Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
File: cGt_6orTURHKaHqc0ApJ-aTwRZs.mft (raw, json)
Hash identifier: s2FUXY4UsR0pQc4Mkp8be/UiqAS6uiuvCSYAZxUt1yc=
Subject key identifier: 20:FC:13:29:44:05:92:C7:8E:5A:16:FB:47:49:68:B8:99:69:D0:7F
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial: 019A51F55AB25818F6E18FB5CC7B3ED137E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
Manifest number: 1707
Signing time: Wed 05 Nov 2025 03:00:25 +0000
Manifest this update: Wed 05 Nov 2025 03:00:25 +0000
Manifest next update: Thu 06 Nov 2025 03:00:25 +0000
Files and hashes: 1: 1-i7nGTwXEwybr4Pzt1yuXERVK6c.roa (hash: 6WebZuQEVFb53qv4JdObZh7gRJmnrMnS1KiKHpMOHA8=)
2: F98rZRsLL_WSYn3n29uuLg-FPR0.roa (hash: 73uq7x903k93laF4iGlteDX6rFg0Y3etQUcDdi1l7lg=)
3: R66tp2YspSa0WKGVVBRpgjOOMSc.roa (hash: vAJd7pQTatYNcNboScZHezKRexmDJyWedTR7sHg29G0=)
4: VPHhytFNuubbFjm4tYvAl8Nd2ZE.roa (hash: 6/FzWhj3KyFvDY5lx/pXSGk3g0b0b2s63jOD/2yTOio=)
5: cGt_6orTURHKaHqc0ApJ-aTwRZs.crl (hash: muIpUMvpcu/KifTuOPoT8obyKU2awWKQrcECZS+tw/Y=)
6: zMZkIjmJ2QpgvnpDUAinKvhQb1o.roa (hash: Y7E9I/njb2IhcUidLKH3fAcdQ31FJYDtFn4eagm4C1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:5a:b2:58:18:f6:e1:8f:b5:cc:7b:3e:d1:37:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Validity
Not Before: Nov 5 03:00:25 2025 GMT
Not After : Nov 6 03:00:25 2025 GMT
Subject: CN=20fc1329440592c78e5a16fb474968b89969d07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:fb:06:0a:c2:4c:c7:cc:70:67:5e:a3:9d:
1b:e8:4e:f1:f1:c1:3f:8a:49:6d:76:65:d7:db:f9:
d9:23:ce:7e:09:fd:c1:92:39:ea:27:2a:6b:51:1c:
4c:13:6f:62:af:d9:52:67:dd:06:d1:c7:02:53:35:
20:0f:4b:eb:a8:66:e1:62:35:e6:76:80:15:af:32:
0f:ae:85:0c:69:47:0d:ff:d6:98:4f:e3:1a:68:da:
8a:da:87:37:65:29:ef:23:63:0e:6f:ba:9e:d1:37:
8a:98:75:52:03:1f:b1:a6:0e:c9:ca:cf:aa:19:7b:
1d:61:77:d0:cb:06:a0:b8:75:59:ef:53:d0:ec:e8:
c4:98:64:df:75:8a:a7:d2:16:e8:05:39:cc:07:bd:
d9:f7:22:9e:e0:c5:33:da:3a:01:d7:6a:0f:6b:60:
b7:91:68:f8:ed:d0:0f:aa:a5:f8:2e:de:de:86:33:
6b:e9:26:16:78:66:75:e1:10:ca:55:78:c5:5e:30:
02:0c:f1:73:73:39:90:25:47:51:9e:56:e1:37:84:
19:7c:08:0f:68:de:63:f1:64:c1:8a:c0:cc:95:69:
d6:37:f2:10:98:05:a8:81:bc:8d:93:42:72:94:49:
4c:61:16:aa:74:cb:46:ea:59:90:aa:97:49:af:76:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FC:13:29:44:05:92:C7:8E:5A:16:FB:47:49:68:B8:99:69:D0:7F
X509v3 Authority Key Identifier:
keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a0:ea:2d:9e:ae:20:71:32:7d:b1:e3:84:4f:30:d5:38:da:
11:d0:43:cc:90:07:f4:6e:e5:4a:74:17:ec:02:3c:49:36:ad:
92:30:ff:22:e4:d6:e1:c8:ea:d9:79:63:0b:59:3f:8b:26:76:
59:78:e2:12:44:88:53:4a:eb:3c:e3:d6:75:21:5c:03:b9:93:
cb:2d:d4:95:a0:78:8a:59:be:8b:74:6a:bd:2a:c3:d4:1b:7c:
1d:ac:3e:64:b1:b1:15:34:6a:97:cd:f9:83:80:be:82:07:d0:
b5:7f:15:bf:4c:af:af:43:84:22:14:64:5e:7d:f7:b8:b5:03:
7e:c6:33:13:4b:1a:fa:f2:a1:11:53:7e:e7:22:12:4c:2c:05:
5a:c3:38:a4:fe:b3:72:60:a6:94:21:9d:d3:8e:a2:f8:2c:b4:
d5:00:b9:53:f9:4d:43:86:e1:dd:e4:8e:bb:2c:b6:2e:af:0f:
da:ea:3e:04:72:20:c5:c5:46:cb:be:8c:57:7f:01:6b:3d:59:
74:20:3a:33:4d:4b:d4:fc:e9:25:d5:55:25:94:9d:c7:84:fe:
7b:5d:fa:1e:71:49:91:2f:bc:4d:0f:e7:d7:e4:ab:7f:82:3f:
af:67:d1:3b:85:ce:53:ea:34:97:0c:87:e9:bb:55:1d:c2:80:
c8:8a:1f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:04:12 2025 by rpki-client