Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File: C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier: 53CudBg7ifosZKBWV4/BPEgHTakwuBtTITF5vaSD6Ng=
Subject key identifier: E8:8F:D6:30:1F:39:BA:0E:A3:14:7A:2F:22:BC:05:90:5F:D2:C2:0A
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 019A503E2983F8050F12BF0F0BCCE63080AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 19:00:42 +0000
Manifest this update: Tue 04 Nov 2025 19:00:42 +0000
Manifest next update: Wed 05 Nov 2025 19:00:42 +0000
Files and hashes: 1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: +5MiGnpNMBzIQdOGNOd5CDJAdLBFdkDZngcGpg8irOg=)
2: zmy93HOVaR95SsJ_nMqWvP0tGkI.roa (hash: CpAhgA9BKzHDj13uVF86y4qqslsHctpwgNDLQY2WnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:29:83:f8:05:0f:12:bf:0f:0b:cc:e6:30:80:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Nov 4 19:00:42 2025 GMT
Not After : Nov 5 19:00:42 2025 GMT
Subject: CN=e88fd6301f39ba0ea3147a2f22bc05905fd2c20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:3b:db:40:31:14:01:69:16:ce:58:60:bc:
84:dd:71:82:93:fc:8e:f2:58:01:4a:08:c0:ec:bc:
2a:03:b2:b3:fa:a9:50:75:a5:2b:6f:d8:e1:1e:4f:
29:e9:67:61:c2:e4:7c:34:9a:e9:4b:eb:cf:c1:ac:
1a:34:74:1b:ef:13:3a:2d:c6:3e:f5:17:14:cf:0d:
aa:dc:e0:38:4e:fc:83:78:22:3b:2b:d1:22:33:ab:
b5:97:45:52:65:cd:c2:fd:85:02:55:3b:16:84:54:
f6:35:8c:80:6b:92:fb:87:2b:13:bd:0f:8d:59:d2:
2b:d1:9d:04:4b:26:e8:8c:ae:45:00:26:ad:2e:5f:
d5:82:d4:71:ad:98:76:8e:c0:6b:19:68:31:c9:7d:
48:fb:0f:be:b3:9c:d9:35:db:9e:1f:9c:07:2a:98:
d5:21:f1:2e:d6:4f:58:a4:04:af:cf:95:62:fc:8a:
75:fd:a6:66:12:57:8d:11:9c:fc:b0:d8:78:88:ed:
cb:8f:a3:c3:13:ed:98:47:c2:a3:88:30:b9:38:49:
25:48:41:68:04:0e:03:f5:f5:06:bf:52:ff:e7:61:
27:ca:f1:4f:46:52:1d:f8:23:62:83:fc:e4:77:be:
c7:c5:b3:e5:c0:31:32:d8:55:d1:1e:03:ba:77:4e:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8F:D6:30:1F:39:BA:0E:A3:14:7A:2F:22:BC:05:90:5F:D2:C2:0A
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8f:1b:ad:af:c5:30:2b:e4:37:f4:d0:c5:d6:a5:b1:f9:e8:
53:f1:a4:b7:d3:59:4c:9a:b1:0f:ec:0e:95:76:e7:fc:80:c6:
08:0d:c0:1c:f0:cc:74:b6:15:9b:04:6d:ae:cb:2a:8e:40:a5:
b5:f1:e0:2c:96:9d:33:41:30:8d:ea:dc:80:a1:bf:d5:a1:9f:
ea:5f:72:ff:39:ec:b6:c7:47:7a:96:f1:b8:51:dc:4f:d2:73:
d8:ea:56:3e:d9:97:b2:7e:8f:a7:82:fb:27:fb:ea:a1:9e:74:
74:84:df:67:89:f1:8f:58:20:4e:d0:3a:a1:19:0e:0d:88:9d:
f1:1e:25:3f:c1:9b:52:7e:61:a2:94:d5:02:04:5d:63:2a:20:
e6:6c:55:17:26:a5:f8:0f:4e:48:19:a0:e4:32:1c:10:c7:92:
64:76:04:85:8b:54:16:b9:57:9e:ec:36:7b:ab:10:7e:d1:7b:
82:e1:c6:28:87:af:50:1d:d7:a8:76:68:28:09:e5:1b:2c:d0:
bf:87:b5:ab:a9:e1:06:c3:d8:76:b0:fd:13:72:d5:fe:2d:14:
c1:da:47:3d:14:ff:01:67:38:2b:d9:0d:46:8c:33:b0:83:e8:
4c:ea:cf:e4:f6:47:79:29:a0:5c:8c:ec:96:18:d7:f3:ba:b4:
86:32:71:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:11 2025 by rpki-client