Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier: OlNy4VFnctMLNuROVl9HaqMt+2iWB2aCUKwt05Ly9Yw=
Subject key identifier: 13:76:74:C8:66:F9:AA:EE:FE:C3:27:3D:08:92:00:68:9A:DC:DB:50
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 0199FEEB983DF9D5303FB29468ED802108F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 00:01:16 +0000
Manifest this update: Mon 20 Oct 2025 00:01:16 +0000
Manifest next update: Tue 21 Oct 2025 00:01:16 +0000
Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: 0DnNlGoMF13s5Alqmx035VY5lbUmJI4/lLfruAgfh0Y=)
2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:98:3d:f9:d5:30:3f:b2:94:68:ed:80:21:08:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Oct 20 00:01:16 2025 GMT
Not After : Oct 21 00:01:16 2025 GMT
Subject: CN=137674c866f9aaeefec3273d089200689adcdb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:ce:02:9f:65:27:d3:d7:17:25:4a:f8:d1:
3d:8d:2c:2c:c2:4f:8c:a1:7a:bd:35:69:fb:9b:04:
26:4d:13:64:13:b5:a2:53:7f:e8:13:0b:19:f3:da:
bf:83:ac:ee:65:93:b7:0e:9d:08:e2:61:07:33:35:
ac:c3:5e:82:05:3f:9f:ee:34:95:61:d7:d4:02:ba:
fa:27:33:6d:7a:6c:c7:28:5e:59:15:9f:40:94:4d:
77:dd:c2:fe:fb:71:5f:dd:f3:24:17:33:25:77:f1:
53:ad:43:e1:57:f5:d3:be:04:e4:96:97:fc:db:c4:
3b:db:4c:57:59:e1:2f:e4:8d:a4:ae:37:3f:df:a1:
64:71:f3:ee:8e:83:a6:42:a7:dd:7c:73:a1:69:ab:
9a:e1:5a:a5:aa:4a:b0:a5:7c:f0:74:e9:5a:0e:5d:
58:a9:9d:48:7f:9a:8e:4f:4d:cb:de:8f:6b:c2:13:
8f:d4:5d:8e:3d:8b:0b:72:43:81:76:7e:5c:bb:70:
39:2e:37:c4:36:e6:4d:2d:06:b3:cc:57:8e:14:70:
8f:aa:a3:46:6f:e3:0b:ee:b7:bd:2f:40:f0:c9:b4:
65:a7:9f:85:87:68:64:11:55:fd:4b:f9:2c:4e:fc:
06:1f:3f:d3:ab:aa:45:66:a8:24:73:4c:dd:18:ba:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:74:C8:66:F9:AA:EE:FE:C3:27:3D:08:92:00:68:9A:DC:DB:50
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1b:a0:49:e5:a0:2a:96:99:71:6e:23:8b:23:25:98:a1:07:
9d:8a:26:3a:ca:76:a5:b1:57:2f:ec:d5:4b:c6:c7:3e:25:b3:
47:6b:08:9f:fa:ca:21:69:b7:fb:f2:70:6d:71:af:d1:f4:8a:
e4:d4:c1:38:63:ab:13:a4:02:ed:bf:c5:f5:fc:cb:8f:ed:ff:
a0:b4:11:54:c7:b4:19:6e:09:43:c2:19:37:6b:fb:73:fa:0d:
81:0d:a8:39:76:91:be:31:ff:50:2b:b1:e7:5b:22:a5:c7:25:
84:b4:79:cd:1c:6e:04:99:de:91:b9:8f:af:45:65:bf:e6:98:
b4:24:86:4b:b6:34:2d:19:aa:48:0d:6d:a4:71:4f:0b:32:22:
5c:d4:02:30:45:eb:d2:de:e8:14:45:53:d7:32:3f:bd:ad:df:
47:5d:81:f0:fe:17:7d:28:ac:f2:e7:73:40:f6:4a:d0:c7:97:
c5:a8:75:cf:b2:b4:39:75:86:b4:8c:8e:14:25:86:f4:d5:66:
74:89:c6:02:86:92:0c:93:43:4a:0a:1a:da:13:4c:93:eb:e7:
dd:95:e4:46:9e:94:13:a8:95:eb:f0:63:38:cc:d3:d3:ed:dd:
9f:8d:86:d4:87:cd:fb:28:45:ed:3c:b2:f2:33:72:58:e7:43:
de:ed:f8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:54 2025 by rpki-client