Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: cskldBuG7DUAjnOdGieePl7qRrzpEhpALj4SGPRXBj4=
Subject key identifier: 4C:F8:9F:B1:8C:9C:61:1D:14:34:29:CF:7E:E1:FD:15:BA:00:4E:2E
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019A00A309F271F218B387C12D02933183CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0B51
Signing time: Mon 20 Oct 2025 08:01:16 +0000
Manifest this update: Mon 20 Oct 2025 08:01:16 +0000
Manifest next update: Tue 21 Oct 2025 08:01:16 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: m+B9GplK7KHPOvsRm39o6kLYpb1AKWfvCrvF6JYta1w=)
2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:09:f2:71:f2:18:b3:87:c1:2d:02:93:31:83:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Oct 20 08:01:16 2025 GMT
Not After : Oct 21 08:01:16 2025 GMT
Subject: CN=4cf89fb18c9c611d143429cf7ee1fd15ba004e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:33:af:e4:0d:9d:19:6f:cb:0b:c1:12:a8:
ea:80:0d:e5:d8:b3:a0:85:fa:39:2d:2c:60:e9:99:
81:f6:e3:19:59:dd:a8:70:7b:d0:28:d6:9e:ed:0c:
b1:dc:5e:62:47:ec:bd:ec:a8:f7:4d:ff:09:77:cc:
d4:eb:5f:d4:b6:f6:a9:f7:50:ef:a9:8f:e1:36:b7:
b1:af:87:5a:04:11:79:68:9b:2f:93:5b:3f:ea:04:
6f:be:82:5c:93:95:bd:b5:c7:f3:09:3f:fc:3f:82:
ad:ca:85:de:ae:cc:3f:cf:ec:52:c5:24:9a:2c:31:
5a:e2:0a:ae:10:cd:e5:53:ee:b8:41:cc:62:f8:41:
94:0e:37:cc:39:b5:1b:ef:f7:07:06:99:9a:6e:81:
de:60:8c:25:a4:b1:31:ef:51:5c:08:6e:ac:e1:75:
39:e5:a7:e0:34:c7:c2:c5:ee:60:e0:40:79:a4:5f:
06:72:34:22:80:45:64:c7:d7:4b:52:fe:6a:ca:67:
a0:09:c7:2c:f6:c1:10:5a:7a:c7:de:67:73:ef:43:
81:38:72:21:8d:fa:5e:4a:ad:c4:3b:0c:f0:73:48:
36:3f:25:d8:56:d4:b2:33:73:c1:ea:fc:ff:e7:e7:
51:9f:0a:8d:0e:95:05:3d:ce:b8:c4:74:41:a3:89:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F8:9F:B1:8C:9C:61:1D:14:34:29:CF:7E:E1:FD:15:BA:00:4E:2E
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:99:f2:8d:c3:86:c7:0c:0a:c9:29:6e:b4:1c:33:12:8e:eb:
66:c5:4c:69:c7:88:b5:99:bb:3d:95:a5:bc:33:05:11:96:8b:
8c:19:51:b2:37:a4:76:61:80:0c:b7:b9:f7:d7:9d:11:5d:10:
75:5b:79:ae:87:cc:60:b9:ba:4d:f5:0f:21:93:1b:13:a3:76:
fd:6c:b3:53:fd:aa:5f:01:91:f3:12:da:0b:2f:38:d2:af:30:
16:26:bc:cd:97:27:4c:a5:94:ec:91:67:94:72:09:11:76:07:
ce:c9:63:23:52:df:dc:f6:60:c4:1b:5a:0e:d1:37:bb:9a:8e:
17:a0:07:c4:aa:58:ac:2f:53:5a:1d:33:b0:82:d6:84:59:34:
c1:3c:e1:94:77:50:8d:30:e2:bf:d6:ba:17:42:29:19:5d:73:
43:50:7d:f5:51:b2:2c:7d:79:d9:61:c1:53:e9:82:7b:73:21:
f7:f3:e9:21:34:1a:c0:5c:0b:72:25:e5:94:02:e4:19:32:54:
73:e4:b0:c9:41:64:ff:a0:ac:4e:7b:b3:02:1b:7f:e6:f9:42:
5d:16:d0:1c:19:09:00:6f:ec:4f:ac:48:7b:d1:cd:f2:15:37:
ba:60:c9:1e:ba:65:41:dd:d8:1f:03:fa:0c:d5:fe:16:c7:94:
d4:1e:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:44 2025 by rpki-client