Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: WInVLhQQ1XYIRvKvAbl2DoKRSOGqKyLtU2WqrFVdGwE=
Subject key identifier: 16:CC:F4:CC:1A:3B:EA:B7:E4:F6:F0:6C:14:10:5B:A0:C4:B8:3A:5B
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 019A541B0AB73C84B2ADEB367CD68BFCF540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 13:00:49 +0000
Manifest this update: Wed 05 Nov 2025 13:00:49 +0000
Manifest next update: Thu 06 Nov 2025 13:00:49 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: 2m4bVKpo+/T8wzeckm99fQk/NhOFSG1wDmJZDbZfWao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:0a:b7:3c:84:b2:ad:eb:36:7c:d6:8b:fc:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Nov 5 13:00:49 2025 GMT
Not After : Nov 6 13:00:49 2025 GMT
Subject: CN=16ccf4cc1a3beab7e4f6f06c14105ba0c4b83a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:9e:a4:c0:13:05:d6:06:6c:4a:14:37:d3:
91:6f:cf:b8:f6:7f:c9:49:8b:6d:7a:7a:08:5d:6a:
10:7d:e9:31:15:4c:0d:50:72:2f:a7:fb:59:38:fa:
81:e3:cc:30:01:d0:44:66:95:d9:80:2d:fc:9c:f4:
e9:5e:b1:94:14:a8:5b:24:e8:d9:7a:28:f4:54:0c:
a7:b4:7a:9a:4f:39:28:30:b5:d5:3b:58:d5:6f:e3:
1c:6e:ac:4b:8e:b4:4f:bd:b6:f6:d1:8f:7a:17:a0:
55:80:b0:1b:07:0d:4f:4c:90:c2:3a:fc:cd:6f:28:
e1:94:56:25:82:76:17:16:86:e5:5a:cf:d0:b8:4d:
2c:8b:a7:a5:f3:01:f4:3e:fb:ce:0c:80:fb:a4:bb:
02:e3:94:cb:cf:7e:3e:4e:a8:cb:8f:cc:7f:1c:0e:
b6:22:61:2d:2d:d1:ed:58:b8:6b:36:a0:91:de:78:
bb:60:ac:4d:98:72:6b:55:3c:7d:ab:6e:0b:27:bf:
f0:34:8c:89:87:7e:15:0b:ea:e3:16:7c:97:cb:e2:
6c:61:c4:40:f7:40:aa:25:ad:44:7e:bc:41:f8:ab:
18:9e:5e:3c:6f:96:ee:6a:0b:d3:63:55:78:0c:97:
4d:5c:b3:04:2b:61:f6:8c:89:82:d1:d1:f9:90:2e:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CC:F4:CC:1A:3B:EA:B7:E4:F6:F0:6C:14:10:5B:A0:C4:B8:3A:5B
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cb:81:08:c5:1d:ec:e5:53:de:eb:19:fa:03:e6:25:f2:99:
75:39:a9:22:65:73:2a:76:cd:5d:0e:30:99:1a:9d:0e:a5:dd:
98:c0:95:8a:23:79:20:a7:85:bc:cf:e8:4f:aa:89:5d:1e:d9:
42:29:38:5f:9d:25:ff:ac:44:55:73:47:8d:98:f9:25:29:d6:
ba:1f:5f:ea:02:b6:78:3a:16:e4:be:55:7d:88:38:05:d8:e0:
8c:5e:3c:a2:9d:8e:96:0a:bc:72:fb:fe:f3:6e:d3:ee:b8:ae:
7a:59:56:61:95:66:0b:00:5c:6d:5f:de:7e:90:f3:bb:74:8b:
73:34:0b:9b:08:6d:06:d2:1c:8c:9f:a5:8c:c2:fc:72:2c:19:
ea:c0:d1:0d:58:c0:e8:32:67:cb:b4:6a:4e:98:fa:80:01:44:
21:3f:25:e5:7f:ba:a7:26:ea:62:10:a6:f6:05:a2:9b:4f:16:
87:d7:c5:51:2e:e9:8c:c9:ca:fe:a0:5f:92:2a:f1:ae:9c:35:
bf:1e:12:b9:d4:8e:43:00:31:c4:7a:c1:57:60:8c:8a:7b:c2:
e4:0a:12:b1:f3:73:6d:4a:b0:90:07:0b:92:7d:91:21:c8:1b:
37:62:24:61:60:91:21:73:0e:86:48:a1:f8:a3:ce:b0:3c:ad:
e1:7a:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:36 2025 by rpki-client