Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: CwaM0vfAg+hg7On0SJYFTas9Ytn3p1U3o45UaZJF620=
Subject key identifier: 6F:45:05:C7:15:0B:DC:B4:7B:4A:6B:14:E5:09:E5:3A:B9:48:F3:15
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019A533FA66618E05214FD377ECF883E0D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 0247
Signing time: Wed 05 Nov 2025 09:01:11 +0000
Manifest this update: Wed 05 Nov 2025 09:01:11 +0000
Manifest next update: Thu 06 Nov 2025 09:01:11 +0000
Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: Abhcy6iQbTUNCw6byeoNbxPa+tXXdN4MC52zyE/Qi1A=)
2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:a6:66:18:e0:52:14:fd:37:7e:cf:88:3e:0d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Nov 5 09:01:11 2025 GMT
Not After : Nov 6 09:01:11 2025 GMT
Subject: CN=6f4505c7150bdcb47b4a6b14e509e53ab948f315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:3f:0a:3c:34:bf:97:18:8b:1a:92:13:33:
e3:ca:30:a2:66:44:3e:05:ec:9e:33:ad:02:0a:b6:
57:4a:80:64:07:b0:07:60:16:4e:44:d9:c2:01:38:
8e:b2:ba:3e:ce:28:d5:84:0f:23:15:2c:ee:d4:60:
9d:3a:e8:e2:db:84:da:55:e8:0a:d1:de:77:5d:76:
cc:9c:51:93:30:10:27:66:a7:4b:f9:05:b9:0d:b5:
8a:8a:ee:bf:ea:89:15:fb:14:88:ee:8c:ab:5f:bd:
ab:61:6d:38:5f:c8:2b:2c:f7:35:94:35:9b:2e:2c:
c1:ff:92:26:4c:0a:36:63:4a:4d:9c:ba:8b:24:60:
67:02:7a:fa:c3:6d:94:99:32:75:60:d1:c8:4c:4a:
ec:39:5e:e2:6d:d9:e2:da:82:0c:cc:b3:1a:32:a1:
4d:c9:3e:83:39:a6:03:53:03:97:53:7c:37:b1:1c:
e3:72:a7:6b:8a:87:73:f4:4a:d2:e9:f5:06:43:19:
ce:91:43:dc:44:6c:4c:50:66:2c:2e:20:ec:46:54:
f4:3b:93:e5:12:3b:20:a0:c0:08:a4:61:d1:ef:7f:
f2:7f:28:70:92:16:3c:f0:d2:1e:6e:75:07:a7:c0:
80:82:d4:75:84:29:17:53:14:f5:a7:1e:8f:79:cc:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:05:C7:15:0B:DC:B4:7B:4A:6B:14:E5:09:E5:3A:B9:48:F3:15
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3c:1f:c8:a1:70:3e:d3:f8:b1:96:c8:80:87:71:ac:5a:63:
08:61:f6:df:e2:14:ab:68:85:6b:60:b0:86:f0:02:af:a0:61:
b1:dc:8f:52:4c:a6:e1:9e:af:88:c9:5e:d5:f5:d9:8d:e3:ad:
51:7a:24:f7:ff:8b:53:cc:31:62:87:63:3c:46:23:fc:72:4c:
03:53:42:f2:7a:19:da:79:6a:74:0a:56:61:13:ff:31:30:b5:
94:b3:10:b5:f9:c0:a9:fc:c4:21:2b:a4:3a:21:b4:e4:05:33:
4c:79:c6:7d:4a:4c:44:ba:60:39:42:aa:eb:80:a1:bc:2a:63:
fa:f7:d3:4c:73:03:1f:af:31:67:51:20:dd:04:c8:3b:e0:c6:
e2:21:d4:9a:88:fc:d6:c2:eb:cd:ad:0e:0f:56:ea:87:42:3b:
99:58:45:9a:fd:d1:e4:1e:5e:c8:59:1f:cf:85:16:58:6c:39:
cd:83:41:73:0f:fc:c6:ce:3a:76:10:b3:f0:33:b6:fe:46:c7:
fc:ac:07:94:19:28:cc:88:8d:be:28:62:af:93:b8:e5:2a:a1:
ea:b3:08:a5:0c:9c:ed:a7:62:48:0d:12:19:71:70:22:d9:55:
4e:a8:4a:7a:e5:ac:67:be:b7:73:87:3f:f1:d2:61:95:82:61:
fa:d9:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:14:54 2025 by rpki-client