Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
File: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft (raw, json)
Hash identifier: fGhXKvZ9A1YUO9k6soanc0B7MsBQB2EGeEMJHsTkwPA=
Subject key identifier: 1C:3D:65:3D:B0:1F:BF:0B:EB:D7:CC:FC:DA:F2:24:5C:D3:E4:69:95
Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
Certificate issuer: /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Certificate serial: 019A503E01DA05E6C6176D82EFE618F52A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 19:00:32 +0000
Manifest this update: Tue 04 Nov 2025 19:00:32 +0000
Manifest next update: Wed 05 Nov 2025 19:00:32 +0000
Files and hashes: 1: 5o12bWwrOgNj5T2QC_xsDzw2auo.roa (hash: z+dRGRfQAE/aaRQhADQq91xi62QWjaX7M/KM35XckmU=)
2: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl (hash: OsUZTWrNg/9dRq7Bcofshih8784+0mnso8PFfiLAFPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:01:da:05:e6:c6:17:6d:82:ef:e6:18:f5:2a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Validity
Not Before: Nov 4 19:00:32 2025 GMT
Not After : Nov 5 19:00:32 2025 GMT
Subject: CN=1c3d653db01fbf0bebd7ccfcdaf2245cd3e46995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:7f:8a:cb:b6:bb:c2:82:4c:0c:86:8f:d1:
69:c1:1a:2e:12:b2:38:65:2c:ce:60:25:90:7c:17:
aa:28:ec:d1:dc:83:da:75:c8:67:44:f5:b9:66:6e:
88:8d:fc:d4:32:a4:61:ee:f7:d7:82:79:b8:1e:e1:
82:12:9f:f5:5a:a9:b8:cf:0f:c9:f8:7a:cb:75:3a:
0d:6d:66:4e:ff:b3:e3:98:83:3f:ff:d9:1f:2a:77:
fb:ad:72:10:2c:02:85:67:41:b9:87:34:21:06:fd:
4d:0d:51:11:38:ad:d1:e8:6d:90:93:35:6a:99:17:
67:05:36:67:23:6f:95:03:6d:35:98:0c:ba:cd:c1:
8c:06:91:85:8d:3c:f8:c9:fd:70:75:52:82:7d:d3:
5f:0e:09:02:3c:3a:f6:3c:e8:c2:17:b5:22:be:db:
b2:9d:42:9f:65:17:7c:d1:b4:d2:8b:e9:8e:bf:0f:
61:8d:3a:7f:16:d3:cd:62:06:e3:55:c2:1c:97:cc:
14:1a:28:a4:bb:6c:31:dd:7c:47:ee:e2:69:f2:e6:
3b:6e:e7:6d:1b:46:79:fa:75:24:ec:f8:db:b6:4a:
44:14:11:e7:1b:1c:fb:41:c9:6f:60:5d:3e:c4:d2:
95:b9:a4:63:3a:9e:de:37:00:e1:59:45:95:b7:bb:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:65:3D:B0:1F:BF:0B:EB:D7:CC:FC:DA:F2:24:5C:D3:E4:69:95
X509v3 Authority Key Identifier:
keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d4:b1:4b:02:f4:17:50:08:24:57:b3:31:f8:9b:e5:36:84:
5f:b2:1f:f5:44:b9:b5:6f:2c:90:96:5f:a0:b3:3e:4c:54:0c:
aa:13:df:88:e8:3f:99:ca:ed:19:75:2d:93:c2:5c:3c:e0:e4:
28:4d:81:36:37:bf:bf:a7:8e:92:6e:26:85:6c:61:dc:37:1b:
03:80:4c:76:58:1c:12:9f:c5:a4:29:82:9f:1a:5d:5c:94:0a:
aa:eb:c1:c4:66:ad:17:43:5a:22:20:92:20:3d:88:2c:ce:6f:
8e:65:95:2d:11:32:e7:b4:0f:76:d2:fe:6a:6c:84:40:97:4b:
da:82:18:91:39:aa:09:46:9e:db:e9:14:fc:2e:50:6e:8b:f7:
2f:79:1e:7e:b7:28:78:32:f3:82:1e:5e:70:df:73:68:08:28:
62:55:29:d8:ec:f9:8f:fd:2d:9b:98:18:06:9f:71:92:98:0e:
13:d3:5e:01:37:5f:6b:fc:45:77:98:2a:46:23:32:05:ba:38:
2c:87:5d:cd:e7:b2:d4:3e:c4:e0:8d:e5:f3:4f:27:ec:b6:38:
f5:d8:6f:ed:ab:dc:b0:7a:88:4e:aa:eb:5a:6f:a9:73:36:96:
8d:50:ad:e2:c2:a1:22:35:07:0a:37:3c:33:59:35:27:72:18:
0f:42:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:12 2025 by rpki-client