Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: GeY+Xrb2hi/YTVq0UifA0wU+aMD3hKZf0qF0EV6GlyY=
Subject key identifier: 8B:2B:37:52:C8:8B:A9:02:69:15:DA:0D:6D:CE:FC:DA:1A:61:BB:23
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 0199FCC61CBF119EBB93B6A4DFBCE055B08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 1269
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: d21bZgDeoxstXLN4vr6cfuKuBOoh9yq3AwzEIM1Cf8U=)
2: pszj2ow_8e4yhWJ4p_2OlR6lAZA.roa (hash: Bkleu+zwlUm+Ij3pdF+L2pghaKZyEcPMCuJgamcNwU0=)
3: x05s8cxNFz3Ea01ENwVR0hPrDdY.roa (hash: 7Z21y2oOiXJmBN38XDJhWItGwbzVeLKb+Gde/eJFRgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1c:bf:11:9e:bb:93:b6:a4:df:bc:e0:55:b0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=8b2b3752c88ba9026915da0d6dcefcda1a61bb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:14:97:fd:e5:31:5f:8a:a8:2a:a0:a1:9a:
d5:dc:d9:09:f1:f1:4d:9f:8f:61:e1:ff:0c:c4:e2:
fc:c9:fa:79:be:17:d4:64:a0:38:62:02:70:04:07:
42:1f:de:c9:a0:9c:fa:ad:ed:52:26:31:5b:df:18:
27:df:79:b8:83:5d:d6:cd:25:e8:05:93:4b:08:f1:
f5:45:29:99:3a:ec:ad:0b:dd:e6:5a:19:0e:03:0a:
04:18:a5:b6:c3:26:1d:8f:c9:b0:89:85:7d:7e:ea:
37:c2:5a:a6:db:a0:4a:7d:c3:66:54:26:68:4e:d9:
f5:bf:11:9f:4f:fc:3d:1e:47:a7:d0:bf:94:76:13:
21:29:62:ba:a1:3f:a0:bb:2a:8e:37:3b:4c:bb:78:
f4:c3:58:9f:2c:4f:83:9f:d9:74:f5:8d:ec:1a:db:
56:ca:41:ee:0b:d6:d1:2e:62:ea:64:7b:a3:23:16:
43:3d:3b:4b:4b:2b:d7:b5:38:d2:b4:da:3c:2a:36:
65:bb:95:a8:1e:e1:cc:c2:d4:17:e2:61:a6:84:5b:
ef:16:56:3f:89:52:54:fc:d5:7e:4d:e9:ba:17:6d:
38:4c:b3:f7:20:e3:5d:36:67:10:f5:82:b0:62:6a:
d4:95:5b:71:8a:cf:a3:d1:79:f2:7b:f3:94:77:58:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2B:37:52:C8:8B:A9:02:69:15:DA:0D:6D:CE:FC:DA:1A:61:BB:23
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4e:27:5c:10:08:3f:4e:57:c0:ff:0d:82:0a:63:7d:e7:ba:
6f:38:16:88:b5:c1:40:67:5a:e5:e0:ac:b8:8a:0b:36:3f:5b:
6b:55:10:6f:f3:25:6d:3e:db:04:0d:1b:4c:fb:34:85:2a:e7:
17:b7:fa:a6:5b:59:eb:a2:42:4d:f7:05:c0:f2:66:81:4c:82:
90:9a:3e:7a:bc:36:2d:e4:84:92:03:04:7d:50:de:54:76:3d:
3a:5d:c4:02:e2:de:72:20:69:e4:64:1f:e6:3a:7a:a3:19:80:
f0:cc:e3:ca:b4:8d:3e:36:8b:99:b7:7d:b7:e1:82:ba:7a:36:
11:68:fe:17:b6:9a:69:0b:de:d8:9b:6c:38:e6:ed:b7:24:29:
92:cb:83:08:de:04:10:28:b3:f4:42:8f:bc:4f:98:8f:ca:f4:
a9:82:fc:70:77:4c:65:81:a2:da:ca:b0:5f:6f:ad:15:8b:22:
ec:f2:b1:f7:45:83:f2:99:09:41:4e:af:5e:17:32:2b:69:12:
ca:e0:c5:aa:aa:9d:ec:06:95:e4:55:c8:da:31:3b:4f:da:bb:
b7:0e:3c:a6:9c:9e:39:f4:bd:3f:4d:2f:b8:4a:c9:ed:b1:08:
b5:46:c7:3a:d3:5b:f7:35:94:f1:08:39:eb:62:e8:b2:f9:01:
cd:f9:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:38 2025 by rpki-client