Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier: bfcs4LQAODpiujegyNda6X2d4MAmlxYAz6dMQ+wKLdM=
Subject key identifier: C6:50:8D:89:E4:D8:FC:32:A7:56:56:69:53:C0:50:DE:CB:F7:66:28
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 019A4EF43A50DAA01F11E033A918D330CAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: 16PMvyBjwLMgKpIOkxrHYliD-08.roa (hash: Y3LQq9IlsGjKrSV01GWpHO25wmy0HId5ENMWGwyBnEU=)
2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: aQR1GLY0HoNYxGtCMzqJY+CwmlxnMjg/zsfvm2BGCjw=)
3: jgcslWHmygjkRIS6MtfzGhZ40MU.roa (hash: sDmrr8zpKt5WpBGAECM7NZQll745IxQeWlqllvJtGkM=)
4: nikcVRLPEkpjmj22Ziw5gbk7U3I.roa (hash: MneHYx5l45SiPBky73Uw5AM8Oy5u1LgkSXDWT7ZAv/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3a:50:da:a0:1f:11:e0:33:a9:18:d3:30:ca:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=c6508d89e4d8fc32a756566953c050decbf76628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:62:10:1c:a0:a9:a5:bb:97:f0:f9:d4:00:
ce:d7:79:1e:49:73:eb:4a:8b:87:00:f9:3d:37:bc:
ef:ac:98:0b:45:5d:8e:d6:29:18:a8:c2:43:13:af:
65:32:3c:0e:c7:63:19:9f:22:d1:a1:8f:cf:d3:e7:
71:b6:14:43:9e:f2:28:1a:72:e9:e0:6e:6f:61:9e:
b4:5c:a6:92:ce:52:69:73:81:26:14:05:2a:7e:a9:
77:51:e4:80:51:14:58:8c:da:2c:78:9b:04:ff:7c:
d5:23:84:18:45:da:d0:ef:1f:db:fe:8b:7d:bf:97:
82:1d:ea:d0:c8:97:04:9f:b9:8b:77:1c:37:a1:45:
5d:ce:e6:1e:2f:c7:da:79:65:66:4a:22:fc:c9:4b:
69:5e:bd:9b:b3:99:ee:34:14:40:29:ab:2c:82:8b:
9e:a8:13:7f:f2:bf:86:80:2f:cf:0b:a9:50:40:75:
32:19:3f:51:79:5f:c9:48:f8:ef:a7:4e:50:05:fd:
f6:a9:1b:8d:2d:c3:12:38:97:44:94:59:16:a3:c7:
32:c3:ce:da:ce:87:d1:28:0e:fb:ae:00:f9:c7:bc:
36:6c:62:ca:5d:60:c8:82:21:b5:8b:c8:fb:9a:86:
7a:6b:9b:3e:e6:4f:a7:b3:d5:5c:f3:3d:0b:33:6e:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:50:8D:89:E4:D8:FC:32:A7:56:56:69:53:C0:50:DE:CB:F7:66:28
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:be:86:d7:d9:4a:fa:82:74:53:81:0f:c4:b0:5a:5e:95:b9:
ae:ed:9b:48:9a:44:35:c7:a0:0b:0f:22:b6:ac:df:2c:7c:b7:
0b:f5:20:43:18:5e:12:e1:c4:e7:da:77:77:34:29:18:9d:90:
ae:ad:c3:ae:b4:fe:e9:3c:df:05:fe:20:ef:8b:12:89:4f:f7:
80:f8:01:9c:15:ab:b5:a9:45:29:ba:d1:8c:31:5b:b3:76:97:
51:66:dc:bb:5f:eb:16:cd:29:36:30:b5:2a:f6:4f:4b:c8:6d:
b3:09:8b:70:a8:a2:72:95:88:51:21:cb:7e:99:53:b0:37:db:
47:e7:2f:10:76:ea:2a:cc:1b:fa:7b:68:b3:3e:9a:7b:3b:fb:
5f:dd:aa:8d:e5:aa:f9:3e:9e:a9:88:cb:2b:52:25:f9:1b:79:
b8:a3:46:c6:d4:4b:56:8f:c6:71:7d:74:62:26:04:84:69:0d:
53:80:06:f6:57:45:6f:0c:cb:ef:4c:83:1e:6c:08:d7:c7:7d:
9e:9c:11:b1:f4:82:74:ef:fc:5a:be:20:6e:81:11:c8:c4:86:
f1:44:7b:cd:ad:92:fb:35:eb:1b:08:3c:d0:74:af:53:e5:04:
5a:19:c2:d0:bc:30:c3:5c:ea:fd:68:1e:26:3a:41:85:ad:c7:
9d:6a:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:18 2025 by rpki-client