Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: mshjdFRP5O/hnU+B550eucCLdTxiWHG5sBWTUwIBZ18=
Subject key identifier: 73:5C:F5:40:72:3F:44:FD:B8:30:04:D2:AF:FE:68:F0:3E:2B:0A:35
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 019A4EF4C8E0A2621BF6961694A11DEA7BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:56 +0000
Manifest this update: Tue 04 Nov 2025 13:00:56 +0000
Manifest next update: Wed 05 Nov 2025 13:00:56 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: JUySzjWwCC6Rh8uVQEYIVFBWZ0Cj/Swax++PCMZHO+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c8:e0:a2:62:1b:f6:96:16:94:a1:1d:ea:7b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Nov 4 13:00:56 2025 GMT
Not After : Nov 5 13:00:56 2025 GMT
Subject: CN=735cf540723f44fdb83004d2affe68f03e2b0a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:f9:7a:4d:55:bf:f4:72:85:24:5e:d2:9d:
11:2c:02:42:b1:5c:a3:ef:f7:72:cf:e5:d8:0a:f7:
30:d6:21:cd:e2:cc:a2:7a:3d:0a:89:f2:69:4b:5b:
7f:c0:cb:10:8b:7e:7a:4d:b4:63:a4:9f:24:a1:1e:
dd:42:1f:3a:a7:4a:a6:7b:07:27:41:d4:ed:ef:65:
db:d3:b1:c7:94:9a:55:08:a6:aa:ea:04:74:02:18:
b3:42:97:8b:71:35:9b:93:e3:5f:89:99:0b:22:d9:
0e:d4:fc:25:83:9f:fb:f1:44:af:8b:34:84:c0:cd:
a4:57:8d:69:4d:80:15:5a:f5:74:91:6b:48:57:f7:
4d:7e:b4:05:a8:63:21:74:93:9e:43:ec:49:ed:ce:
fd:ad:4d:12:ab:11:78:92:28:b8:11:c3:d0:a0:e4:
38:05:5a:f7:06:db:28:be:ee:0d:eb:12:23:e0:8a:
92:79:b0:cd:fb:5b:05:68:8a:d0:77:30:88:04:8e:
ec:0f:da:11:23:45:bc:ef:e8:42:f1:86:37:d7:f0:
bc:a9:27:06:c7:01:f4:b4:76:c7:6d:9c:09:47:87:
f2:3e:59:ed:7f:83:fe:88:70:ad:9c:9d:c0:a2:b6:
4f:c0:57:50:ed:bc:c9:d1:fd:a5:db:4e:a2:08:b2:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5C:F5:40:72:3F:44:FD:B8:30:04:D2:AF:FE:68:F0:3E:2B:0A:35
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:08:15:23:ad:70:17:7e:42:6b:c7:d7:3c:55:f4:70:6d:e5:
65:0f:40:ca:84:fb:4c:58:89:a5:f9:96:d0:cc:47:05:1d:c8:
47:7d:2e:66:0b:4d:83:c8:15:8d:58:9b:9f:94:e0:6b:2f:79:
a7:88:1f:46:56:33:71:f7:e9:35:bf:85:da:94:2f:0f:c3:1a:
b4:d2:07:0c:66:39:42:ea:da:83:4f:ea:0e:21:a4:a1:80:09:
1d:90:09:23:06:27:05:30:eb:54:ce:14:1c:e8:ab:50:a8:95:
55:bc:62:2c:a1:fa:e9:09:83:4c:62:6f:5a:a5:49:3f:fc:43:
1c:fd:fa:2f:f1:cf:7c:fe:1f:2d:18:2a:9d:90:64:29:ef:86:
31:7b:27:17:b1:b9:f6:f6:4e:56:ed:ab:85:ee:80:fa:74:44:
6b:58:05:2d:c7:10:0f:2e:45:88:32:7a:bc:d4:19:71:a0:84:
47:78:05:01:e9:6a:4d:32:87:b3:cd:53:b8:4b:75:28:38:19:
57:b2:98:23:a2:a9:7f:d4:0b:c1:10:82:64:a9:84:6c:75:16:
9f:39:aa:16:8e:ab:2a:d4:18:1d:8b:65:bf:9e:9f:39:4c:e9:
93:ba:98:fd:bf:c9:e5:48:23:68:3c:a2:9c:8c:69:7c:77:b2:
d1:0b:a6:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9MjgomIb9pYWlKEd6nvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOWZkMzA4ZmUzZWFkYmEzMzQ2OGNlNGJiOTk2YmJkZDhj
ZGU2MTUwHhcNMjUxMTA0MTMwMDU2WhcNMjUxMTA1MTMwMDU2WjAzMTEwLwYDVQQD
Eyg3MzVjZjU0MDcyM2Y0NGZkYjgzMDA0ZDJhZmZlNjhmMDNlMmIwYTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6X5ek1Vv/RyhSRe0p0RLAJCsVyj
7/dyz+XYCvcw1iHN4syiej0KifJpS1t/wMsQi356TbRjpJ8koR7dQh86p0qmewcn
QdTt72Xb07HHlJpVCKaq6gR0AhizQpeLcTWbk+NfiZkLItkO1Pwlg5/78USvizSE
wM2kV41pTYAVWvV0kWtIV/dNfrQFqGMhdJOeQ+xJ7c79rU0SqxF4kii4EcPQoOQ4
BVr3Btsovu4N6xIj4IqSebDN+1sFaIrQdzCIBI7sD9oRI0W87+hC8YY31/C8qScG
xwH0tHbHbZwJR4fyPlntf4P+iHCtnJ3AorZPwFdQ7bzJ0f2l206iCLKHwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNc9UByP0T9uDAE0q/+aPA+Kwo1MB8GA1UdIwQY
MBaAFAqf0wj+Pq26M0aM5LuZa73YzeYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDct
YTFhYmIyZWZjODFjLzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDctYTFhYmIyZWZjODFj
LzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAgVI61w
F35Ca8fXPFX0cG3lZQ9AyoT7TFiJpfmW0MxHBR3IR30uZgtNg8gVjVibn5Tgay95
p4gfRlYzcffpNb+F2pQvD8MatNIHDGY5Qurag0/qDiGkoYAJHZAJIwYnBTDrVM4U
HOirUKiVVbxiLKH66QmDTGJvWqVJP/xDHP36L/HPfP4fLRgqnZBkKe+GMXsnF7G5
9vZOVu2rhe6A+nREa1gFLccQDy5FiDJ6vNQZcaCER3gFAelqTTKHs81TuEt1KDgZ
V7KYI6Kpf9QLwRCCZKmEbHUWnzmqFo6rKtQYHYtlv56fOUzpk7qY/b/J5UgjaDyi
nIxpfHey0QumCg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:38:47 2025 by rpki-client