Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: 6YucOuPvdIfdgAPHP+cVm4XTX2+7NdBbG9EY04Kg6W8=
Subject key identifier: B9:96:F8:D8:9B:41:24:AE:81:F8:7C:A5:4A:D7:B5:C9:F0:0A:17:11
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 0199FD33F58022117300D3B16A57C557FFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 0FF7
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: sG5Pfbiw9NmGHPuKJasg2U/pgn3kDPUiKQlkhViHBo4=)
2: WG1KaYBil4vEXHxcooJOyBDWYD4.roa (hash: KHIxCFkGSHSfCiqYXlIC0/8nqViYZ1Y0FqW8AdTQIkI=)
3: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (hash: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f5:80:22:11:73:00:d3:b1:6a:57:c5:57:ff:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=b996f8d89b4124ae81f87ca54ad7b5c9f00a1711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:e9:6e:04:d1:fa:7f:67:88:0f:5a:89:66:
53:e3:cf:b6:1c:3b:9f:3f:9c:e8:51:27:4f:6a:36:
11:c9:a7:bf:0f:bb:7b:14:f3:d7:30:4e:1b:8d:e0:
ed:27:38:06:de:be:0f:37:8c:dc:f8:09:7d:ee:ce:
9b:9d:c5:fe:43:4e:82:05:af:ef:68:e7:67:67:cc:
08:5a:b2:0e:17:19:bb:1f:c8:a4:89:d8:94:51:6b:
d0:42:a0:b7:b1:f0:4d:68:bd:c4:02:4d:f2:60:d2:
8c:ce:f7:e5:2f:73:9d:c8:68:39:b8:3f:c1:93:f8:
bb:7c:2a:61:e2:bc:95:8f:cb:7c:b4:e2:0e:a3:03:
a2:ec:95:1e:33:51:09:59:29:5a:2a:5d:a6:df:d8:
20:5f:45:6b:43:e7:0c:23:2f:c2:2a:13:df:d4:1d:
37:7e:04:46:41:6e:4d:9c:93:3c:47:27:8c:64:4c:
82:40:0f:76:bb:9a:64:56:91:a6:81:4b:8e:c6:72:
6a:ec:0f:54:00:dc:33:5a:3a:9e:6e:a0:52:dc:1a:
1b:be:aa:15:26:41:f8:90:86:5c:34:a8:97:1d:7a:
bf:ef:25:8b:d6:d2:80:26:7c:49:8d:67:29:7d:b1:
e4:57:56:11:26:69:7e:9d:9b:0f:9a:b9:e5:c5:8b:
15:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:96:F8:D8:9B:41:24:AE:81:F8:7C:A5:4A:D7:B5:C9:F0:0A:17:11
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:61:48:e0:5b:cd:5f:5b:3f:79:15:48:a0:64:c6:c6:97:51:
c2:a5:a0:04:e4:f6:3c:79:60:4b:11:cf:d2:1d:07:a7:ef:00:
ae:07:32:38:b6:1c:9a:0d:ae:0e:c3:37:2f:99:9e:e4:6b:18:
66:c6:32:36:fe:2f:35:82:ff:bd:15:00:4a:14:cf:7b:a6:8a:
1a:70:8f:12:d0:be:5f:fb:23:4f:0e:e6:05:b4:85:3c:c4:f6:
1f:d0:07:fe:c0:6c:7b:04:86:94:c5:d7:6b:f7:15:ea:8e:a7:
ab:cf:ab:9e:0c:82:98:49:51:5a:64:aa:f7:0a:d0:9c:a4:dc:
d8:83:bc:40:0b:1d:50:21:ef:cb:80:e8:d9:30:70:83:4b:31:
c1:c4:90:a9:48:19:44:34:8e:67:b8:a6:18:56:dd:7c:31:75:
d2:26:2a:dc:91:b4:f5:16:36:d0:9c:87:d4:5b:c2:95:c7:5a:
69:08:95:d5:01:df:81:be:5b:38:66:75:df:e4:bf:06:f1:ff:
d8:61:97:d7:31:4e:46:86:ee:6f:cd:2d:ad:f0:a8:72:90:3d:
96:bd:1c:7c:45:bb:70:c3:13:33:f1:7e:68:89:a1:3a:ce:9c:
b9:ec:9b:07:78:6e:59:71:ca:51:c4:f8:13:d8:0f:d1:f1:34:
42:f4:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:11 2025 by rpki-client