Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json)
Hash identifier: 2brw+ATifVfVcLuXOZ+wyQRTTzBcw9tezjGIhVG+Vfo=
Subject key identifier: A8:38:C2:BE:6A:CE:60:85:54:69:75:FB:77:C1:06:54:1C:DD:32:2D
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 019A5187805C6BDC719F6D907B5238F0BC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
Manifest number: 1721
Signing time: Wed 05 Nov 2025 01:00:25 +0000
Manifest this update: Wed 05 Nov 2025 01:00:25 +0000
Manifest next update: Thu 06 Nov 2025 01:00:25 +0000
Files and hashes: 1: 39yOXWjYZyS68AzfLeyRW_eBtf4.roa (hash: Mz12/qdbJKM8FU8F8+Lk+lMxeg4aXuhF1UCiM+rDIsI=)
2: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (hash: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=)
3: PvXxIOTmhlDT8Zjl8pOjVtbUjqs.roa (hash: cEmlEEf5hdAMQxuyDOcKJwVECyiRzY+P8vKK1P563lo=)
4: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: MYT2qKvLLRgKZMZBqIRP6GIPu4a+bzK2ujVFlsktACY=)
5: fUQV7hcWr8wDftL_A0d4dRPlV5Y.roa (hash: W1gOWwQgZ2lfD/yK9uLmMV4EF6iXlGj32IeijexRu80=)
6: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (hash: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=)
7: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (hash: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:80:5c:6b:dc:71:9f:6d:90:7b:52:38:f0:bc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Nov 5 01:00:25 2025 GMT
Not After : Nov 6 01:00:25 2025 GMT
Subject: CN=a838c2be6ace6085546975fb77c106541cdd322d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:39:03:75:fb:b4:2a:16:99:91:85:23:18:
f6:ab:e7:5e:37:71:42:80:f3:7d:5b:22:0a:21:52:
c1:f2:df:e2:bd:01:fd:fd:3b:a5:81:f0:37:78:2f:
5e:d6:40:0a:3c:f4:43:1d:f9:3a:5d:df:fb:fd:e1:
2a:4e:36:6f:af:19:0c:41:04:9e:20:c6:a4:1f:cd:
a2:4f:b4:c1:9f:3e:fc:68:71:b8:5f:00:4f:c3:19:
bd:e6:a4:ef:6d:6e:99:9f:2e:b1:39:62:40:2c:b4:
97:86:55:f4:64:94:92:32:80:95:52:e4:eb:11:a5:
3b:97:90:db:16:b8:e6:55:fe:45:13:b1:b3:48:04:
86:d1:af:4d:17:3f:a3:0a:aa:9d:bc:c2:30:fe:de:
c1:a2:2d:44:ed:bf:7e:d5:03:66:c2:a6:6e:53:06:
57:79:3d:10:e0:8a:65:8c:16:7e:b6:bd:ab:97:97:
ea:70:16:80:87:44:3d:fa:ce:ff:2f:57:4e:f2:ac:
e6:d6:e3:a0:50:d0:32:d1:b3:94:c8:dd:4f:38:07:
7f:06:2d:fb:00:32:05:57:e3:49:2b:1d:14:76:1f:
11:af:e4:ce:4d:91:5e:d9:49:d0:a0:b1:41:48:9e:
5d:10:a6:9c:80:97:82:46:a5:f7:97:07:ca:47:71:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:38:C2:BE:6A:CE:60:85:54:69:75:FB:77:C1:06:54:1C:DD:32:2D
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4b:01:63:8e:e7:5e:5a:0f:d5:7d:5c:5f:6e:96:2c:38:a9:
cb:25:4d:91:6e:bb:d3:50:11:80:45:ed:68:6a:94:51:a5:36:
c3:4b:d1:25:6e:9d:0a:8c:89:7e:e6:8d:7b:c6:88:5b:7d:dd:
8b:d6:9b:8a:d4:70:17:27:32:cc:67:d6:fd:54:f8:eb:47:3f:
9f:74:7f:25:75:e6:8c:11:34:39:3e:73:7d:d2:78:fa:07:22:
3a:7c:b8:8a:39:48:7d:d8:6f:6e:76:d7:92:12:ab:cf:3f:ea:
aa:40:e5:cc:6e:30:13:bf:dd:d3:3b:23:92:84:2f:69:a8:42:
f2:e5:16:7a:f2:71:34:dd:4c:94:f0:f7:a0:0a:5d:f0:23:8b:
0f:11:9d:69:da:d4:09:cb:64:46:fa:8f:47:9e:26:0b:70:1e:
3b:f8:92:b5:26:21:61:a4:9c:3b:a8:be:f1:d6:80:d1:7c:e1:
ba:45:d4:b2:9e:60:c3:15:df:29:f4:78:9e:37:60:f9:2b:98:
bc:af:41:5d:e2:42:60:44:c5:c5:8f:6e:6a:07:52:5d:74:31:
35:cb:78:d6:02:de:e5:d0:2c:74:a9:89:a0:22:46:e5:29:3d:
9f:78:1e:01:fc:d2:e5:8b:ad:d9:0a:8a:aa:cb:80:2c:54:5f:
08:00:b0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:01:28 2025 by rpki-client