Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: dSWBsF40Z6WYzCnmQShTbRNTQMB2FKnW3o9tgTRy/XI=
Subject key identifier: 5F:55:38:6C:64:97:E1:08:31:47:86:5C:92:B3:90:2C:00:9E:26:23
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 0199FDA1D725252C64BAE891D052A5BBD1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 18:01:05 +0000
Manifest this update: Sun 19 Oct 2025 18:01:05 +0000
Manifest next update: Mon 20 Oct 2025 18:01:05 +0000
Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: f5IcI7SMt0DQLkcc2NBn6khkQctGcvi6lpCvHfNG+dQ=)
2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:d7:25:25:2c:64:ba:e8:91:d0:52:a5:bb:d1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Oct 19 18:01:05 2025 GMT
Not After : Oct 20 18:01:05 2025 GMT
Subject: CN=5f55386c6497e1083147865c92b3902c009e2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dd:6a:f8:8a:43:b4:1e:5d:fd:b1:d9:e2:78:
3d:1e:0e:02:f2:03:a8:98:b2:1e:3d:e3:d0:97:93:
95:b4:22:dd:bc:5c:c9:e7:e0:f5:69:4f:a7:12:01:
c1:c3:94:c1:98:46:4d:40:8b:6e:41:d0:4f:2a:7d:
29:cc:d6:3d:b1:4f:97:5c:61:cb:f1:8d:46:14:5a:
94:00:b0:e9:18:4c:42:d0:9f:14:67:0d:f9:67:ec:
b7:8b:85:a0:e4:2c:3e:17:6c:ba:01:5b:23:08:50:
0a:39:92:b0:60:ba:6c:99:78:a3:4d:6c:73:d7:2d:
6b:c6:53:d0:36:95:c0:87:e1:a3:fd:7a:f9:88:c7:
e9:af:08:3c:b8:c7:12:d8:81:e2:df:44:f6:22:66:
20:79:fc:3e:a3:50:39:6d:26:0f:b3:c9:f7:0b:f3:
67:0b:ec:72:15:89:4b:8b:44:77:af:b9:c2:8b:a9:
8f:aa:4b:57:0f:da:57:96:2a:31:d7:b5:98:e0:7f:
b8:6d:b9:d6:5a:e9:0f:db:69:48:26:b9:ce:65:e7:
41:ab:d5:04:fd:63:82:0a:fc:09:8d:01:e5:25:80:
c2:86:18:a0:dd:f2:5b:bd:79:ec:d3:d2:0d:fc:e3:
53:c3:42:cc:b3:38:34:44:47:5a:2b:a2:cc:f8:7b:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:55:38:6C:64:97:E1:08:31:47:86:5C:92:B3:90:2C:00:9E:26:23
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:09:4e:6e:43:8c:bb:45:b7:13:20:77:59:f5:67:53:6d:f0:
af:ec:04:39:b7:7e:a9:bd:37:8f:7a:16:16:6c:76:ac:53:50:
a2:0b:a4:0e:03:3a:70:d8:36:c4:9f:0f:32:c5:c3:74:ed:bf:
62:ed:1c:b2:c5:2c:db:96:fe:30:46:10:3a:cb:85:49:d8:ce:
ef:6b:da:87:e6:eb:2b:91:88:05:e8:49:cb:f1:ff:2d:01:39:
3a:47:b1:d4:dd:3b:be:15:a1:d0:ac:92:af:8a:ba:72:52:5b:
87:cf:2e:04:fb:0e:f8:30:24:40:33:cb:86:39:fd:28:b0:5f:
50:8d:e1:fb:98:26:5b:9b:b8:d2:a9:ac:e1:89:07:02:85:23:
9e:96:53:30:6e:cd:4d:13:4e:5c:7d:73:b9:bc:79:62:0a:87:
88:a6:d2:c7:07:05:f8:8b:c9:66:d2:21:9d:e4:89:f9:a0:3e:
94:c1:80:af:80:de:a3:87:90:37:5d:06:2a:56:f0:3e:96:ec:
df:20:73:bc:7d:73:ce:2b:3c:9f:ab:45:00:77:0b:9d:13:4f:
bb:9f:8d:66:1d:f1:fa:b6:13:48:a0:ae:93:20:fe:6f:0e:7c:
e8:e3:f2:60:19:08:3d:bc:5b:af:26:06:05:d1:c9:c4:39:ca:
0f:fc:ee:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:03:41 2025 by rpki-client