Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: dRiNgOO01TVRamLhIGk4zXFWmxNau6vLuPSQm77wY2s=
Subject key identifier: 5F:A0:9F:40:EF:A6:3E:50:CF:D1:9C:B3:85:C4:5E:7A:A5:A6:06:ED
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 019A50E3BD39B51171D83A4C3FA45A8351B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 22:01:33 +0000
Manifest this update: Tue 04 Nov 2025 22:01:33 +0000
Manifest next update: Wed 05 Nov 2025 22:01:33 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: s7UGWvwUr1xFVzMv5co1Hj4PZk4TvGZEGmKK0IbTmRE=)
2: XITchRD6fktx1wcD-akQf-lrx7Y.roa (hash: n2NJUWPmQKH808gxYEyCrRDNlUi5MnimQGzfm9J+OVg=)
3: gZLT5wUedCmW-PX2sDiQAVKNuT4.roa (hash: Bsg9vymR2URZ/xLntFSerTzkFFeEBNsWgx7gYqyDMPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:bd:39:b5:11:71:d8:3a:4c:3f:a4:5a:83:51:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Nov 4 22:01:33 2025 GMT
Not After : Nov 5 22:01:33 2025 GMT
Subject: CN=5fa09f40efa63e50cfd19cb385c45e7aa5a606ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:33:c8:07:84:a2:34:cd:f3:6c:2f:85:0f:
8a:df:f8:fc:4c:2d:93:57:7c:db:44:bc:46:2a:20:
4f:2d:21:b3:d2:7d:2c:04:a2:d9:35:3e:b5:75:22:
b8:91:3c:3d:1e:e2:a6:80:ff:6f:3c:cf:6b:a3:b0:
38:74:a9:4e:39:76:3a:0b:30:7c:ec:d9:8d:ed:64:
31:58:bb:6b:0d:f1:a9:9e:66:fc:bc:af:3b:7e:ea:
b6:2e:5e:cf:7c:74:62:9f:41:15:09:3a:22:e8:91:
d7:ec:cd:15:ef:29:fa:c8:e5:54:08:69:cd:57:72:
d1:84:f8:f6:f9:03:aa:dd:61:c3:c6:50:82:7c:17:
29:2a:c9:0e:0d:d5:5a:9b:cd:0a:c3:ac:f0:e7:34:
c9:93:bf:3a:97:58:ec:78:f7:e7:62:a7:14:dc:72:
3b:3d:42:ec:fe:f8:b6:6f:a0:66:5e:8a:06:04:b4:
4c:74:2f:9c:57:82:f4:6a:b7:31:a0:11:a1:b1:f7:
4b:30:98:c7:d5:16:b6:d7:2a:f6:4a:05:6e:de:bb:
6f:f1:90:d8:7d:a9:68:d4:25:45:bb:87:e0:ef:4a:
28:f2:60:06:47:f4:db:63:0f:8f:39:94:94:2f:cc:
b2:ac:96:f1:91:37:6e:a7:5b:d4:6d:0e:cc:bb:0c:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A0:9F:40:EF:A6:3E:50:CF:D1:9C:B3:85:C4:5E:7A:A5:A6:06:ED
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:80:32:15:8b:cd:21:3d:38:90:b3:ab:61:21:e1:aa:e6:99:
5b:07:6b:7c:29:2f:dd:6e:e5:0f:78:6e:48:b3:3f:da:da:99:
e1:51:41:6b:b3:43:39:89:26:fc:54:fb:d7:88:c4:38:1d:96:
f3:6e:ad:a3:bf:6c:95:c3:68:b1:0c:17:f1:e4:77:65:57:d2:
8d:5c:2d:93:9b:82:ee:d2:ed:9d:e1:b1:53:08:f4:77:98:41:
2b:d6:93:fe:19:0e:2c:18:08:ad:1b:e2:67:b1:65:e9:82:95:
a3:d6:fc:16:42:29:12:ff:44:bc:8e:43:16:1d:96:6b:1b:7e:
88:ce:88:a4:36:5b:4d:12:01:c9:7b:a8:77:63:d5:f3:c1:3a:
f4:44:30:ea:89:2f:f8:bf:14:3a:e1:6e:94:22:bf:cc:3a:75:
f1:d4:50:07:3f:54:fd:92:a1:60:c5:d2:af:ee:29:80:2c:a0:
a3:de:ca:b8:ca:81:42:54:f3:d5:e3:eb:ea:a1:ab:25:db:44:
e0:81:ba:62:7b:29:7b:ab:6f:19:a2:55:2d:35:3a:33:e8:0f:
9b:d1:76:d2:7a:f9:64:92:4e:6f:1d:57:dc:b6:52:c3:80:07:
05:c9:b7:60:c3:92:a4:68:55:93:1e:b9:d2:ca:47:f6:f0:67:
c4:07:c3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:31 2025 by rpki-client