Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: OyOb6IJ2+saY8LuJ3lADMSXauh0w1FMor2kBHMZQBIg=
Subject key identifier: 3C:AB:D6:FA:E1:92:DA:51:C5:F8:19:3F:E4:1E:B0:7F:B2:D0:FB:8F
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019A50E328EF740C146BF8FB9E046FA794BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 113F
Signing time: Tue 04 Nov 2025 22:00:55 +0000
Manifest this update: Tue 04 Nov 2025 22:00:55 +0000
Manifest next update: Wed 05 Nov 2025 22:00:55 +0000
Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: aotISDo4Mmw2MY1DkpToiz2knA9qvOBMmlrQwV0b2so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:28:ef:74:0c:14:6b:f8:fb:9e:04:6f:a7:94:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Nov 4 22:00:55 2025 GMT
Not After : Nov 5 22:00:55 2025 GMT
Subject: CN=3cabd6fae192da51c5f8193fe41eb07fb2d0fb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:e8:cb:fc:2e:cf:84:b9:32:88:f4:e9:f2:
b4:4c:0e:ca:3f:e7:09:12:a6:99:4f:47:3c:11:1c:
0b:55:c7:9f:77:c4:a0:fc:1a:f0:11:dc:1e:d9:37:
d0:b8:17:98:f2:72:44:59:d1:5d:5d:42:ac:71:c9:
95:cc:1d:b2:2b:c1:75:4f:81:6a:22:6c:15:2c:5c:
6b:f5:4f:0f:e6:c7:f7:8b:e0:6e:5f:9d:13:c9:46:
9a:7e:4e:3d:5e:3b:bb:c0:ca:9f:56:31:4f:08:76:
b7:4d:a3:65:3e:de:ef:a9:fe:79:2c:bd:db:9b:24:
5e:76:dc:86:38:8f:49:b6:97:eb:e0:e8:00:a4:14:
ac:04:fa:17:a2:43:4c:19:50:f4:5f:62:e1:74:3a:
d0:08:3d:9b:2c:32:9c:b7:74:cc:35:7e:d7:5b:b8:
a4:40:12:e2:7a:77:81:02:fd:56:55:cc:1c:18:db:
d3:b7:36:d9:82:bf:88:c6:98:46:2b:7d:f3:c9:1b:
6c:42:7a:22:f2:d4:2c:28:23:95:1f:8d:be:4e:15:
f3:6a:55:38:b3:06:4a:a3:bd:4a:41:55:d4:bb:15:
9e:e7:10:1e:f7:e5:e2:49:a5:d6:08:d6:b4:fe:53:
89:8c:84:d9:53:b9:e1:15:27:10:df:34:87:a3:da:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:D6:FA:E1:92:DA:51:C5:F8:19:3F:E4:1E:B0:7F:B2:D0:FB:8F
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e7:d9:17:9b:fa:40:89:15:75:a1:13:9d:ae:d7:97:1c:95:
5d:5a:21:37:4f:11:d4:45:93:ec:6f:6f:55:a5:82:e4:ef:0a:
4b:4c:e9:c9:5c:9d:49:40:48:fe:c8:5a:4d:ef:fb:50:a3:25:
5b:4a:1e:14:c5:6a:69:d3:ee:38:27:09:2c:5e:0f:c1:e8:2f:
ed:af:14:6e:bc:8f:62:ee:17:1e:69:ce:56:99:82:29:98:36:
b3:a0:9b:ac:eb:ed:44:56:41:25:27:00:c4:04:91:1d:23:c3:
51:fd:6a:c3:0e:52:eb:66:18:60:bb:f8:95:c5:b1:19:db:b1:
28:1e:fb:db:8b:ab:53:ab:55:45:3d:74:7b:56:f2:70:31:1a:
53:ec:31:f0:3b:7b:a8:ff:8b:6f:db:a0:1c:b8:ef:c4:3c:d1:
cd:c4:3c:ee:28:34:b0:ee:de:d5:88:71:6a:ac:d8:60:a9:d7:
da:0b:75:49:07:34:0c:6d:b4:ea:11:31:c0:c0:31:d2:f2:9c:
5b:d5:09:b9:7e:a3:de:56:86:3d:c6:b1:43:73:e1:e1:b4:87:
19:19:2c:5a:9e:82:c1:4c:7a:d4:1e:cc:ec:c6:b3:3f:b8:d7:
80:0b:d1:bf:f8:57:83:8b:9e:e2:dc:8e:ec:65:a7:a4:ad:b7:
25:42:4c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:02 2025 by rpki-client