Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: nS/XS8FHWxIsstmg7GfLTsecYc3kvc6+2cepNpg3LQs=
Subject key identifier: D4:FB:88:97:27:7C:9A:33:89:FA:92:1D:45:0A:78:26:7A:C0:5A:BE
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 019A4D73D883FA3307A4D96B552F4350D925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:28 +0000
Manifest this update: Tue 04 Nov 2025 06:00:28 +0000
Manifest next update: Wed 05 Nov 2025 06:00:28 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: tcZJk3M1UrnoJEhsjuXZv3+scOxf979qxkczwo8IjlQ=)
2: h4zrMqfOoefngHFo_c_Z31Wn-uw.roa (hash: rUimB7Pd+YTy8jaYyx7sVXzcYUcWrZdClxDPlBTFsaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d8:83:fa:33:07:a4:d9:6b:55:2f:43:50:d9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Nov 4 06:00:28 2025 GMT
Not After : Nov 5 06:00:28 2025 GMT
Subject: CN=d4fb8897277c9a3389fa921d450a78267ac05abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:c0:04:31:48:06:f0:3d:5e:25:86:e0:04:
eb:c3:35:3b:51:e0:13:44:66:a6:f4:64:11:ca:c5:
e2:93:aa:6a:a0:0f:36:ba:f7:e9:96:27:41:d8:8f:
16:7d:b2:3a:18:28:b2:91:a1:ed:54:57:78:cb:e0:
8e:cf:81:98:82:13:fe:c1:a1:fa:51:be:d0:21:c6:
1e:af:de:5d:b3:1c:5b:21:c7:fa:77:31:c0:a3:84:
fd:2b:61:ce:0c:26:82:65:89:39:9f:d0:61:c9:f1:
eb:04:89:d9:46:72:5f:aa:2e:0c:3a:c7:29:66:b0:
05:1d:e5:65:2a:66:e1:ee:90:ae:88:b3:3f:c1:a1:
f7:8f:e2:67:58:2b:4d:3a:89:30:14:d5:3b:2d:a5:
44:60:cd:da:20:9d:bf:d6:3a:47:2c:22:77:16:bb:
f2:eb:e2:1c:6a:bf:28:de:58:d8:ad:ab:10:02:51:
b7:23:24:f6:60:51:6f:32:e3:a2:7c:7d:5a:02:c3:
37:7c:7f:38:07:bf:c6:6d:8d:f7:9a:94:b9:ad:69:
47:ee:c2:93:ea:7b:1a:f2:0d:ea:1e:7d:cc:45:b9:
55:62:21:27:4a:f9:44:25:2f:0d:f0:75:35:30:89:
16:f9:d5:15:b0:2b:93:40:62:b5:0c:23:58:61:06:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FB:88:97:27:7C:9A:33:89:FA:92:1D:45:0A:78:26:7A:C0:5A:BE
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:33:36:fe:1b:29:cd:ff:b4:05:c2:ec:ee:dd:cf:2b:d0:39:
4d:da:83:5c:98:55:5c:a5:95:7e:d5:af:e1:67:4c:b5:b5:e5:
4a:9f:0e:b1:5a:35:dc:17:7d:26:79:cf:bb:cf:66:ed:12:79:
96:43:e2:8a:67:2f:c6:6c:10:3e:4e:d4:9e:93:bd:65:51:46:
fe:af:e9:10:cb:db:e5:e8:9d:26:f3:26:3d:9b:59:54:0c:2f:
f0:5b:3b:e7:b7:cb:36:72:64:34:db:d7:c3:6e:d8:41:66:6e:
4d:6d:49:7e:3d:48:28:ad:10:bc:49:b0:34:52:6c:62:cc:bd:
85:9f:70:62:f5:25:a1:7f:a5:b5:0e:7c:d1:96:a6:3a:d6:a2:
b0:ad:3f:8c:17:8b:1c:bf:57:1a:79:22:10:f5:96:bc:8a:8a:
d9:42:f5:44:ce:37:39:97:2f:19:c0:51:1b:e3:48:b0:f5:1d:
6a:4d:88:31:77:51:ad:8a:54:d4:fb:fb:6b:37:eb:60:d8:22:
51:f7:56:0f:2b:ec:de:98:b2:66:50:35:41:82:79:1b:f0:75:
25:3c:59:f0:4b:6f:6e:96:77:17:9f:6d:27:be:c8:78:90:a2:
5f:c8:e7:4f:2b:a4:cc:20:84:8b:8b:49:13:63:82:4a:da:50:
af:a3:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:00 2025 by rpki-client