Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json)
Hash identifier: QWGPcN2sIiuS8A22WkUaFAzI2jdtiSIfGPY3dEIwb44=
Subject key identifier: 40:89:47:6E:C0:8A:72:7B:A4:29:C8:DF:55:BE:A3:BE:B7:CF:38:D6
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial: 0199FCC6271E3C9AA7F4ADB12A6246493E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 14:01:08 +0000
Manifest this update: Sun 19 Oct 2025 14:01:08 +0000
Manifest next update: Mon 20 Oct 2025 14:01:08 +0000
Files and hashes: 1: PYsPgn9EIHR5AYha-d_1rxDJZs0.roa (hash: QRdgsHwd+qGrv8yp41/SIFOyI0EFbmqDBRqqwNJuLIY=)
2: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: MEoa3kw+HAbMJuW8EofvnrJ9SLgLpbMoBsTOb9Go7Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:27:1e:3c:9a:a7:f4:ad:b1:2a:62:46:49:3e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Validity
Not Before: Oct 19 14:01:08 2025 GMT
Not After : Oct 20 14:01:08 2025 GMT
Subject: CN=4089476ec08a727ba429c8df55bea3beb7cf38d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:9c:d3:fc:c9:2f:37:e1:8c:38:22:a6:08:
c3:43:56:47:08:46:99:e1:8f:f4:1a:4f:8f:a1:1f:
f7:c2:9f:84:79:6e:25:1a:45:83:6f:31:2c:5b:b8:
7d:fb:9d:8e:d5:a6:74:76:73:4a:63:7e:90:af:7c:
ce:9c:05:ca:e8:a9:c7:31:e1:6a:da:f6:7c:98:ca:
ba:7e:1a:35:9e:c0:00:e5:2e:77:b1:e1:d5:e1:a6:
9d:85:72:93:07:99:d6:97:99:b4:3a:20:b5:99:a5:
9e:b8:75:2c:bf:81:75:98:d8:68:99:df:aa:50:ec:
59:2b:db:f0:c4:6d:98:33:cb:55:17:64:0d:bc:ce:
2d:c0:16:ad:9c:63:5f:bc:50:06:5a:01:35:5c:2b:
7a:0a:21:d7:b8:6f:aa:2d:de:43:f0:57:9e:0c:b6:
30:66:b7:58:01:4f:90:04:b2:da:bc:1d:94:a3:d2:
4c:31:5a:f9:73:93:6f:73:bc:33:f7:a6:70:bf:00:
2e:09:d3:bc:cc:eb:47:7e:75:97:fe:17:b6:a2:63:
b7:a6:a7:80:1a:00:92:9e:c6:57:d1:d6:2b:97:dc:
b9:3d:59:9b:eb:31:70:d9:d9:14:90:a0:6d:2b:a2:
5d:c1:73:6e:7e:9d:60:7a:dc:c8:50:75:da:f3:38:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:89:47:6E:C0:8A:72:7B:A4:29:C8:DF:55:BE:A3:BE:B7:CF:38:D6
X509v3 Authority Key Identifier:
keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2a:15:c3:43:07:4b:dc:c8:39:f5:2d:ce:c1:6b:c7:d4:19:
dd:05:b5:af:cf:d7:61:4e:8b:1d:dc:8e:10:fc:0d:16:38:af:
5c:c0:b4:fb:27:e3:73:c5:a8:a6:5e:88:1e:07:6c:41:35:65:
bc:4b:d8:be:2c:35:20:8e:59:73:42:40:6b:17:37:1f:a6:fd:
a5:eb:c2:8f:84:34:3a:81:4b:bc:a9:75:f0:6a:c7:fa:36:d2:
f8:52:8d:06:c3:a9:4a:f1:a1:2e:8e:52:b3:a4:cb:27:ac:ab:
00:ac:d0:3f:4a:63:fe:c6:53:77:7f:0a:3a:b9:a6:da:97:8b:
ad:6e:3d:c5:e2:d8:ed:82:e0:5f:95:85:cb:38:ce:0c:81:af:
0f:8c:0a:42:a4:af:00:ff:f0:09:d9:10:b3:57:26:f0:55:ef:
c2:69:97:6b:55:b2:cc:ed:21:cc:61:5d:c3:c9:c3:8b:58:49:
06:fc:cc:d8:1a:00:31:58:2e:dc:eb:86:56:72:a0:ae:77:66:
db:db:23:26:73:0e:bc:aa:f6:7f:cd:a5:a2:46:f4:e7:2e:f1:
b9:6c:c0:56:78:04:32:8e:65:cc:5e:d7:1d:d6:10:cc:4f:2b:
ca:ff:ce:40:55:95:6a:4c:f9:6b:ac:0d:fe:18:42:b3:17:a1:
eb:52:bb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:47 2025 by rpki-client