Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: VG9WlSir503MdZncM4lplYSTXvdYRs0FXIRvgZDyXzI=
Subject key identifier: FB:A9:5D:1A:85:73:9E:CF:14:25:4D:46:0E:2C:CA:32:D8:4F:D2:CA
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019A52D1BC431AA52FC2C9F2425638AC3E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 1140
Signing time: Wed 05 Nov 2025 07:01:08 +0000
Manifest this update: Wed 05 Nov 2025 07:01:08 +0000
Manifest next update: Thu 06 Nov 2025 07:01:08 +0000
Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: BU8mz6BLP1O4v1SZv8Q8dj8WphrWbp3rORcRM04bTNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:bc:43:1a:a5:2f:c2:c9:f2:42:56:38:ac:3e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Nov 5 07:01:08 2025 GMT
Not After : Nov 6 07:01:08 2025 GMT
Subject: CN=fba95d1a85739ecf14254d460e2cca32d84fd2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:7e:18:29:e9:52:18:ca:39:40:a5:e9:a0:
79:3d:68:38:ce:53:9f:5e:96:60:ad:1f:c8:e8:22:
7e:c4:4c:47:6d:bd:b1:fc:d0:7b:a2:6f:9a:26:1f:
dd:ab:26:74:d4:d2:27:a4:2b:4a:cf:7c:d8:be:8a:
c0:48:5b:8a:f9:e0:1b:c6:bc:52:2a:12:79:40:33:
c1:4b:bc:a4:57:81:06:6a:6a:cd:1e:68:83:1e:16:
1c:9e:ab:e2:11:0d:67:f8:cf:a4:fe:02:05:6b:bd:
2a:47:1d:40:69:bc:ea:c8:8a:67:c8:71:55:7b:9e:
de:0e:fb:25:c4:05:a1:63:d9:c2:e3:74:a5:15:db:
1c:b5:b7:b8:45:f5:6a:b5:12:6c:23:9a:e0:4e:90:
8f:d3:4d:dd:b2:33:f2:c5:c3:64:20:32:93:54:da:
4c:ad:92:c4:57:11:6e:d8:a4:58:1f:8c:9e:e5:75:
d8:43:d9:7a:ad:ca:dd:42:5f:50:c0:44:1f:4a:a6:
9a:07:b1:59:2c:a7:ea:b6:d2:bc:c0:3e:5e:67:76:
00:0c:5d:4c:6f:cd:d2:72:61:24:e9:da:15:b0:70:
72:bc:a2:99:e7:4e:62:b7:e1:58:c5:83:e4:47:a8:
46:2b:81:e0:b5:01:d1:48:7d:03:73:0e:bb:19:2d:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A9:5D:1A:85:73:9E:CF:14:25:4D:46:0E:2C:CA:32:D8:4F:D2:CA
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:93:66:d3:a6:16:30:74:38:b3:d2:b1:20:88:4d:95:1c:74:
6b:f4:c7:cb:46:13:2d:b4:2d:bf:32:01:31:22:f2:bf:1c:ad:
1b:e0:70:8c:e6:af:c3:c6:38:c2:69:4d:54:f0:6c:9f:47:ed:
a5:cd:10:3f:9e:48:fa:8e:0e:4e:29:7a:74:ae:10:5a:a3:d1:
36:f8:05:78:d2:8c:ab:68:1a:a9:5b:b6:57:e1:e2:88:f3:53:
f1:54:e4:65:99:23:09:a7:5b:09:d3:6d:87:ca:b5:da:f4:c4:
f7:62:ba:40:e0:52:6f:6c:91:61:7c:bf:70:8c:30:fa:1f:2d:
df:ba:a3:f9:57:07:cc:01:e0:07:b8:a9:9d:9c:3a:b1:b0:67:
72:81:f0:65:fe:5e:0f:c0:92:18:59:9b:34:c7:7d:1f:bb:eb:
ed:ed:63:47:f8:e2:16:19:2e:99:b8:49:0b:64:c3:90:64:84:
13:62:7e:ad:54:76:e7:51:1f:3d:da:dd:68:57:63:42:16:9d:
49:45:ff:5c:53:59:64:30:bc:26:fe:28:3c:5d:09:98:ad:67:
99:fe:b5:36:f1:5f:33:21:ff:2d:0c:10:ef:76:b6:c1:41:d1:
b1:be:50:ec:bc:5b:94:51:7d:64:bf:f4:45:fd:20:e8:ff:2e:
a8:1c:de:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:17:52 2025 by rpki-client