
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier: 0np2JyIOmtMBih3tBdOjCIcFJdyFL0yBXhlF5E3Zhag=
Subject key identifier: 6D:87:14:90:0B:45:36:CF:D0:6A:7E:02:27:A6:EE:67:B7:CA:7D:C0
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial: 0199FBEB4D3B40C49716F1CADDD5AB834A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: 2PkYfTx6CdsZl2AYTQ/5Yfzph/yBCECY4cJ6vdUpIKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4d:3b:40:c4:97:16:f1:ca:dd:d5:ab:83:4a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=6d8714900b4536cfd06a7e0227a6ee67b7ca7dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:54:f3:54:7b:b6:92:fa:93:c5:fd:35:4f:
bd:59:70:4d:7a:ae:ab:39:21:0e:75:18:c9:09:6e:
16:0a:9f:07:97:e4:75:ad:1e:cd:f8:a5:ba:bf:3f:
e1:9f:fc:1e:3e:03:7d:f9:0b:a1:b4:6d:c6:fe:e5:
8c:25:43:fd:36:6c:8e:a0:fb:d8:0a:55:b4:10:f4:
30:2d:5f:1e:91:69:61:e9:6a:8d:7c:4d:4c:51:6b:
02:af:b3:47:f3:ee:cb:b8:ce:36:5a:11:2d:60:0d:
00:74:50:51:7b:dd:3e:52:84:df:e0:a5:95:11:c6:
db:43:18:19:b2:16:25:cb:e4:a0:ef:bc:fc:97:b9:
2d:a1:98:80:d3:b0:b4:64:84:86:85:08:ec:3d:1e:
66:25:e6:7d:78:da:45:e5:dc:d4:e4:ba:1b:69:48:
e2:9f:de:e3:40:de:e1:aa:9f:fe:82:95:ff:7e:14:
e9:d6:5d:95:4f:2e:a0:35:0c:43:2c:57:86:d2:5e:
ae:84:89:93:2d:3f:e2:b5:20:be:82:49:e1:bf:b7:
f5:cb:df:e4:b7:a9:df:c0:28:18:e8:d0:76:7c:77:
6a:31:8a:83:fd:5d:83:80:d5:01:6e:13:04:2c:45:
0d:6f:da:20:fa:34:4e:55:1c:88:eb:4c:68:cc:cf:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:87:14:90:0B:45:36:CF:D0:6A:7E:02:27:A6:EE:67:B7:CA:7D:C0
X509v3 Authority Key Identifier:
keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e2:8d:09:0e:99:e6:d8:34:b7:49:23:54:19:f6:2a:54:c5:
b9:17:f8:65:f6:c7:bc:2f:c7:43:44:d0:dd:9c:c0:5c:34:ba:
71:f0:17:66:7a:b7:29:bf:9d:24:b3:97:a8:42:ad:65:ed:a5:
61:00:06:8b:0a:97:28:58:da:e3:e4:39:5c:f7:ff:af:01:8a:
03:a0:31:be:a3:69:3b:79:a2:a0:93:6e:bb:d0:69:15:1d:46:
da:87:f0:57:cd:1e:1c:d2:00:d2:9f:aa:44:9b:92:a7:85:4a:
48:5e:3c:8a:21:0d:c8:8a:8a:05:f9:44:b1:74:32:fa:49:32:
c1:3f:b4:42:6e:c7:3e:b7:2b:e7:e1:f4:3e:57:ad:03:36:00:
d5:94:8a:0c:16:4f:0f:9d:24:c0:ef:6e:78:ae:05:42:9a:ac:
13:08:25:8c:fa:d9:b1:b3:c7:38:da:df:0c:ca:48:e8:2e:25:
1f:e5:aa:0b:44:0a:2c:47:21:08:f3:b3:2e:73:af:dc:8f:67:
15:7b:3e:35:7b:e1:ea:2d:3a:55:c7:19:78:c3:22:13:eb:0a:
8b:95:6f:af:90:0f:69:f0:3c:38:98:ed:32:eb:91:f6:29:18:
c7:2f:83:5f:38:6c:b2:0a:fe:85:10:f8:97:36:c9:cd:66:07:
81:83:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:05 2025 by rpki-client