Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: OwmxqB89XeAuAi8I9epNCMppR6++/t9haOv7ggCKKJ4=
Subject key identifier: 50:0A:96:B2:F9:FC:A3:D4:10:26:33:F7:9D:0B:4B:4B:2D:5C:B1:67
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 0199FE47004D2DE58C1BA9891C22A83B4951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 21:01:29 +0000
Manifest this update: Sun 19 Oct 2025 21:01:29 +0000
Manifest next update: Mon 20 Oct 2025 21:01:29 +0000
Files and hashes: 1: 7wYbQJjmUZJ3jrCYQep7ej1ycX8.roa (hash: gX6AQ4uDUscH9HZMwyFhtSxb+YXiJVmytGAK7BhRx4Q=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: IRH1HEEpBHJEHUhPlltz7X9Lnp5eH54E5k0H9uEV/kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:00:4d:2d:e5:8c:1b:a9:89:1c:22:a8:3b:49:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: Oct 19 21:01:29 2025 GMT
Not After : Oct 20 21:01:29 2025 GMT
Subject: CN=500a96b2f9fca3d4102633f79d0b4b4b2d5cb167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:56:4b:01:d2:5a:f1:b5:51:35:2d:83:1e:
d2:bc:ec:23:6b:15:00:30:d1:70:31:24:01:cd:7f:
2f:5e:6c:a2:4e:3c:53:8c:ec:ae:df:b2:f3:8d:c9:
d5:11:f1:74:ca:7f:2b:b7:59:e4:71:be:f5:9f:5f:
d4:1b:e7:dc:ac:50:ec:41:5c:8d:8c:5f:10:24:4e:
a2:41:00:59:d0:bf:41:49:26:af:ad:4b:10:0b:9a:
c4:33:d3:5b:11:fe:49:88:b7:c0:b4:41:32:82:16:
65:0d:98:5d:f0:94:33:72:74:c8:9e:a6:05:48:7d:
82:97:cc:78:01:d7:28:6c:87:62:5f:fa:59:7b:a9:
e7:6c:d9:c6:71:5f:06:75:81:4e:d4:0d:ce:27:59:
11:aa:71:57:25:e3:cb:de:a4:b0:87:7d:33:34:34:
2a:85:0f:e8:3d:d0:27:2b:5a:60:8b:7e:4a:da:4d:
75:8c:7a:0d:85:7d:a9:57:f1:cd:0e:03:e1:95:f4:
94:26:27:0b:92:de:0d:1b:c1:fb:45:df:7c:3e:bd:
fe:31:e9:65:a7:88:c6:60:d5:e4:d0:d6:7a:50:21:
dd:e7:0d:15:90:44:96:c2:78:09:10:04:a3:52:ec:
91:82:42:55:5e:bf:4d:fc:c0:32:8b:25:ff:f6:0a:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0A:96:B2:F9:FC:A3:D4:10:26:33:F7:9D:0B:4B:4B:2D:5C:B1:67
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d9:65:ae:7b:53:91:52:c6:19:36:eb:b4:c6:7a:45:fe:29:
96:8f:26:84:3c:05:4f:99:11:1a:0e:a3:c0:d6:a8:7d:fe:e5:
6f:d0:e4:bc:1e:79:15:fb:ad:75:fa:3a:63:ff:26:cc:1a:ba:
0c:06:17:87:76:d6:68:11:fd:a4:09:b8:20:24:94:80:c0:39:
36:5a:5a:29:8d:5c:bb:47:1e:29:25:3d:6a:e1:2e:6b:d8:53:
15:d0:2f:48:61:03:5a:1b:43:6b:4e:7f:4f:47:ad:ce:11:01:
3b:e3:3b:bc:6e:e3:81:70:3e:f4:42:eb:67:b7:9c:c5:f1:41:
0a:9b:c3:4f:5d:9d:6f:d1:01:af:ed:47:81:41:ee:7f:19:48:
ce:a4:95:5a:75:f6:a1:5a:d7:22:5b:a3:b0:59:cf:d9:f5:38:
13:fa:33:2a:04:0d:04:3d:9d:82:89:92:3b:4b:95:bf:66:44:
8d:4c:94:44:a5:b6:19:d2:d0:d4:a7:4e:a3:a0:d2:b9:09:ca:
c1:0f:eb:32:f6:4f:ae:48:d4:ee:ce:d8:f8:be:ef:36:89:8e:
ce:53:94:c9:57:9e:43:31:ca:c9:dc:67:a6:28:79:9f:ca:36:
18:96:d6:75:dc:ff:dd:64:a5:50:2b:40:f0:e6:67:e2:41:d4:
1e:1a:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:12 2025 by rpki-client