Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
File: cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json)
Hash identifier: wWNxWocIoUHX3WlWwKALFuM+L/sUgpRHL6lLqPIrHtQ=
Subject key identifier: 4D:90:09:60:42:0F:92:43:A2:9A:6A:60:61:F0:C9:1D:F4:5E:70:6E
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Certificate issuer: /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial: 0199FEB4AFA76ABDF808B2954C6BB1BEF4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
Manifest number: 03DC
Signing time: Sun 19 Oct 2025 23:01:18 +0000
Manifest this update: Sun 19 Oct 2025 23:01:18 +0000
Manifest next update: Mon 20 Oct 2025 23:01:18 +0000
Files and hashes: 1: Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa (hash: 8FTp4AmQ8yrNnOSj2Y/1nrH6lz6jMuxxvh24QGuNmXY=)
2: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: mBEF2Up33Gl6co/1PWAriSLiSbax8UeMNJiNaTeKuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:af:a7:6a:bd:f8:08:b2:95:4c:6b:b1:be:f4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Validity
Not Before: Oct 19 23:01:18 2025 GMT
Not After : Oct 20 23:01:18 2025 GMT
Subject: CN=4d900960420f9243a29a6a6061f0c91df45e706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:44:85:0e:4c:4a:c0:b8:90:dd:63:0a:55:93:
32:b0:d2:18:4b:79:e5:b0:66:39:5b:d4:61:e7:63:
ca:53:1c:85:c4:91:0a:ac:dc:af:6f:59:13:02:49:
93:40:69:33:3d:b2:d8:a6:b0:cc:16:e8:8e:71:ed:
b0:1e:67:f4:54:ea:77:75:69:3b:dc:57:4b:b4:fa:
c9:83:e1:fd:d2:48:1d:76:fb:33:91:1b:39:44:55:
40:56:99:62:b2:c8:32:d8:4f:08:f5:73:0d:cc:3a:
aa:bc:19:e7:4a:08:41:f1:a6:f1:db:1a:17:20:2d:
91:5a:a9:f2:a7:31:fe:cf:b0:2a:ea:7f:aa:18:93:
72:86:c4:60:b4:39:15:07:5c:d1:10:ba:dd:59:04:
0e:bc:ca:a8:dc:7e:61:d5:5a:9f:e4:88:4e:16:b0:
e3:ef:f3:39:fc:c8:2e:35:b0:97:34:ff:79:96:96:
11:d6:9c:1c:54:7a:1b:66:37:9c:94:6b:b7:f1:9a:
f4:bb:5f:c5:d3:36:73:be:a3:61:fc:c7:77:1a:d5:
8d:25:a8:e1:d2:c7:d6:bb:76:94:e8:fa:69:85:3a:
8d:8e:29:3c:2d:c3:a9:39:3e:b3:8d:15:b4:b2:7d:
62:0e:8d:4d:d7:b7:fa:67:48:9f:8f:5a:bb:0c:e5:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:90:09:60:42:0F:92:43:A2:9A:6A:60:61:F0:C9:1D:F4:5E:70:6E
X509v3 Authority Key Identifier:
keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b5:54:8a:11:7e:39:0d:9b:4a:df:83:fc:26:8e:7c:bb:90:
45:17:17:f9:dc:35:4e:d2:32:67:93:57:a6:79:73:f1:f4:23:
3f:4b:57:d8:bf:31:c8:21:f5:13:87:04:9d:06:82:c6:1d:62:
b8:6a:14:3c:4d:34:35:68:5e:1f:09:66:86:be:d8:53:41:59:
5f:7a:c0:19:ed:b6:54:1e:9e:97:87:ce:cc:a0:ea:32:09:14:
5f:d8:d8:f0:93:db:ec:25:c1:87:d6:e4:b0:c2:a0:dd:4a:35:
23:57:bb:b1:72:e5:13:f1:30:d3:0a:f0:12:19:7f:70:fd:8e:
1d:49:c8:59:5a:dd:54:4b:2a:6b:30:e4:b1:34:fb:5a:7d:f3:
e9:09:1b:dc:d4:18:5e:bf:ea:59:59:e1:63:1f:ff:8b:50:40:
79:ad:c5:6f:9f:15:e7:76:ee:f5:5a:30:87:0c:d2:84:99:f8:
82:fa:e7:d2:e5:eb:6d:4e:b1:ac:69:0e:b1:14:5f:2f:f6:ce:
0e:9c:87:ad:a3:e0:ff:20:06:8f:b4:2c:aa:27:b2:03:1a:61:
75:0d:48:00:ec:04:06:8a:fc:99:9b:fa:0b:48:40:3f:31:50:
89:e3:f5:17:53:f4:ab:8b:2b:e4:d8:73:8f:d9:0a:9a:3e:bc:
9d:ec:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:12 2025 by rpki-client