Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: h9xy7ncCq1986kUX/lOHVrd1JsICini6L1iYe+7XyBo=
Subject key identifier: 84:82:AF:EB:37:2D:18:26:AF:64:37:82:C5:56:FF:33:02:75:9D:D7
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 019A4FD06A35D56E3C369C68F223B96F17DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 17:00:49 +0000
Manifest this update: Tue 04 Nov 2025 17:00:49 +0000
Manifest next update: Wed 05 Nov 2025 17:00:49 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: 1nPV8Q/Ch/s1Vabn5/XYCJMtLtZrxbCJpCdZ8161ToU=)
2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:6a:35:d5:6e:3c:36:9c:68:f2:23:b9:6f:17:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Nov 4 17:00:49 2025 GMT
Not After : Nov 5 17:00:49 2025 GMT
Subject: CN=8482afeb372d1826af643782c556ff3302759dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:07:da:6c:4a:fd:47:8b:66:3f:37:b6:56:
a3:4e:a4:38:50:36:f3:cc:6c:db:3c:ca:99:c9:1b:
34:9f:8b:7c:de:63:d3:ad:d1:b2:b2:16:9c:6e:32:
fe:0b:0a:62:a2:52:72:3e:b3:fd:9b:05:ec:a0:18:
1f:36:30:e8:74:52:72:3d:99:b8:b8:21:7a:81:c7:
15:cc:de:55:31:8e:b6:85:57:e9:dd:46:b7:e6:93:
09:cf:14:a4:30:b1:6b:d9:ea:b0:38:4d:5a:87:29:
3d:92:d6:3e:49:33:6d:bb:70:32:25:ca:47:1b:55:
f7:a6:4c:51:1c:ee:e0:41:de:60:ee:ca:a6:64:28:
89:f3:57:83:32:fa:0f:50:83:2c:43:e8:45:a7:e9:
31:80:d2:4e:31:ce:a1:85:26:3d:26:b0:cf:f2:40:
35:40:dd:a8:1f:5b:60:50:e0:e0:c5:a7:b8:b6:a1:
dc:5b:69:37:fc:61:6c:6d:ac:23:c1:9f:f9:b1:c8:
6e:92:4c:60:61:6b:7b:a8:61:40:30:69:a9:14:4d:
12:c6:aa:aa:b8:a4:ab:62:cd:58:8d:ac:71:00:21:
88:41:52:1e:c8:20:e7:7b:c9:14:d4:b7:15:c0:9c:
d1:1c:41:06:02:e8:c8:71:35:9f:da:d5:89:e5:04:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:82:AF:EB:37:2D:18:26:AF:64:37:82:C5:56:FF:33:02:75:9D:D7
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:88:2a:83:b5:35:0a:ff:4d:26:a4:12:64:e9:02:e6:06:13:
1c:fa:37:0a:93:b7:ca:30:61:ef:21:8b:03:11:16:10:90:98:
4a:af:e0:52:b0:2f:7a:08:44:20:64:5c:ee:fb:d8:5d:27:66:
b6:f7:24:e6:5f:d2:2f:a0:ad:46:a1:da:29:c1:da:3d:d9:56:
15:4a:b7:fc:7c:a0:77:4f:7d:1b:ef:7a:43:db:32:1e:00:cc:
fa:04:c7:d1:27:22:a1:1e:d8:b6:73:8d:2b:22:cd:b5:a5:12:
d8:cf:f3:85:0c:ef:a6:b0:1b:1c:01:18:5c:63:f4:f3:ff:a0:
d2:66:1c:95:2e:ed:e5:27:aa:33:f3:3c:26:09:64:4a:07:df:
cf:5a:78:48:f8:01:d7:bd:74:b7:fe:b7:58:3c:1d:4d:eb:b1:
42:d0:ba:9a:29:f9:4d:96:69:8b:f1:b1:82:6c:3e:b4:a6:5a:
a5:c8:3a:0c:6d:f6:13:cf:cc:4e:f2:1a:d6:b5:82:c7:a5:4b:
0d:5b:34:1d:57:a2:e2:75:83:02:65:4b:c5:93:38:24:f6:fb:
dc:18:11:1d:f0:2b:9e:00:14:c1:72:76:25:9a:50:cb:3f:98:
64:c7:62:5a:1a:70:d3:27:de:83:50:57:b4:cb:36:cf:b5:e5:
d8:e0:54:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:31 2025 by rpki-client