Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: Z5dnReVr+t3hM4nGqa8ADTj2L8hKsX0rwfPcOimRZpU=
Subject key identifier: C9:97:67:C0:28:14:D5:59:27:19:58:80:82:CD:7C:BA:56:FE:3F:B4
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 0199FC8F6EEF1E7245D63107D9A3C8BAA55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: v/BrFIPqnqAVFlPqVg40B/znW4i5d1thSnDpHfx/m1c=)
3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6e:ef:1e:72:45:d6:31:07:d9:a3:c8:ba:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=c99767c02814d5592719588082cd7cba56fe3fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:a9:ce:fa:af:39:a9:dd:08:91:00:f0:20:
2a:fe:b9:4d:0a:86:d8:c8:65:b8:49:3b:5c:21:ac:
3f:7c:eb:7c:b7:f7:01:c5:44:c4:4e:4c:ec:3d:d5:
2f:a9:4d:1f:bd:f4:78:0d:e4:50:ff:5f:e8:3a:e4:
80:b3:45:cd:02:7b:c3:60:8a:c4:cc:bb:6b:0e:44:
30:eb:65:49:6e:f5:61:81:7d:ed:59:8b:9c:39:20:
ca:dd:59:8a:9b:3c:81:29:36:e5:29:9c:68:1c:ca:
2e:3e:72:96:32:e0:1a:d3:fb:58:67:d9:99:f9:a0:
97:85:35:23:7d:6c:72:e7:0f:d3:c9:d6:ef:6f:3c:
87:36:16:83:45:d6:d0:bd:15:7a:ed:1d:be:21:d1:
0b:be:cc:44:76:4c:bd:61:b6:00:91:ca:e6:ee:5d:
d1:4a:0d:bc:89:32:e0:ae:20:a5:e6:a5:43:d9:37:
3e:91:25:9d:b5:f6:05:e1:0f:11:4c:26:e3:8c:77:
5e:b4:71:6b:b1:64:73:43:87:ba:73:e8:6e:f1:57:
0c:5b:5b:22:c0:f5:b4:d8:69:e7:42:e5:54:47:fa:
80:cc:3b:e3:dc:13:84:13:9e:15:fa:22:32:5d:88:
46:b1:29:2f:bd:12:64:ef:b9:65:69:1c:70:dc:68:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:67:C0:28:14:D5:59:27:19:58:80:82:CD:7C:BA:56:FE:3F:B4
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ba:5f:58:a5:2b:6d:c5:b1:4b:85:16:ff:04:12:13:7a:7b:
73:cf:14:a3:32:e7:7f:43:4a:79:53:87:0c:a5:47:9f:07:7b:
c9:33:89:73:cd:66:ec:d5:f4:e0:05:83:b5:04:59:2e:bd:0e:
bb:39:48:68:8b:39:53:e5:5c:91:00:62:6b:36:2f:f4:22:f2:
19:60:e7:e5:55:d9:6f:73:86:8e:c2:5a:8d:af:64:87:e5:7d:
8a:03:36:20:33:ad:15:0c:cc:4a:46:ed:9d:ab:a9:a9:4d:b0:
64:d8:4e:82:54:04:d0:56:0c:d1:2d:9c:f0:fa:cb:34:d5:76:
ff:b5:ed:eb:27:ca:05:bb:64:3e:67:23:d6:35:b3:e9:39:18:
bc:4c:dc:35:9e:91:38:d1:97:9e:87:80:36:0c:c1:da:03:99:
fb:e6:09:89:f9:d1:14:cb:b0:ed:e7:19:53:e2:28:e2:60:49:
97:79:74:d7:19:22:f0:22:0e:09:54:0e:f6:6b:81:6c:c5:0a:
5a:ac:94:52:b9:bc:fd:fc:d8:49:d4:3b:a9:c5:d8:d2:d0:0b:
1d:2e:59:68:c2:02:d3:03:0a:7e:60:e7:20:c1:28:1c:68:0a:
18:f4:69:03:98:a4:79:7b:13:07:cb:66:db:34:09:03:69:2c:
f2:d6:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:36 2025 by rpki-client