Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
File: cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json)
Hash identifier: ojVrBoQT+ux/UZYWATNxJbRnJSbS46OI57NSwPLEwLY=
Subject key identifier: 8C:7F:27:A3:BB:73:6A:CD:4D:FB:E2:76:05:75:00:AA:87:2F:82:AC
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 019A00356EC8F5E8060FBA24573E121CA883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 06:01:32 +0000
Manifest this update: Mon 20 Oct 2025 06:01:32 +0000
Manifest next update: Tue 21 Oct 2025 06:01:32 +0000
Files and hashes: 1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: uMf5/CXIJNnNy3dOHjyK2x+wGbj3MxGAWXr77IZaEdc=)
2: iXldcpMNtu5kim9vQXhjht5Ha_0.roa (hash: OZZlPHrzKaaexsTtY7l0u4aOhC15J2UaGXg/fHHU/6k=)
3: lishyzU5fcRQD0UnbZJENmou-sc.roa (hash: OXZjviRf58gZnLzaiDcKdYvZD8OZRwCWQQj7e3qyEJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:6e:c8:f5:e8:06:0f:ba:24:57:3e:12:1c:a8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Oct 20 06:01:32 2025 GMT
Not After : Oct 21 06:01:32 2025 GMT
Subject: CN=8c7f27a3bb736acd4dfbe276057500aa872f82ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:2c:96:5d:66:60:a6:e7:d3:d3:97:57:78:
fd:0b:54:da:b2:4a:4b:fa:be:2a:ef:e8:5d:0b:84:
9b:19:f1:c4:c6:40:1e:f0:64:45:d6:d2:a8:90:af:
d0:af:b1:e7:15:77:81:9a:ba:0e:c5:48:95:7e:48:
ae:42:de:70:e3:74:4e:e9:fa:7f:da:c1:e6:eb:6b:
58:aa:28:ec:f7:d7:3d:f9:56:55:09:c8:7f:d5:1e:
da:57:41:19:c7:0f:db:e7:fa:c2:73:15:be:57:0e:
d2:33:32:fa:d5:e3:34:2c:0d:a7:d4:a2:d6:45:2e:
c5:76:9f:88:6d:12:00:f7:9c:82:c8:03:49:af:6e:
e9:fe:4c:90:1a:df:6c:88:f6:5b:2b:d8:fb:3b:0e:
a4:1e:4a:24:99:3b:5b:7e:40:78:7a:ad:30:b7:45:
d1:fc:9d:51:fd:ff:31:2b:15:07:b6:c9:fe:31:79:
3b:27:7b:17:73:a7:03:5e:68:54:97:52:6e:7f:35:
bf:52:19:5c:80:38:63:e5:a9:1f:d2:93:b2:ce:98:
1b:7b:a7:70:af:0c:8b:92:81:b2:d0:e5:ac:31:1e:
2b:3a:dd:68:d2:80:d2:91:b0:66:44:db:22:7e:a0:
9f:a6:88:96:ab:16:1d:af:a0:71:f1:9b:07:6a:fe:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7F:27:A3:BB:73:6A:CD:4D:FB:E2:76:05:75:00:AA:87:2F:82:AC
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:09:cb:95:75:c2:ea:33:07:7d:1f:54:08:9c:57:50:de:0f:
e4:63:4a:10:7b:91:9f:0a:2c:44:c6:89:fc:95:c5:ce:25:be:
8d:46:e6:5c:21:19:a1:f4:21:c6:f5:9a:48:d5:ed:55:2d:4a:
cf:1e:84:1a:c3:b5:c2:f0:2e:31:21:34:43:e7:82:44:68:48:
4d:74:4d:8f:50:77:25:7d:06:98:a4:12:f5:fa:7e:f1:34:1b:
4e:b0:e4:9b:75:8a:3f:85:52:25:fe:47:2d:92:a4:77:d0:ff:
e4:02:da:43:ae:97:ca:1a:c8:ce:0f:17:a8:b5:33:81:a7:7e:
c1:2d:c9:d6:01:83:d9:e4:8b:42:68:0a:88:d9:5b:a0:c4:70:
24:32:b4:d3:95:6c:34:ba:f5:fb:00:86:a9:42:87:00:76:eb:
a3:f1:63:bf:d0:e7:38:93:8b:c8:2f:5d:ce:57:0b:92:7b:0f:
de:cf:3f:1f:29:e5:e9:aa:d3:b1:ff:42:37:fe:b7:f7:90:17:
35:41:dc:ce:e0:54:91:a8:bb:cf:1d:60:df:b0:23:d4:ad:77:
85:5b:5c:03:5f:55:6d:e8:f7:0f:04:20:e8:75:23:82:41:15:
53:a4:fb:ae:9f:46:f6:15:8e:29:d9:04:10:47:63:75:e7:f1:
08:62:2e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:15 2025 by rpki-client