Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: CWN4qbrmfxV1n93iYgzx1d7nT6s7Yu3urTWMpPWY+Oc=
Subject key identifier: 2A:82:A3:FD:C8:CB:81:97:2E:5A:53:7E:5D:D9:6D:B4:A2:44:5B:23
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 019A4F2B739E6E639C3C90A507007B31AF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 14:00:38 +0000
Manifest this update: Tue 04 Nov 2025 14:00:38 +0000
Manifest next update: Wed 05 Nov 2025 14:00:38 +0000
Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=)
2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: 8FW4lUrv0VbUPhImsnkhNjIJq98o+Kt+/f+2l2sW2RI=)
3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:73:9e:6e:63:9c:3c:90:a5:07:00:7b:31:af:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Nov 4 14:00:38 2025 GMT
Not After : Nov 5 14:00:38 2025 GMT
Subject: CN=2a82a3fdc8cb81972e5a537e5dd96db4a2445b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:93:18:64:ec:a0:ed:be:0c:8b:a7:8c:9c:
88:99:0e:46:fd:5a:99:c2:13:f6:ff:51:19:db:a4:
20:60:fa:30:4c:2c:49:79:4e:45:cb:fe:a1:ab:72:
f1:9e:b9:67:ba:1b:ea:a7:d3:1f:af:4f:6d:ef:7e:
2b:eb:33:51:15:9f:13:41:d5:9d:de:d9:a1:fe:f2:
7e:57:a5:d2:a9:a4:6f:d1:64:a6:a7:fe:94:cd:41:
6c:6f:a1:16:96:6f:b5:2a:7c:21:a5:7b:02:3a:7a:
43:88:72:4e:c9:bc:f2:8d:2e:fb:3a:7f:c4:48:cc:
92:1b:14:70:45:e5:58:df:8a:be:a1:52:c8:40:3e:
ab:ee:42:a1:aa:e7:55:fc:21:93:df:18:4e:3e:f5:
92:c1:58:f7:22:bc:25:37:b1:40:a0:b5:d5:10:99:
a2:98:aa:9a:68:38:5f:f4:fc:4c:51:36:2d:62:09:
0b:47:e5:5c:9d:c9:60:af:b6:22:3d:0e:ff:e8:2b:
c1:89:e8:dd:43:72:29:fb:26:8f:a9:44:bb:95:2a:
3b:cf:45:d2:0c:08:51:e5:cd:eb:e2:ee:66:09:36:
2e:3d:ac:4a:b6:e9:b7:c8:20:d9:b2:2c:e1:b0:1b:
10:7c:77:72:35:b4:2c:fb:d7:99:55:f7:a9:31:41:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:82:A3:FD:C8:CB:81:97:2E:5A:53:7E:5D:D9:6D:B4:A2:44:5B:23
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ee:b1:40:0c:ac:e1:d8:09:97:6b:7c:77:73:bf:f1:13:e1:
19:79:b4:b8:fb:08:0d:7b:e3:94:cc:87:b5:ac:23:06:1b:9a:
03:85:56:a9:42:b2:c4:77:a3:60:64:4c:39:ca:84:c2:65:b0:
cd:99:85:e7:5d:a0:32:b1:57:e5:b9:b2:01:19:2f:27:9d:4f:
2f:aa:e4:e7:43:ee:cc:68:2d:e0:1b:db:b5:5f:78:b2:9a:52:
76:87:f7:8d:a4:71:ae:c7:5b:27:35:d8:cd:0f:4e:cb:a0:cf:
f2:2f:91:ad:5e:75:7c:be:56:f2:29:07:f3:88:52:4b:19:89:
45:fe:87:2c:69:2f:2c:46:b6:64:55:e1:30:ef:cd:8d:6c:8b:
e1:8e:61:99:b3:a5:cb:29:fd:bf:c7:89:e5:3b:42:37:6c:fa:
79:25:d8:9f:62:ed:6d:b1:88:4c:34:1c:ac:46:2f:0b:1c:7b:
29:19:db:0c:2e:fb:ee:a5:72:cd:61:08:5a:9e:24:88:46:8b:
92:83:31:26:77:9f:c4:38:56:1f:94:d2:e5:9e:d9:e8:7d:c5:
a6:5a:1c:c4:87:e3:a9:b1:93:eb:89:5b:2b:b2:a5:1b:d6:93:
38:5e:6e:f4:a2:4b:71:7d:01:6c:45:2a:b8:0e:77:d7:1e:39:
d9:0c:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:08 2025 by rpki-client