Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft
File: cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft (raw, json)
Hash identifier: f2m9HBr8OB5iD1hT9V65StI3fBqWwJv8Z749bg5CW88=
Subject key identifier: 9B:7F:12:A5:4A:B5:7B:6E:1E:49:79:EF:E7:FF:2C:8D:EA:39:03:D9
Authority key identifier: 70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05
Certificate issuer: /CN=70378e3cd8f3a59bda5233ff6e9a9c99648d7105
Certificate serial: 0199FB4595BF55D3A68F346BB9E9CEA3142B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft
Manifest number: 41
Signing time: Sun 19 Oct 2025 07:01:05 +0000
Manifest this update: Sun 19 Oct 2025 07:01:05 +0000
Manifest next update: Mon 20 Oct 2025 07:01:05 +0000
Files and hashes: 1: cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl (hash: QncgwmGl0+bjTJlXlbatVM/mYbfWrRc8a1n0iFmlXXs=)
2: omvCiSbxGXEhWKYhV7yrIAYOUDI.roa (hash: k4kgxjvCMp/F7A0raOIajUVdScRBgP5O5bB2FqC6UMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:95:bf:55:d3:a6:8f:34:6b:b9:e9:ce:a3:14:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70378e3cd8f3a59bda5233ff6e9a9c99648d7105
Validity
Not Before: Oct 19 07:01:05 2025 GMT
Not After : Oct 20 07:01:05 2025 GMT
Subject: CN=9b7f12a54ab57b6e1e4979efe7ff2c8dea3903d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:75:83:26:95:10:e2:a8:e7:4b:52:e9:08:8c:
21:ca:a6:60:64:bb:dc:d5:75:26:80:6d:4d:d0:a6:
fe:9b:72:59:dd:54:d2:80:9c:ab:6b:f5:54:a9:9a:
cb:f0:ee:98:8a:21:13:4f:1b:0f:6e:46:66:92:a7:
51:52:91:85:2c:1d:02:f9:52:6e:e4:77:b8:70:3e:
7b:97:e9:99:5d:4f:a1:53:b4:29:92:96:9e:78:1b:
a8:4e:16:73:08:c2:89:53:10:f1:74:9c:e2:3c:3d:
c5:a3:98:c3:93:07:90:56:28:c5:5a:f3:f5:86:58:
0b:ac:d2:55:b7:9b:6a:1b:b8:89:c9:0e:4f:d7:8e:
7a:b4:bd:ff:48:d4:0e:fa:1e:23:17:11:52:1c:05:
c5:9c:10:b9:4a:c2:d0:34:ec:02:93:cb:ab:56:53:
95:39:32:4b:1b:c3:f4:69:72:3a:13:6a:f5:70:54:
0d:91:4d:34:72:c6:7f:6a:16:68:0d:d1:d1:76:d0:
17:bd:03:ae:5d:a7:eb:23:25:35:02:71:6c:33:e4:
67:6e:82:8b:c5:7d:82:08:bb:b8:4a:13:ac:ec:69:
e2:c5:1a:6a:34:00:40:dd:48:b7:92:2e:68:c1:f3:
60:97:c1:f4:ea:41:18:d5:34:2f:10:e0:07:60:f5:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:12:A5:4A:B5:7B:6E:1E:49:79:EF:E7:FF:2C:8D:EA:39:03:D9
X509v3 Authority Key Identifier:
keyid:70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8d:32:52:26:3f:c1:6d:ae:49:b2:83:c8:d7:15:e0:69:b9:
64:6a:01:5b:08:ab:54:46:55:f8:d8:db:9d:d9:df:68:ab:97:
96:bb:87:b5:57:0d:78:93:ca:d0:f5:bc:70:7f:4a:24:14:75:
9e:d0:cf:87:2e:d1:af:26:34:a6:82:7f:f7:dd:6f:a1:2c:39:
86:6a:66:ae:43:e2:05:06:9d:84:be:99:cd:19:86:f3:fa:ff:
49:6f:55:6b:6f:36:cd:04:52:c9:98:e9:08:d8:8b:9a:cf:6e:
b7:ca:bf:59:1b:b8:82:cf:37:d0:35:7a:29:a0:bf:2c:84:7d:
0b:65:e1:df:87:da:a0:14:b5:dd:b4:9c:9e:32:82:15:cb:f6:
d3:45:38:88:86:07:a2:59:b7:33:f6:10:70:e0:bd:f5:60:82:
a5:bd:a2:d0:9a:7c:de:84:26:eb:5f:7f:f0:75:34:fa:16:4f:
36:eb:90:f2:11:dd:17:85:43:5d:c3:95:4b:fc:52:42:f6:28:
ad:87:ba:3c:47:c3:f9:eb:2e:d7:06:32:1a:e3:58:c6:39:2f:
c2:2c:aa:af:d4:c5:19:7f:f9:53:78:38:72:fb:66:8a:38:b7:
80:ce:c8:49:81:53:c5:fe:f6:1a:28:b6:94:5e:4a:cb:98:84:
81:30:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:25 2025 by rpki-client