Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: C4o778/0Ja/RvTJCJb16zI5GcUhWuqAcrkjC/Cv2Zhg=
Subject key identifier: 46:7B:F1:EA:62:FE:AF:F3:04:56:8D:03:95:EC:B9:42:4F:C6:A4:8B
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 0199FAD7F5FD0E479A40F277878E088BEEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 05:01:21 +0000
Manifest this update: Sun 19 Oct 2025 05:01:21 +0000
Manifest next update: Mon 20 Oct 2025 05:01:21 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: NRrP2dPCi4OU7PCCJYqufZJ/iVVk63S2Rx73ZD69GiA=)
2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f5:fd:0e:47:9a:40:f2:77:87:8e:08:8b:ee:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Oct 19 05:01:21 2025 GMT
Not After : Oct 20 05:01:21 2025 GMT
Subject: CN=467bf1ea62feaff304568d0395ecb9424fc6a48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:44:24:77:19:10:7a:db:40:3f:63:59:c6:
97:b8:71:3a:59:69:bb:b1:d6:a1:98:f2:e8:8b:87:
ee:b1:dc:bf:57:4e:89:69:f1:d1:ff:ab:98:5c:58:
48:f1:0e:f6:5c:01:61:89:f0:74:ab:7d:b1:67:59:
b5:7b:35:f7:06:a0:41:27:ee:f2:6c:37:9a:b2:75:
a2:dc:cf:10:91:ba:b0:c4:23:41:ea:ee:bc:fb:0e:
7c:3e:7b:39:8b:f4:17:83:d8:05:a5:c1:56:f9:e6:
1a:48:db:cb:41:86:d5:d0:64:d0:64:99:92:a3:34:
1b:27:f4:9d:ee:a3:f0:ab:1a:b1:46:30:18:57:18:
12:52:47:ee:f9:f2:8c:54:92:3f:69:30:ea:f9:29:
3f:5a:0e:82:63:8c:c5:65:62:6d:6f:c2:4f:34:2d:
46:23:9b:73:48:ba:7e:8d:78:d7:95:d3:02:b4:e9:
f8:16:31:ca:e6:b2:ec:c7:96:2a:87:ec:67:cf:af:
f8:a9:89:99:22:50:e0:b4:81:83:14:ed:66:fd:e2:
1d:9a:c2:47:99:6d:23:53:5e:33:40:a2:20:d2:51:
f1:22:88:15:dc:d6:f0:74:2e:54:cc:3a:d7:0c:9a:
7f:b1:c3:ba:06:4d:73:9b:f8:e7:0f:9e:36:38:46:
20:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7B:F1:EA:62:FE:AF:F3:04:56:8D:03:95:EC:B9:42:4F:C6:A4:8B
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:08:5c:86:2c:44:83:6c:2a:87:fd:01:b5:b4:34:d1:b5:c3:
c3:25:35:35:0d:6d:60:73:4b:37:c5:58:26:e2:1f:19:93:46:
d1:d9:1e:66:b8:2f:20:61:31:57:1b:7e:87:13:75:b1:5e:ae:
75:33:08:ba:89:50:24:15:df:b6:9d:9f:89:47:f8:96:1f:5d:
5e:71:c8:53:33:f7:a2:36:fd:51:0d:00:ad:8a:b3:a8:50:44:
60:6e:cb:37:ea:18:4d:b6:84:dc:6f:b7:e6:b9:ba:74:91:77:
29:13:a2:55:aa:db:53:d1:6c:0e:04:8d:e7:c3:c8:bf:4c:2e:
af:c6:73:5d:27:b6:8f:3d:3a:35:17:aa:4b:11:9b:00:13:c5:
e7:0a:5f:f2:61:9a:10:37:9e:35:fb:4b:10:bd:b3:e5:88:46:
5c:d5:3e:14:f0:d2:0b:2f:d1:25:3f:71:af:c0:a2:72:52:50:
24:03:88:11:5b:ce:41:24:43:cd:fd:98:c8:e6:08:24:c5:19:
aa:b7:96:ce:e6:7a:59:ad:fa:b8:3f:88:bb:28:ad:66:07:eb:
47:a1:ed:33:e9:18:19:25:b6:29:5d:86:76:8f:cf:28:a0:4a:
d9:bd:52:cf:3a:87:46:51:71:c5:d0:9c:76:72:81:57:fb:7d:
dd:68:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:57 2025 by rpki-client