Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File: cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier: 276i0yw/AZP6y3y8ghIL/fFHt2v8gaS6JJciELDY7xY=
Subject key identifier: 04:77:16:AD:3C:BB:03:57:FE:60:A1:3F:A0:EF:30:C6:AA:E9:64:9A
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial: 019A4DE19ADF49CBAE04038F111AF3384E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:22 +0000
Manifest this update: Tue 04 Nov 2025 08:00:22 +0000
Manifest next update: Wed 05 Nov 2025 08:00:22 +0000
Files and hashes: 1: 1StjY6ciJznhPyYxQBCtbtGwaQQ.roa (hash: KYR87feBQd9Q/2I+eempgJ/F1tZKbS1g203PDf9yV98=)
2: ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa (hash: GVvErxNa6lMweOfM26d5UbHyagv3mNP8YwwVTBiOPVM=)
3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: lw5jO7jYXYuXqw7FDU/TWXZRjrBLKxsr2t3iyqXFgyA=)
4: m43cWo3KgEuK9Hc3g86LdUpWJLc.roa (hash: xJI2lb3t7JjEal+fMcBS4JFRrMKS832WVOggygXFByA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:9a:df:49:cb:ae:04:03:8f:11:1a:f3:38:4e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
Validity
Not Before: Nov 4 08:00:22 2025 GMT
Not After : Nov 5 08:00:22 2025 GMT
Subject: CN=047716ad3cbb0357fe60a13fa0ef30c6aae9649a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:f5:4b:af:c8:c2:ca:81:6f:63:44:8c:af:
e8:c8:38:ce:2a:a1:da:71:ee:02:d7:be:43:ed:76:
68:50:43:12:4d:0c:33:54:00:05:b7:ac:e6:cf:5e:
6b:60:b1:35:1d:fd:a1:28:ba:50:32:7a:66:2d:86:
6d:3e:50:fe:43:5a:41:43:52:71:18:4b:23:ea:dc:
1a:91:3e:6a:7d:0b:c3:8e:62:fe:15:39:8b:6e:4e:
32:24:ea:f6:7a:3b:13:06:50:1a:db:ff:72:1b:f3:
7a:e9:4f:b2:4d:78:fc:a8:b3:72:f3:15:f6:50:f9:
50:44:ee:94:01:18:50:74:25:9f:b3:6d:0a:15:81:
ec:35:a3:61:23:9a:62:11:e4:a1:45:39:ca:8a:79:
f6:00:b5:bd:3f:0f:11:f9:8c:02:56:21:5a:94:0a:
f4:93:38:3c:11:a1:38:91:96:2a:50:d1:b7:e8:d7:
27:16:ee:2f:89:f7:56:26:f7:a0:b6:40:8f:e7:50:
93:72:b8:f7:92:70:a6:6e:b6:b0:52:c9:04:80:2b:
49:6b:02:76:cf:d7:5b:ad:b7:4a:d3:5e:37:bd:47:
d3:0c:47:77:e0:3a:9c:b3:ba:3f:7b:af:ed:76:66:
74:e0:b4:50:7f:85:4f:76:40:e2:d9:50:1e:cd:18:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:77:16:AD:3C:BB:03:57:FE:60:A1:3F:A0:EF:30:C6:AA:E9:64:9A
X509v3 Authority Key Identifier:
keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1f:db:b7:f0:53:5a:c4:b0:07:8c:b0:b8:99:35:db:9d:83:
8e:38:c6:3b:b9:72:c0:c7:5e:8d:8c:34:0d:67:25:e3:8b:24:
2b:46:4c:28:7e:5c:04:3d:99:2f:dd:45:0c:10:de:9d:f3:e5:
92:8a:55:26:c6:85:89:02:6a:2d:0a:88:82:dc:f7:0e:22:fa:
51:f3:cc:6a:f4:81:6b:ea:16:dd:e7:0b:d9:3a:1f:70:13:6b:
d9:06:47:f6:34:b5:47:72:94:f8:46:90:fd:62:5c:c1:c7:9f:
85:c3:6e:58:c0:db:c4:dd:1b:86:97:b5:62:c6:6c:ff:77:45:
d7:99:db:7e:74:52:61:7f:29:2e:20:6e:79:9e:fb:30:bd:4d:
09:14:d3:da:2a:d9:d8:65:03:3e:48:1b:5d:d8:ef:02:41:31:
58:ee:51:b6:2b:e0:12:f1:85:3b:fb:b3:7e:67:49:3f:de:8a:
3c:ec:e9:74:57:a9:65:da:91:c2:87:24:52:d9:45:a6:5a:db:
a4:da:93:4a:a1:b1:1a:74:94:6b:bb:db:60:c2:f7:21:d3:dd:
e5:81:b2:39:cb:cb:a6:13:82:f4:04:13:7e:bf:84:f9:0e:d0:
2d:90:64:70:95:ed:9e:99:26:69:ce:aa:00:53:3c:1b:74:64:
ee:b1:02:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:22 2025 by rpki-client