
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: ew27i/5mWEKS1yq5QEqQbyXBjt5gBOEUZoewjOYNHBk=
Subject key identifier: 4F:08:73:16:C6:A6:EB:93:CB:AF:98:38:46:1F:A3:A8:7B:31:4D:E0
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 0199FC58BA4C07A48DA92EBF6489073C726D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 06E8
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: I35QWc2nLFeohwH6DngqA3KZZFg.roa (hash: aZgBsm07l1h8BIWKajFFEnRBCv4q5gOkXWvMXnSlf3g=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: F5ICn/mlqTk1iGkJ8zRW0btm4IRLI/2r5UfEVV/ZGDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ba:4c:07:a4:8d:a9:2e:bf:64:89:07:3c:72:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=4f087316c6a6eb93cbaf9838461fa3a87b314de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:9e:38:25:df:85:1a:33:6e:e8:fe:bf:b0:
ed:2b:c1:b2:a9:e7:7a:32:3e:6b:a2:39:3b:07:61:
41:02:d7:c5:41:a0:ae:88:6c:2a:1a:47:70:7f:b4:
fd:ae:ba:b5:cf:db:50:58:40:6c:45:c1:36:2c:f3:
71:51:2d:98:3a:a0:0f:27:bd:a9:29:70:c2:e7:58:
d8:36:88:11:ef:9f:67:d5:19:c2:6a:2d:e7:35:8d:
5d:b5:e1:58:6a:f0:e6:74:f6:bb:cc:97:f2:56:fc:
8b:66:4f:4a:dc:a7:1b:36:88:b1:2e:f8:8e:9a:9d:
b0:20:62:c2:b6:e4:5e:96:6d:cc:06:40:4e:ac:58:
3e:d1:0b:e4:c7:bf:7f:db:b0:81:4a:4c:e8:11:3f:
29:c5:c8:1c:41:08:a1:2c:15:82:2b:b9:2a:65:71:
83:9b:44:90:84:4d:12:32:69:52:91:3f:7a:15:8d:
39:c1:af:d2:b7:2f:73:21:a7:17:1c:0c:42:cd:15:
26:a7:fd:97:35:ec:0a:37:54:08:cd:07:90:e2:71:
b4:3b:7c:bb:db:17:0e:69:bf:16:13:7f:05:1d:09:
72:fa:e8:b9:aa:6d:8b:4e:b8:15:cb:0b:9f:f6:3d:
0c:f6:bf:5f:86:95:77:31:75:6b:88:cc:30:95:36:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:08:73:16:C6:A6:EB:93:CB:AF:98:38:46:1F:A3:A8:7B:31:4D:E0
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:9d:64:ca:e4:18:8c:bf:f2:7d:c2:0f:0a:54:5b:56:29:11:
39:87:36:69:16:ef:cd:83:08:fa:5d:3f:f9:97:29:b9:8f:ba:
96:ee:9a:f4:72:5f:09:d6:ec:bf:d2:54:4c:1e:5d:de:66:40:
dc:8e:04:d2:51:67:f1:3d:86:87:0f:22:ed:55:39:15:8f:f6:
30:e9:b6:39:89:ad:94:57:d5:d1:0b:3d:43:e8:57:f3:9e:6c:
57:b9:2a:be:ad:32:47:cf:35:c3:53:49:2a:b3:34:92:13:d0:
77:1e:b1:fb:a0:89:8e:5a:68:39:1f:41:91:1f:0f:d3:fe:20:
22:37:26:e2:9f:da:92:c4:57:25:d8:95:d1:14:c3:af:bc:63:
00:c4:b9:a9:a7:30:d2:8f:5c:5b:e0:ae:50:87:13:fb:9b:9a:
b8:83:6b:ab:4c:f3:fc:3c:d7:05:5e:82:c6:0d:60:18:7c:9d:
64:88:01:da:54:76:65:d7:f7:33:9e:50:96:b8:32:b2:2d:11:
47:a8:ac:9c:1c:39:fb:98:7f:cf:eb:77:5a:3e:ea:95:08:f8:
db:d1:d0:e0:a7:60:47:2f:91:42:cf:d1:6f:9a:1a:bb:1f:88:
e4:27:bd:27:1b:66:ef:59:d7:04:29:df:d6:3b:a1:2b:cd:c8:
01:d5:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:22 2025 by rpki-client