Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: AoGfari13H5KrdIXSRbCdZchKHCb6U/F3fwI7+Ezs9c=
Subject key identifier: 77:04:E5:9C:15:AA:41:44:8B:EA:5E:C9:F0:3B:DA:31:CB:61:1E:B8
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 019A4EF4E44FCCBDEF9BAF4D14D0EAEABEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 1722
Signing time: Tue 04 Nov 2025 13:01:03 +0000
Manifest this update: Tue 04 Nov 2025 13:01:03 +0000
Manifest next update: Wed 05 Nov 2025 13:01:03 +0000
Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=)
2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=)
3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: iHFeulWzeOFyZFmqu3eAZYPu+atqAEC/ku4aAIGpz5I=)
4: I9n8PdlI12zk3ftrt5ZejA1FrCU.roa (hash: kf3O7lpj7s7VfmT2vuNx6GwPZjLLFUhTpSV85VBR1i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e4:4f:cc:bd:ef:9b:af:4d:14:d0:ea:ea:be:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Nov 4 13:01:03 2025 GMT
Not After : Nov 5 13:01:03 2025 GMT
Subject: CN=7704e59c15aa41448bea5ec9f03bda31cb611eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:af:5b:39:43:61:6a:95:16:be:9d:fe:12:c1:
18:cf:5d:13:1f:71:c5:80:24:ab:8d:25:fd:e6:11:
52:ba:a0:81:bb:e7:55:00:a6:6e:0a:3e:de:7a:73:
3d:e0:c5:15:97:b8:f2:88:a0:0a:16:e1:3e:40:b3:
23:cd:81:45:cb:9e:db:0b:78:95:68:34:f5:e8:19:
01:c1:d7:d1:43:4f:11:31:3c:c7:f2:f2:11:a2:e3:
fd:72:c8:34:67:c2:20:e0:b8:72:45:1d:9c:41:e8:
ac:f9:41:a4:d1:9e:0a:19:07:31:26:64:c3:58:55:
bd:67:87:11:de:af:b9:0c:cc:16:87:d3:b0:d7:18:
21:2b:02:65:78:b6:93:60:57:58:10:e2:5d:f2:3a:
0e:e2:d5:e6:58:ab:04:e1:07:74:4e:34:90:2d:1c:
3e:86:b5:96:41:05:52:70:7d:6a:07:05:44:f7:d5:
53:58:a1:c6:bf:76:30:a6:a2:20:25:31:b1:f2:7f:
78:9e:58:e1:f6:da:c7:58:7b:05:48:7a:5c:d4:e8:
3e:fd:a3:35:0e:cc:69:f8:13:ab:2b:80:d1:14:dc:
18:e9:a7:81:5a:14:94:c3:d8:77:a8:f7:f8:74:45:
44:2a:85:c2:1a:a4:89:25:96:9c:43:86:a7:c9:af:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:04:E5:9C:15:AA:41:44:8B:EA:5E:C9:F0:3B:DA:31:CB:61:1E:B8
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:87:a3:02:a1:4f:c7:5d:b8:fd:30:9f:cc:18:39:e1:76:05:
a0:97:a5:a9:76:bd:53:a1:04:44:96:5b:16:47:ae:64:2a:0a:
f6:ba:84:f8:aa:80:1e:a6:92:e9:54:e6:53:46:cb:2d:53:dd:
11:c2:ef:92:db:36:b2:63:71:4e:61:2e:bc:57:68:69:60:db:
e4:e0:c6:01:3e:94:72:4c:6c:a6:a1:81:e4:40:b6:09:10:f3:
d4:c1:45:c3:80:25:2d:39:e0:93:bd:d1:7a:a8:c8:18:70:82:
ba:fa:c5:a3:43:8c:03:bd:da:da:0f:77:39:4e:e1:0a:f3:59:
7c:0b:a0:74:8c:09:a0:78:63:15:ec:aa:a7:29:cc:05:82:75:
d4:91:3f:92:eb:51:b5:9f:25:d8:09:e8:8a:09:34:e9:a1:c6:
7a:ba:48:53:09:66:d9:fa:15:cd:44:ea:76:0a:19:b2:36:80:
92:72:25:06:b1:0d:1f:d4:b1:86:b3:78:22:3a:1d:e4:70:78:
1d:25:88:b6:5c:61:0c:68:af:75:5c:9e:19:55:b7:e6:ae:b9:
1e:59:80:72:f3:05:70:a2:7b:49:47:1b:54:ef:56:bc:8e:b9:
17:ba:ca:b4:0e:37:e5:1d:c0:c2:bc:e3:f3:53:bd:62:4b:07:
f5:4d:ee:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9ORPzL3vm69NFNDq6r64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0
NDkwMjcwHhcNMjUxMTA0MTMwMTAzWhcNMjUxMTA1MTMwMTAzWjAzMTEwLwYDVQQD
Eyg3NzA0ZTU5YzE1YWE0MTQ0OGJlYTVlYzlmMDNiZGEzMWNiNjExZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q9bOUNhapUWvp3+EsEYz10TH3HF
gCSrjSX95hFSuqCBu+dVAKZuCj7eenM94MUVl7jyiKAKFuE+QLMjzYFFy57bC3iV
aDT16BkBwdfRQ08RMTzH8vIRouP9csg0Z8Ig4LhyRR2cQeis+UGk0Z4KGQcxJmTD
WFW9Z4cR3q+5DMwWh9Ow1xghKwJleLaTYFdYEOJd8joO4tXmWKsE4Qd0TjSQLRw+
hrWWQQVScH1qBwVE99VTWKHGv3YwpqIgJTGx8n94nljh9trHWHsFSHpc1Og+/aM1
Dsxp+BOrK4DRFNwY6aeBWhSUw9h3qPf4dEVEKoXCGqSJJZacQ4anya89TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcE5ZwVqkFEi+peyfA72jHLYR64MB8GA1UdIwQY
MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt
MDU0OGQzODk1YTU1LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1
LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoejAqFP
x124/TCfzBg54XYFoJelqXa9U6EERJZbFkeuZCoK9rqE+KqAHqaS6VTmU0bLLVPd
EcLvkts2smNxTmEuvFdoaWDb5ODGAT6UckxspqGB5EC2CRDz1MFFw4AlLTngk73R
eqjIGHCCuvrFo0OMA73a2g93OU7hCvNZfAugdIwJoHhjFeyqpynMBYJ11JE/kutR
tZ8l2Anoigk06aHGerpIUwlm2foVzUTqdgoZsjaAknIlBrENH9SxhrN4Ijod5HB4
HSWItlxhDGivdVyeGVW35q65HlmAcvMFcKJ7SUcbVO9WvI65F7rKtA435R3Awrzj
81O9YksH9U3uOg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:15 2025 by rpki-client