Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier: VQiLUTf5pMWhQpmAHj5TUsI+GIKekL8fCgx30Jnfks0=
Subject key identifier: 22:0E:78:0D:B0:6E:57:6F:78:E2:44:E0:42:D6:C5:8D:2D:89:48:BC
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 019A53E3F66BC09185FF82968709E878379B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number: 0EA5
Signing time: Wed 05 Nov 2025 12:00:39 +0000
Manifest this update: Wed 05 Nov 2025 12:00:39 +0000
Manifest next update: Thu 06 Nov 2025 12:00:39 +0000
Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: NXnnI3YtvdcpzkHHNuRQdu6wsjzwDD8BUs8nblkb8tc=)
2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:f6:6b:c0:91:85:ff:82:96:87:09:e8:78:37:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: Nov 5 12:00:39 2025 GMT
Not After : Nov 6 12:00:39 2025 GMT
Subject: CN=220e780db06e576f78e244e042d6c58d2d8948bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:92:c2:f4:78:46:16:f1:48:40:dd:50:b2:
7e:b6:9a:d4:35:c5:63:e9:0b:67:7e:16:00:6b:25:
c1:86:d1:fa:ee:5e:1e:83:d1:8d:5a:41:5e:29:b5:
bb:14:27:30:70:9b:c9:85:de:8d:da:5d:7e:fd:28:
11:64:cd:32:a0:28:96:56:25:35:02:b5:dc:c6:a3:
38:12:de:86:a0:99:92:26:06:ce:0a:f9:d3:2b:ed:
46:a5:fa:39:ce:f0:68:9f:3c:ae:d6:5e:38:9f:7a:
6b:d4:dd:3b:c7:02:43:38:10:ab:d4:85:6e:66:70:
1a:b8:62:e4:44:59:ae:3a:55:26:ab:4f:25:29:63:
1b:dc:7e:00:44:24:55:58:ff:1f:71:f2:a9:e8:25:
3a:4a:c1:32:95:c6:53:91:ca:f6:b6:1e:db:e6:23:
56:5b:3f:7a:aa:8f:5e:1d:33:61:e9:f0:3d:05:d2:
88:4d:85:88:5c:7d:9d:19:4a:c2:92:86:be:a4:df:
a5:90:41:c5:3b:17:3b:58:60:2d:77:75:98:f7:8c:
a9:68:f1:65:5e:ac:8c:bb:96:e4:9c:f8:59:08:39:
71:44:4e:63:c3:9c:14:ed:c3:e8:89:0b:e4:cf:52:
d7:f7:ec:17:53:ed:a7:ff:f3:3c:73:ec:1e:84:36:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0E:78:0D:B0:6E:57:6F:78:E2:44:E0:42:D6:C5:8D:2D:89:48:BC
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fd:b6:5d:34:12:65:9f:4f:92:cc:58:b6:7a:1e:b9:42:19:
67:35:18:b0:99:a4:77:74:45:5f:e1:d9:58:01:fb:c2:1d:1e:
4d:cd:2c:59:f0:16:15:76:fe:8d:c7:36:a2:88:7d:83:1a:bc:
fa:5c:69:4f:6a:23:a1:1b:62:05:82:9c:42:b7:b6:3a:74:ee:
dc:35:2b:c9:1c:5b:7c:1d:28:bc:55:a5:8b:a0:3a:d6:14:c1:
f9:0f:cf:5b:bc:1a:6f:ce:a1:38:b8:b2:42:58:9c:13:6e:71:
0b:c4:37:e0:d3:10:88:50:8b:2d:e3:45:bb:b4:9a:c1:4a:45:
ee:3f:5b:84:8f:23:d5:35:0d:36:2a:5e:e6:05:f6:a8:4c:a2:
98:81:48:39:df:97:d5:c7:24:e7:86:5c:13:d2:a6:c4:a7:98:
74:09:18:69:68:8e:92:6b:1f:c7:cb:78:87:e6:80:18:93:ec:
b6:de:22:f6:f3:76:df:16:72:39:c7:ce:9d:a5:a9:18:8c:e1:
20:32:70:61:2e:67:a6:41:14:87:a6:ff:ef:e1:b4:b8:5d:e7:
f4:e4:96:28:f9:36:dd:9b:48:a9:8f:2a:96:41:f3:1e:9c:3e:
22:30:93:dc:15:e7:2d:02:23:bd:15:23:8e:2f:5b:a5:63:51:
5b:80:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:19 2025 by rpki-client