:f0:25:52:c7:04:ca:11:2d:0c:2d:
b4:ad:63:49:97:8b:fa:78:c9:72:c2:6b:d9:47:49:65:11:3b:
12:08:77:08:d0:1c:2f:34:b2:25:f8:6e:b0:ab:f0:9d:3e:84:
7c:3e:46:a1:18:03:2f:ed:b0:5d:10:38:9d:10:28:23:54:c6:
e5:6a:6f:f3:46:cc:89:0a:60:a6:2d:60:e0:7d:dc:b6:97:c3:
cd:f5:61:59:e3:d6:07:1e:d5:84:bb:0b:8c:81:29:77:a9:7c:
70:08:7e:bc:06:3c:3a:62:b7:2b:c2:4a:cc:5d:de:9e:ee:3c:
8a:e4:c8:69:d9:99:51:20:88:ee:b3:9c:15:61:3e:d7:8d:b8:
e3:a3:de:84:9a:cd:f4:00:f9:b9:90:fe:f4:85:a0:98:c2:94:
02:cf:d2:7e:50:df:73:be:40:f5:fa:8f:0a:23:31:d5:9d:10:
21:66:d0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:13 2025 by rpki-client