Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
File: exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json)
Hash identifier: 3nwRK3swP6Y6/N1sEBXShQTxra0EBD42MEXwl9k2Eeo=
Subject key identifier: 23:9D:CB:C6:42:ED:BA:BB:EB:1F:D3:DE:EE:89:6E:57:EC:18:0F:7B
Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91
Certificate serial: 0199FC58C5CBAED98E4D514229848DAAD579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
Manifest number: 0C2E
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: wxhbbpc7UE4WVWM0avChr4ZUp7T2g4/pOxnq3CcflAE=)
2: lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa (hash: WgCV5F0Lo1vsx71+iRrim7ywAzohxnYAfe2pxSvyfPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c5:cb:ae:d9:8e:4d:51:42:29:84:8d:aa:d5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=239dcbc642edbabbeb1fd3deee896e57ec180f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:b3:6b:ef:98:84:f5:f6:2f:f7:ea:c0:12:
6a:22:c5:1b:35:91:c6:4d:a9:bd:3c:36:4d:e1:a1:
11:3f:e5:5c:9b:87:e5:61:0c:80:d4:db:46:85:c4:
dc:b7:d7:5c:91:ca:b7:67:c6:2f:c9:e7:36:a9:90:
e3:0e:8b:9e:21:37:da:ad:ef:16:da:63:a5:9b:b1:
f1:a3:8c:df:73:f9:e6:cf:96:58:58:d1:b3:2f:55:
3c:38:b8:73:92:11:15:5a:07:3f:cf:bd:ad:c6:77:
56:4f:8b:a6:2f:32:9f:84:5f:26:b9:00:8b:f3:bb:
6b:e0:c8:ad:92:c7:1d:70:a1:fc:ff:b8:a6:d2:bd:
31:a9:2a:d2:fb:28:99:4b:05:d3:25:78:cd:05:84:
bc:f4:d3:4d:b1:4f:19:28:65:49:9b:41:96:13:d7:
f1:cf:d4:14:6c:3e:32:0f:09:c0:91:0b:75:8a:87:
93:6b:ea:46:d3:a9:7f:38:98:94:12:62:4e:45:18:
2c:e1:b3:18:fb:8f:01:6c:ee:51:e2:ba:9b:70:98:
25:60:ef:08:e3:d7:66:72:d7:d9:76:79:fd:58:1c:
bd:45:4a:03:9b:85:53:61:6b:2d:e7:a4:97:51:68:
ee:71:fd:3e:8f:e5:4f:22:c0:eb:0f:17:1c:c9:16:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9D:CB:C6:42:ED:BA:BB:EB:1F:D3:DE:EE:89:6E:57:EC:18:0F:7B
X509v3 Authority Key Identifier:
keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6a:2e:62:50:6a:e1:24:be:95:ba:43:18:c5:82:0a:54:3c:
a8:8a:b6:74:90:f4:02:95:f6:6f:ff:19:7f:2b:3d:fd:8a:4f:
c8:11:e2:c1:d4:d3:67:1e:dd:dd:db:45:8f:25:b6:7d:ff:10:
25:52:97:3d:8b:39:02:fb:d1:b7:c6:55:63:8b:72:9a:61:df:
e0:55:58:8b:2e:66:12:09:ed:dc:69:69:2b:69:97:a3:3c:86:
62:51:71:68:b5:c4:33:43:8c:3c:1b:d5:50:88:05:23:fc:af:
62:69:9c:52:60:d7:55:1c:57:2e:56:81:0d:2c:a8:f2:c7:d9:
ef:56:3b:2d:cc:72:71:fe:d3:a6:b9:c5:3e:40:02:a5:9a:b6:
e4:44:68:73:92:97:0a:36:cd:fb:c2:6a:4a:0e:da:74:b4:e9:
c9:29:07:c3:f8:e8:7d:3f:99:f6:9d:be:cf:02:5f:be:61:ac:
65:ee:3c:22:a7:21:6d:67:40:51:a4:f6:6a:2f:bd:69:04:03:
58:2f:fc:76:66:9d:d8:88:6f:bc:72:b2:b3:3f:01:0b:d2:3d:
7a:98:ef:8e:8b:68:68:a3:77:ad:06:f2:1c:29:40:c4:7d:f5:
b2:a3:1a:62:e5:83:a1:e3:a1:f4:72:ab:82:b4:c5:cb:a2:a5:
3f:49:e2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:11 2025 by rpki-client