Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: jIB2H+Q9OcmbDI6b2iOHd1Q7vnRpYie9RlhufNUiUh0=
Subject key identifier: 12:61:E7:D3:EF:29:84:BC:35:A9:C3:CA:87:3B:0C:00:F8:F5:AD:54
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 0199FBEBAAA0B5BB3C26B13DE78AE2B245B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 13BA
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: ThaH5aBTF3aaK1xZ7bzOzQIjyUe4LA2XydxihmF/E4w=)
2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:aa:a0:b5:bb:3c:26:b1:3d:e7:8a:e2:b2:45:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=1261e7d3ef2984bc35a9c3ca873b0c00f8f5ad54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:b5:9f:c9:89:59:3f:0f:e0:84:2d:cb:5f:
73:35:96:db:d8:32:1c:87:4c:63:17:a7:ad:09:11:
c0:7a:1d:b1:b5:84:97:2b:28:79:f2:bb:36:91:55:
82:9f:16:9c:04:8c:b5:31:b5:94:dd:7e:4e:87:94:
d7:01:1b:d5:1e:6a:bc:53:d8:cd:0c:a9:47:8b:2b:
da:bd:59:79:7b:9b:03:6f:8b:27:55:7e:a6:11:a6:
ff:f1:af:09:c5:34:aa:9b:57:95:36:2a:84:b0:ea:
04:81:ff:fb:b4:43:5c:e3:c1:fd:d5:c7:6e:b9:a3:
d1:5d:19:6d:b7:b7:e6:e9:22:b0:66:7d:1b:09:93:
a8:d3:3d:c8:57:1c:5b:f7:b0:50:cc:fb:f2:bc:e7:
47:b4:72:d6:7b:49:fe:9a:30:3b:e7:c4:88:95:36:
02:e1:bb:a9:d9:c2:0c:45:6d:80:30:90:a6:36:e7:
66:69:be:b8:65:25:2b:86:e5:26:61:26:1b:ff:cd:
c7:b6:22:93:39:9f:da:dd:62:15:7a:01:55:49:0c:
ce:a6:e7:c2:ad:92:dd:a7:25:de:f8:21:f2:d3:16:
0c:5c:db:93:e8:01:e7:03:b4:ea:c6:1c:7d:93:1e:
84:b1:0a:e5:1c:43:35:97:b7:cb:c7:f9:e4:f5:cf:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:61:E7:D3:EF:29:84:BC:35:A9:C3:CA:87:3B:0C:00:F8:F5:AD:54
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6d:7b:77:f2:5f:74:e6:14:b9:b8:a9:fd:d4:70:2c:e6:2b:
fc:56:a7:b1:88:4b:3a:fa:cc:b1:e2:ec:6d:fa:00:a9:f1:c4:
84:b5:dd:d1:46:2b:7d:b0:98:5d:19:e7:27:9b:ce:a5:1e:8f:
b2:c9:75:ba:23:33:dd:3c:33:e4:bc:3f:f5:9c:17:95:b5:3d:
ad:6e:d4:6b:3d:69:41:aa:ab:a3:55:8f:4e:ef:d2:b0:cc:c3:
f7:98:d2:f6:bb:59:da:d8:4c:22:16:f9:bb:bb:8d:10:48:6d:
da:7a:66:f3:47:c7:55:8b:8e:7a:3e:95:6f:9e:65:ad:ba:d7:
3c:a3:27:54:c4:13:74:7c:3b:3e:54:67:d7:a6:f5:9c:dd:b7:
03:92:e2:6e:1b:fa:da:20:02:46:87:c5:02:a9:ca:d1:45:a1:
c5:26:02:75:11:61:dc:eb:17:f3:6c:e6:15:32:76:8f:d3:e6:
3f:db:4d:5d:67:4d:43:9d:27:90:91:ed:e2:67:e7:ea:b8:7a:
7c:68:6f:b6:15:49:c9:24:50:b6:7f:88:de:bf:e1:ec:e6:05:
d5:b2:ff:be:ab:31:cb:1e:a2:12:fb:31:d1:aa:01:b2:16:b7:
0c:f8:35:d1:03:8c:52:fd:d0:5c:31:f1:cc:35:28:24:38:21:
6b:6f:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:09 2025 by rpki-client