Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: 7V6OKqV4AuETS0BTN64Dr4bDOw/wCkIILBp4lei/ZtU=
Subject key identifier: 93:56:98:F4:91:2F:23:9D:AA:8D:DC:DD:93:90:CE:C5:38:71:A3:17
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 0198D7E0FD300DBD036B421715C66C99835D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 165B
Signing time: Sat 23 Aug 2025 17:01:42 +0000
Manifest this update: Sat 23 Aug 2025 17:01:42 +0000
Manifest next update: Sun 24 Aug 2025 17:01:42 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: UZ0Ai96EMRBvIAyp17Scib/6MqV/NH7a04d18E7ZODI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e0:fd:30:0d:bd:03:6b:42:17:15:c6:6c:99:83:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Aug 23 17:01:42 2025 GMT
Not After : Aug 24 17:01:42 2025 GMT
Subject: CN=935698f4912f239daa8ddcdd9390cec53871a317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:0f:30:45:4a:c5:8d:d6:77:10:24:9a:c4:
50:d0:ca:78:dd:aa:94:f6:c1:d9:12:69:d6:35:d6:
61:09:bf:39:b8:3a:11:f5:73:b9:c5:b0:82:40:07:
34:3b:cb:98:a9:5f:67:39:fd:64:aa:78:0a:09:a2:
b9:07:d4:7b:41:92:b4:37:5a:52:8a:a2:5a:be:29:
cc:71:82:b3:1d:87:62:5e:cd:87:b6:74:98:bb:2a:
72:46:e3:e8:92:4b:46:93:c7:1e:55:aa:8e:ee:21:
a1:b1:c0:6d:f4:24:47:0e:f5:e8:45:6b:c5:55:78:
c2:a8:a4:f8:e1:9b:bf:93:61:b0:26:5b:7e:3b:17:
31:56:29:19:61:d7:96:9b:48:ad:e4:5f:bf:27:06:
a1:ac:80:e3:e1:2d:ef:76:e1:97:b3:8c:bb:e0:06:
91:92:06:92:ea:c0:66:0b:52:f2:00:2c:9a:78:95:
8d:da:88:17:72:a0:2d:08:c6:ca:ed:e2:1b:2e:3d:
9d:3a:8c:0b:39:5a:11:14:31:9a:bb:b7:02:73:f2:
b8:54:6d:bd:f9:e5:e3:8a:f8:78:15:46:bd:ff:f1:
b7:71:fb:4e:9e:a4:cd:7a:ee:87:85:70:e7:6c:c3:
8a:68:91:c9:64:13:38:1c:9a:ac:2b:e0:a9:87:5b:
e7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:56:98:F4:91:2F:23:9D:AA:8D:DC:DD:93:90:CE:C5:38:71:A3:17
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:57:dd:90:1b:88:ce:d5:39:8d:a9:d0:d7:27:e2:24:7c:34:
9f:47:de:e0:54:e8:02:4a:c9:a3:3c:2c:37:18:32:a3:09:39:
56:e6:42:30:b7:05:07:13:d1:15:67:ce:00:e8:ab:10:f7:a3:
e8:27:53:5d:5f:d9:a5:77:69:a9:54:20:d6:f8:df:6e:f9:f5:
cf:4a:1e:53:93:95:2b:6e:5c:b4:db:6e:95:b1:d2:54:1c:12:
9c:5f:4c:25:75:3e:17:8b:0f:e6:46:e7:33:ec:ff:3c:02:77:
d3:21:c7:1b:64:f7:93:e6:a9:f7:63:84:60:58:c4:e2:31:11:
16:23:de:83:b8:63:1b:b1:8c:d4:c5:56:d9:9a:1f:18:5b:16:
a7:62:7e:d8:91:89:9a:4c:6f:6b:b3:29:04:69:2b:9f:8f:42:
7d:ed:27:24:eb:4e:95:20:5b:07:b8:67:bb:d0:45:94:95:30:
d1:1a:16:93:e9:07:25:61:37:43:f2:61:29:ed:21:88:a1:46:
a8:f1:a3:60:39:10:57:15:36:38:15:68:1c:82:3c:8f:c2:b7:
e3:1a:7c:bf:ba:55:cc:e6:d5:83:64:9c:d4:7a:da:fd:cc:e0:
6a:d5:b8:90:e9:63:eb:b5:a1:7e:13:8f:e2:e8:e2:ef:b8:05:
37:fa:23:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:10:10 2025 by rpki-client