Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: yD1WBc5hq/c1oaczTTH752L55FPEa9an8IAUzW77MHA=
Subject key identifier: 0B:87:05:68:67:D6:10:65:BD:23:85:6E:82:71:5D:45:74:B0:67:81
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 0199FC21AC43A159F7304634336896E4B566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 1174
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: HTKjluKoMYE3YnxNS8OX7g6z7cg.roa (hash: sAIqDaQKvUjEGEm5NaK3hjATSYMoprKa9F9LOvjEkOU=)
2: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: DHCA6PR/cVx2IGwQXSPPQCpLzJ0ZGp3WIKmfr+DOlGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ac:43:a1:59:f7:30:46:34:33:68:96:e4:b5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=0b87056867d61065bd23856e82715d4574b06781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:26:3d:8a:57:69:08:43:f3:85:65:50:25:
2b:58:fa:36:3c:0b:21:c9:5c:a9:89:f6:26:97:c9:
41:e9:fe:32:cb:c9:26:ae:23:d8:60:8a:f2:34:5d:
d3:3f:6e:72:bb:7a:cd:cf:78:e2:b3:d0:40:c9:64:
e0:3c:d7:80:64:9e:51:ef:76:d9:8c:d0:7c:e2:50:
3e:77:51:65:36:53:57:8d:bd:eb:4d:c0:4f:f7:ce:
45:76:cd:2c:32:00:e4:e5:0e:a6:36:00:2d:9c:da:
68:d8:0b:96:8f:f6:b1:39:b3:e3:fb:4e:4e:6b:79:
29:fc:d3:8a:52:26:ce:6a:26:19:ac:82:5e:34:4a:
24:30:f6:f8:68:c4:dd:e7:0e:9a:46:b4:67:88:7d:
a4:11:03:34:33:64:a9:ed:16:04:3e:20:1a:79:7f:
62:a9:65:b8:28:84:f8:e0:69:49:fb:12:55:69:2b:
df:83:c6:56:ca:5a:b9:c1:96:64:2a:3d:62:31:43:
cf:79:72:3d:89:b3:5d:6a:2b:e1:d7:ed:96:50:db:
48:6a:14:38:1a:0a:54:19:f6:15:67:32:98:5a:88:
aa:7a:97:43:d9:d4:ef:6a:b5:c0:c3:c4:c2:45:46:
37:f8:31:c3:df:b5:fe:90:48:a6:a2:90:0e:4b:f3:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:87:05:68:67:D6:10:65:BD:23:85:6E:82:71:5D:45:74:B0:67:81
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5b:46:83:4a:8a:a2:c0:24:35:49:b2:3f:6e:c7:73:74:93:
bb:62:02:5d:6e:23:3c:d7:1f:78:8c:bb:c3:35:7b:b9:4e:0a:
74:eb:c7:50:ef:f3:a9:cf:9d:5d:8d:03:cd:93:bd:3a:ea:cf:
e0:b7:6e:fb:6c:03:df:e3:37:a9:31:66:71:14:dd:a4:66:5a:
82:c2:0e:03:df:9f:e6:50:98:6c:b4:8d:fb:d3:40:65:67:03:
1e:5a:6a:4f:fd:94:cc:46:53:bf:ce:87:f7:67:45:20:17:e4:
72:9d:17:ee:14:63:84:fd:a8:97:0e:3a:9b:0b:97:83:8a:27:
9a:e5:54:2f:e3:45:1b:2a:eb:d6:5e:5c:de:8b:46:e9:bf:48:
7e:ca:09:3c:9f:f9:6f:50:cf:eb:f9:a4:f5:66:a7:93:c6:35:
80:6c:4e:1b:37:57:77:f6:70:54:65:55:20:30:ee:17:0a:06:
3b:02:5a:de:28:90:94:c7:fd:6e:8c:9e:1e:be:3d:a0:60:de:
43:b8:72:28:82:e6:03:0b:ea:1f:ec:3c:7a:32:b2:96:24:ae:
70:79:f0:c5:39:1e:77:8a:55:ee:da:4c:15:55:91:c8:bf:2a:
67:63:75:5a:94:61:cd:15:3d:6e:61:3f:9d:37:f9:7d:f1:0d:
1f:93:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:16 2025 by rpki-client