Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier: wvo44NoPCol4L7PfS7zsog7VVhoS3n4P+Re3ha3wc/c=
Subject key identifier: C4:33:C3:7D:DC:A7:D5:5E:14:3C:86:8B:EC:44:2B:B5:0E:7F:FD:6A
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial: 019A4D0723C4BC845944A913A85F0A80D1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 04:01:44 +0000
Manifest this update: Tue 04 Nov 2025 04:01:44 +0000
Manifest next update: Wed 05 Nov 2025 04:01:44 +0000
Files and hashes: 1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: oziZvsHc3BUDqAeH3LUCnL/oNfGYFBdN5AHVb9+Mk3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:23:c4:bc:84:59:44:a9:13:a8:5f:0a:80:d1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Validity
Not Before: Nov 4 04:01:44 2025 GMT
Not After : Nov 5 04:01:44 2025 GMT
Subject: CN=c433c37ddca7d55e143c868bec442bb50e7ffd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:ff:3e:87:31:c7:2d:f0:71:c6:36:e8:7d:
12:27:44:dc:2e:10:54:ae:29:b9:61:9e:27:c4:0a:
04:81:cf:7b:61:ed:8b:00:13:0c:fe:2f:53:1d:ff:
65:11:fe:2e:53:f8:61:88:d1:f9:06:a4:d5:eb:8b:
50:67:87:8b:7a:7c:68:3c:2c:55:2a:f8:dd:bf:37:
31:ba:5f:8d:85:d7:ea:f5:68:49:43:cb:b8:5c:60:
50:dd:dc:89:c2:36:45:bf:f7:99:7d:64:6d:f5:d2:
c2:ad:d3:cf:ba:45:09:bd:83:70:91:be:dd:84:ca:
26:9b:2b:4c:be:3c:ed:ea:39:d1:1d:04:fe:70:0f:
01:3b:95:58:24:96:d8:f2:c1:30:6c:27:16:b1:75:
85:83:d9:bf:59:13:13:5d:8d:1f:50:c7:bc:b3:a7:
f4:ae:17:0e:62:14:1a:7d:65:1b:f0:53:02:8c:85:
c8:c4:01:0f:db:3a:7d:ca:7b:17:75:dc:5e:d2:3b:
41:44:7a:0b:45:f3:bd:55:12:93:d7:cf:6a:82:b7:
5a:d2:78:8e:aa:ec:5d:f3:77:92:95:79:f6:0a:a0:
06:35:a9:03:f9:f8:0f:bf:19:08:01:09:5a:f0:eb:
2e:af:c1:58:fa:92:35:50:98:c3:28:a1:79:52:88:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:33:C3:7D:DC:A7:D5:5E:14:3C:86:8B:EC:44:2B:B5:0E:7F:FD:6A
X509v3 Authority Key Identifier:
keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:01:ec:a1:3d:78:63:ff:9c:8b:d8:95:ef:84:0f:8e:3a:91:
a6:ef:43:7c:6d:68:8e:55:8e:a5:40:fd:91:2b:ff:b3:c3:81:
e1:44:e7:62:8b:5e:8d:2a:4c:e4:e5:c4:8e:e8:29:8a:6c:e6:
73:1b:4c:0f:92:de:46:73:7a:c9:10:df:a6:f8:25:50:b8:f6:
f2:99:66:18:81:f4:94:25:9a:b0:b0:f2:e6:26:ae:67:2f:19:
ad:fa:c8:f2:67:2d:9f:e0:a2:db:ee:1a:9e:c8:51:de:b2:2a:
6a:3c:cc:a3:58:44:fb:c8:c3:e7:4a:df:dd:ac:ae:81:8c:e4:
46:3b:25:64:51:72:66:44:f2:7f:14:e7:18:9d:2a:84:96:2e:
d9:26:40:a6:25:36:ad:dc:fc:f6:f2:3c:54:c8:9c:67:fa:16:
dd:0f:ec:62:a4:3a:b6:28:f6:80:69:13:93:ff:25:2e:df:c4:
30:2e:5e:69:d2:c1:aa:4a:a9:ab:49:2b:02:fd:18:5d:cb:0a:
10:69:e8:30:89:0f:c4:a9:0c:62:ee:f8:68:e9:14:d8:bb:f2:
07:96:f7:c7:e3:0d:06:03:f8:72:1e:1b:99:62:54:7f:65:e0:
56:79:2e:0b:66:9d:e4:44:85:b9:69:78:63:4d:bc:af:4c:a7:
44:61:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:04 2025 by rpki-client