Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: ufCMwcltygrJeqaSJyoFgQUPqs3pUEOT0xoh8V0kV3c=
Subject key identifier: E4:80:8A:55:2A:01:1C:3E:14:64:CB:65:DF:C8:9D:AE:2C:91:71:CD
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 0199FC8FA6156CE84FBD2990A8C7D3E6CCD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 12E6
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: afHzLu7OmGmOiiiFdgfP1T2d+CjYBv1B0cwHxSxwhko=)
2: NSQQr0dchBVb5NqeR8z3x_MXCeI.roa (hash: XPvSVq5h7mPPG5QqR8bg1ZJJPL/y/MfsW5VYh5EY4C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a6:15:6c:e8:4f:bd:29:90:a8:c7:d3:e6:cc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=e4808a552a011c3e1464cb65dfc89dae2c9171cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:98:28:53:e6:4e:e7:31:97:c2:d3:e0:59:
0a:34:e6:9b:b0:5b:d5:8b:c1:88:fb:73:83:dd:89:
6f:39:aa:66:54:20:ed:dc:bc:72:5d:81:2c:ce:5c:
18:e1:96:71:6c:bd:40:9c:5c:20:27:97:96:ad:66:
0f:6d:7f:04:e9:d1:88:13:46:05:5c:93:9d:09:b5:
5a:07:e2:f8:1f:55:58:20:1b:c2:fe:f7:01:2c:e1:
a5:b6:a8:4d:ef:d4:e9:45:c5:86:6a:0d:a1:cb:3f:
3b:8f:db:52:d3:d3:e5:35:e8:13:72:95:5f:81:17:
43:49:a5:92:bc:69:88:67:a9:67:5a:49:6a:d3:ff:
2d:e4:c4:a9:1f:ed:08:ff:8b:a1:24:40:04:d8:9a:
d7:9f:83:d9:2b:41:2d:01:84:57:7f:27:84:83:8a:
70:3b:ea:58:77:ed:68:b8:0b:35:2a:15:1a:3d:66:
4f:06:4b:90:e1:ba:13:26:f9:0a:27:86:64:f1:ed:
1b:b0:5e:e9:c9:8a:09:2c:32:c7:11:21:c2:97:0c:
8f:48:3b:7d:ce:95:c2:1b:ba:c3:ea:da:a8:96:fd:
cb:27:9a:61:95:8d:67:06:e4:19:a3:5b:e9:f6:34:
1f:b1:5f:eb:9c:a7:a1:fc:89:09:e3:67:a9:05:d6:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:80:8A:55:2A:01:1C:3E:14:64:CB:65:DF:C8:9D:AE:2C:91:71:CD
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:42:4b:00:df:8a:b3:c2:28:7d:93:7b:e4:74:39:e4:63:a7:
7b:a8:f8:7b:23:96:36:05:dc:d3:6d:bb:69:81:67:70:8d:e5:
9a:e0:64:6b:a6:72:c5:f1:57:df:1b:4c:06:98:5d:84:bd:12:
c8:b9:a9:c7:3f:4a:2b:4c:5b:ec:a6:73:1a:f8:93:ff:4d:b9:
cf:ac:aa:2b:01:fc:ab:51:5f:e4:8f:11:17:cc:b6:e5:42:7e:
05:4e:10:eb:2d:b1:42:e6:62:69:f7:08:a8:eb:40:c5:6e:7c:
29:de:cb:06:78:59:2c:4e:5e:6b:cb:b2:2b:80:47:2e:10:e3:
f4:15:d3:22:9d:4f:14:ee:ac:0f:73:39:95:b5:0d:9a:cd:f8:
41:68:40:9f:6a:b9:16:7a:03:7c:a8:93:2d:c7:7b:9a:dd:b2:
8f:77:a7:b4:68:7e:d2:9f:21:83:25:89:ab:e8:b1:1a:aa:7d:
6c:88:97:2d:76:89:94:8f:b0:34:e2:a9:26:34:c4:55:cd:d8:
b8:cd:14:de:34:ba:0b:0c:1c:29:c7:08:67:a2:4e:56:0b:f8:
ad:71:df:4c:71:a5:bd:e9:44:5a:65:5d:e7:db:0a:d5:8b:3b:
91:83:a3:47:1b:10:ce:84:43:11:0f:10:58:be:c1:ca:1d:b2:
8c:d9:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:41 2025 by rpki-client