Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: tMBzxI5XkcSbWzunE3B4JDFaluTjp265Kfcj6Hg36g4=
Subject key identifier: AA:E9:33:12:2A:FC:60:46:0E:41:0D:46:56:3E:14:8E:17:3F:33:11
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 019A50748C126DD1971C22C0F6ABD6099A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:06 +0000
Manifest this update: Tue 04 Nov 2025 20:00:06 +0000
Manifest next update: Wed 05 Nov 2025 20:00:06 +0000
Files and hashes: 1: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: rDgWAI0Ir6pELQVAyMI5TxNaTXGiJjXXCv7RnpOKwsU=)
2: oMIi1pEOv1jeJYH_D8-bsx7eN14.roa (hash: L6yUeA60s1oezRJ3/Hwo53eHZ4mzV9eSXG/AVf/FB4E=)
3: ylHfNJxivzSDEST10fWDem7vKnQ.roa (hash: A5nWEbRO5hkEAdJU6Q2r7yPo+a47nvfcEeJhbXc7xME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:8c:12:6d:d1:97:1c:22:c0:f6:ab:d6:09:9a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Nov 4 20:00:06 2025 GMT
Not After : Nov 5 20:00:06 2025 GMT
Subject: CN=aae933122afc60460e410d46563e148e173f3311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:b6:4e:f7:9e:cd:44:7e:48:f0:6f:29:95:
5c:5b:c1:ce:0a:87:16:10:e2:fe:bf:7e:26:1d:79:
e1:ee:8a:73:23:a5:7e:ca:96:e2:8e:3e:e1:7f:4b:
6b:9e:ab:8d:d1:ad:0d:06:96:27:c3:0b:04:bd:5e:
f6:11:0f:06:ad:a2:d2:43:9d:98:4a:81:5e:23:f8:
48:62:44:41:f6:f0:30:80:ec:3c:a0:31:a0:ca:f9:
57:c0:7d:09:a5:8a:4d:75:f3:4d:e3:22:ad:21:95:
65:fb:8d:13:6a:80:f4:ca:f5:5b:4c:98:46:de:85:
9e:33:42:d5:13:0e:e5:d4:c1:be:21:58:3e:a0:d8:
7b:f5:78:c2:1f:d5:53:9f:88:4d:51:c2:3f:46:87:
a2:24:0b:5f:e8:e2:e3:31:96:85:6a:61:8c:f1:09:
19:4d:b5:ed:71:d4:a6:d6:9b:cc:1b:d3:87:a4:d9:
06:2d:be:ae:0b:55:8e:f2:c0:11:3a:1d:81:bb:ae:
1b:b5:6e:17:10:97:8e:27:46:e3:30:01:4a:a9:d3:
51:58:e5:f1:cf:dc:14:b1:04:b9:2a:c5:56:fa:95:
2d:7e:17:25:4a:9b:50:64:ce:9f:bf:90:e8:5a:d5:
51:42:23:bb:0a:fd:2b:64:0b:82:b6:1d:42:fa:fd:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E9:33:12:2A:FC:60:46:0E:41:0D:46:56:3E:14:8E:17:3F:33:11
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4f:a4:64:a1:45:d0:64:66:03:1c:87:c3:65:06:2b:cb:37:
64:77:2a:f6:8a:92:3f:1a:05:f2:0a:fd:62:9f:f3:57:d5:e0:
b3:44:ac:50:06:7b:af:94:1c:3c:5c:d5:7f:13:3e:67:f3:3e:
21:4c:5b:cc:91:5d:46:a3:5b:82:12:62:c1:0b:5e:de:d3:12:
f4:0c:f9:42:5a:97:7d:65:33:44:e1:e5:59:8c:2c:ee:a0:eb:
75:38:44:5b:ec:93:89:5c:72:3d:4e:be:7d:1e:ef:82:11:fb:
7a:30:d0:85:de:11:84:ae:b0:49:50:e3:1a:12:9d:bd:5a:d6:
8d:93:ad:ac:fd:05:8e:98:1f:63:1e:08:37:ae:6b:82:48:07:
f4:69:aa:13:a3:8d:81:60:b1:d0:15:5f:02:8b:d3:51:e7:d4:
30:fb:2d:85:e6:fd:66:24:4c:8a:f8:f9:b7:1c:8d:5a:c0:e8:
bb:b1:db:65:55:96:d2:09:0f:29:01:b4:e4:1f:83:39:cc:95:
11:9f:24:37:65:9d:56:10:64:03:3c:80:1e:aa:61:b3:1a:50:
69:bd:e4:6e:27:f6:03:cb:69:7b:61:01:38:6b:07:c6:ad:e6:
31:c6:27:28:67:2d:23:88:c1:6e:19:1f:25:2a:c6:37:9b:07:
11:0b:0c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:49 2025 by rpki-client