Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
File: cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json)
Hash identifier: v1a6GyG95I/WKm8gx/9s3RmRLiY1/2kjpm7RvQXtXY8=
Subject key identifier: FE:72:9E:D3:F6:70:0E:2A:12:8E:B8:6A:3A:46:B6:6F:BC:80:09:7A
Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
Certificate issuer: /CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Certificate serial: 019A53E4307DA0D40CA0E2CBD4B8318711A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
Manifest number: 01C8
Signing time: Wed 05 Nov 2025 12:00:54 +0000
Manifest this update: Wed 05 Nov 2025 12:00:54 +0000
Manifest next update: Thu 06 Nov 2025 12:00:54 +0000
Files and hashes: 1: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: mZ+rLjeKwQgc+G1eyA3qKoq6WO1P4EFyvi/o1jo55ws=)
2: xhxuKJYrPBlCKVgSSZLbkArXr9M.roa (hash: eBW3Gn9+jBJu0tA7uYFfIKZTT8p/0XeRa4Z67cWs8N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:30:7d:a0:d4:0c:a0:e2:cb:d4:b8:31:87:11:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Validity
Not Before: Nov 5 12:00:54 2025 GMT
Not After : Nov 6 12:00:54 2025 GMT
Subject: CN=fe729ed3f6700e2a128eb86a3a46b66fbc80097a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:2a:ed:8c:2c:4e:98:fb:3c:35:5b:21:61:
f0:96:34:e4:e4:94:c5:6b:11:27:6d:78:82:32:11:
66:c3:cb:7f:d9:e4:eb:ef:6c:27:fb:55:3c:f2:4b:
87:81:93:8d:67:55:70:9f:58:17:a6:b8:14:1e:c1:
b6:50:97:76:57:c0:e1:15:85:ba:51:a2:ce:e9:8b:
e6:57:41:7b:6f:5d:de:16:86:d9:a1:ef:63:30:52:
49:60:9e:06:d7:9e:33:71:59:68:b6:ef:56:2c:51:
a7:8d:26:cb:d4:a8:05:00:6f:7b:5e:9d:04:dd:fe:
a5:1c:2f:97:80:ba:41:60:aa:98:73:50:85:6d:5b:
07:7d:bd:2f:8e:62:50:15:98:6f:de:86:d6:09:30:
f6:c1:43:d1:02:a6:00:3c:c4:18:9a:c9:b6:c3:29:
9b:44:30:6f:8d:e7:f6:c6:e3:69:b8:99:d7:40:9c:
ea:e4:a4:16:69:99:22:24:9f:fe:b4:9a:f8:61:48:
f0:2b:2c:9e:5d:03:90:88:eb:be:4c:d5:fe:15:80:
34:9e:e5:61:16:30:e1:84:82:6c:46:ca:b5:bb:ed:
79:82:d0:e9:cd:c3:5f:3e:ff:df:79:3f:06:8d:ed:
3d:ec:35:c6:44:4b:6e:44:b3:fd:7e:51:54:7b:cc:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:72:9E:D3:F6:70:0E:2A:12:8E:B8:6A:3A:46:B6:6F:BC:80:09:7A
X509v3 Authority Key Identifier:
keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:c7:ae:3f:62:0a:fa:5b:d3:c8:d9:8c:3e:4c:38:30:7f:05:
8a:41:b0:ca:2e:56:27:29:28:ec:c3:ad:cc:3a:04:6a:67:a7:
8e:5c:e0:23:91:e0:38:84:7d:0c:41:f2:a6:21:b6:8c:b0:3f:
e7:f9:a9:ab:ef:d6:39:bc:50:4d:95:05:9e:18:57:5e:ca:b7:
70:51:7e:ed:32:9b:91:c6:f0:2f:53:f2:54:a8:08:ce:b9:e1:
30:3c:56:af:50:a0:98:d9:df:83:aa:89:c1:99:e0:81:08:83:
a8:aa:43:d7:25:7f:8c:92:fe:c8:4d:db:8b:e0:9e:92:ba:ae:
b6:cd:ef:57:a4:af:02:a6:fb:42:bb:6e:5f:20:c3:ed:06:73:
47:ec:6f:2b:91:40:5e:f3:6d:23:7d:90:e4:53:45:5d:d9:35:
a2:38:94:e1:21:d9:aa:b3:a0:14:6a:1a:d9:9b:3d:ce:ab:75:
0b:b1:b4:72:f2:d9:ac:5c:aa:0d:e4:fd:81:6b:4f:cb:0a:d0:
c3:f8:6a:cd:a8:d2:2e:b4:b9:de:d8:c7:0d:32:7c:fd:62:b6:
1a:a0:61:9f:4a:15:4d:ff:75:c7:27:b3:e1:dc:2f:26:9e:4e:
b5:94:39:4f:2c:2b:34:04:02:97:7c:2a:41:61:aa:b8:8f:b5:
ba:0e:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:14:21 2025 by rpki-client