Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File: CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier: zcXPGQHVrW4F7vbbZBdqdYOJMNLjuzqexLa1lEvaj2E=
Subject key identifier: 9F:3B:06:D7:9B:68:B6:F5:67:EE:C7:34:14:95:64:25:81:10:3B:6A
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 019A503DD2635084837612E9576186E4FF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number: 16AA
Signing time: Tue 04 Nov 2025 19:00:20 +0000
Manifest this update: Tue 04 Nov 2025 19:00:20 +0000
Manifest next update: Wed 05 Nov 2025 19:00:20 +0000
Files and hashes: 1: 4R0hMhGbrDC4YVyzf1jrL8oQuI4.roa (hash: TLs9gVQTwy70mjzgj5kCuIcV2uNBgbxlOI07lSwnnow=)
2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: gk015Q/IqupU+8hHJNWYWNuBvIu4oUlWtECiFLFtobA=)
3: cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa (hash: KXI7i+vv4GJ48vExO8crdEraeejXsQsIm7BOAxvY6pM=)
4: noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa (hash: BthsLkB+ZFXPf15eE+Y7pQxlaiPPySEZY4ss84bAVsM=)
5: pkrI6iaUdda-z9WYMFjdcxpmXjo.roa (hash: hMCs1gjsYAVaOoAjArkJ6N1TgykfFMKnI+aiOTGukGc=)
6: tV6sObvzgTfPgUJ_zmLWZJP23Js.roa (hash: ruAGmOYz2wd7CtdLjtd2pZCz/+RLCcgBY+LOgFhOP3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:d2:63:50:84:83:76:12:e9:57:61:86:e4:ff:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Nov 4 19:00:20 2025 GMT
Not After : Nov 5 19:00:20 2025 GMT
Subject: CN=9f3b06d79b68b6f567eec7341495642581103b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:c4:e5:3a:53:eb:9a:e9:f8:98:65:32:fc:
f3:ce:97:d2:47:2b:95:9d:48:50:79:62:82:e9:29:
f9:0a:f9:08:5a:eb:53:b4:0f:12:53:ed:c5:92:bc:
1a:21:43:ae:37:52:c9:cb:6d:4a:e4:e3:b2:60:f1:
f8:10:98:22:ba:4d:30:be:02:11:8d:6b:a6:6c:fc:
b8:c4:14:59:1f:7f:e6:be:ba:25:ac:43:dd:b7:8b:
12:5e:ff:38:d8:0a:1a:84:e6:00:3d:8f:f4:92:9b:
f5:31:ae:eb:bc:b3:d3:d4:db:aa:bf:5e:f9:e7:d7:
10:f0:1c:19:bf:d6:25:f3:40:ef:0d:b6:ee:cc:60:
ed:4f:97:c6:5d:e9:8e:99:6b:1e:07:c5:77:c2:e0:
3b:d1:b1:d1:ca:91:e4:ed:e6:a1:36:74:97:00:62:
66:b8:93:79:3c:19:61:06:af:62:6a:dc:cb:dd:9a:
fe:cd:35:8b:ff:02:1f:36:26:65:28:71:4f:3b:53:
4f:e7:b3:d4:be:d6:b8:58:15:ea:c4:34:c3:dd:11:
db:a1:25:30:68:9c:94:02:4e:12:06:18:cf:61:43:
12:c0:1f:70:6c:7e:b4:d3:63:2e:51:ab:55:c0:a8:
56:7c:91:5d:59:d8:b0:79:f2:87:ab:b0:8b:35:9a:
7c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:06:D7:9B:68:B6:F5:67:EE:C7:34:14:95:64:25:81:10:3B:6A
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:79:2d:2a:43:30:10:3d:c2:6a:64:7f:75:4e:f4:6d:b5:25:
1b:e9:83:b6:55:de:82:a8:e0:96:3a:e5:3d:02:e5:cc:ad:38:
91:b2:16:3b:fd:5e:a9:35:a2:4c:9e:96:17:cb:ba:a9:cd:e4:
14:fc:44:7f:d4:01:71:8f:ef:38:23:34:0f:e2:52:f2:02:c2:
44:99:94:41:91:bc:6a:ce:2b:3f:23:ef:f6:c9:64:09:e6:2d:
93:7c:c8:70:ea:60:92:87:10:3f:8b:29:66:3d:f6:52:28:f0:
66:a2:75:63:00:a7:c4:56:c5:4c:c4:e9:3b:48:6b:c2:48:dc:
5c:66:73:c3:af:19:49:c5:91:5c:a0:12:85:65:2d:c3:32:be:
84:d9:4d:1d:d0:7c:7b:be:73:76:aa:81:aa:3f:a3:0f:7d:90:
bb:2a:ef:b3:3a:fb:51:1c:e4:3a:5b:e3:60:a0:2b:9c:1e:4e:
c2:c6:33:06:75:84:a5:1a:b8:c2:54:fb:74:2f:fc:6a:e2:19:
4c:a0:cb:46:61:2d:8a:96:f6:08:33:92:98:4e:23:1d:8b:f4:
54:ed:dc:86:68:76:9f:4d:86:2c:b5:ac:2f:16:14:73:e8:2f:
13:54:a2:97:3b:4f:19:8a:09:25:7d:68:54:2b:76:71:c0:2c:
58:4c:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:59:55 2025 by rpki-client