Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json)
Hash identifier: Gnm+TTtpihYKuVIrPsX4S/Ows2wQ0ihcsJOl0z7MvgM=
Subject key identifier: EB:09:45:C6:51:AE:27:B7:8D:E6:46:3B:11:1F:90:D6:7F:F3:D2:46
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 019A5375CA364773478A4F3509D14802A062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
Manifest number: 1722
Signing time: Wed 05 Nov 2025 10:00:19 +0000
Manifest this update: Wed 05 Nov 2025 10:00:19 +0000
Manifest next update: Thu 06 Nov 2025 10:00:19 +0000
Files and hashes: 1: 39yOXWjYZyS68AzfLeyRW_eBtf4.roa (hash: Mz12/qdbJKM8FU8F8+Lk+lMxeg4aXuhF1UCiM+rDIsI=)
2: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (hash: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=)
3: PvXxIOTmhlDT8Zjl8pOjVtbUjqs.roa (hash: cEmlEEf5hdAMQxuyDOcKJwVECyiRzY+P8vKK1P563lo=)
4: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: aHOcP86/rqTanlmQr2L43bXTphVxaaAdjVKzKhA/orQ=)
5: fUQV7hcWr8wDftL_A0d4dRPlV5Y.roa (hash: W1gOWwQgZ2lfD/yK9uLmMV4EF6iXlGj32IeijexRu80=)
6: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (hash: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=)
7: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (hash: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:ca:36:47:73:47:8a:4f:35:09:d1:48:02:a0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Nov 5 10:00:19 2025 GMT
Not After : Nov 6 10:00:19 2025 GMT
Subject: CN=eb0945c651ae27b78de6463b111f90d67ff3d246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:d8:0e:c6:88:4a:7a:f7:61:3b:4e:b2:13:
2b:3f:bc:60:93:48:94:45:c5:70:e1:01:80:f3:05:
3f:ed:22:95:05:d5:23:1a:85:1c:72:86:5b:27:84:
b3:3c:d5:67:06:41:b9:af:bd:7d:f8:e5:31:35:c4:
e1:55:08:4e:07:86:89:ca:09:8f:15:dd:38:e3:f4:
af:25:40:15:b9:00:f6:93:11:6e:aa:9d:79:19:93:
f3:4f:06:82:ca:38:27:ee:3f:3d:ac:11:55:02:f3:
43:63:e6:81:01:6e:2f:46:48:f2:25:86:c9:c4:ce:
ce:e8:34:22:d7:6a:3f:49:64:2c:fe:74:c1:78:c8:
44:9e:1c:70:b4:4c:ca:fd:87:e0:83:17:1a:a7:fb:
05:7d:19:1e:e9:46:fe:b6:d9:42:f0:ec:cd:83:f7:
61:6b:31:fa:39:84:65:f4:79:f0:a2:c2:c2:53:95:
e5:9b:51:78:bc:bd:bc:dc:2b:6f:03:24:bb:52:dc:
8c:58:e6:af:ec:90:0f:49:0e:66:26:1e:b2:59:3d:
93:97:4e:11:e1:d6:4f:67:c7:59:8e:44:61:1e:59:
e4:55:55:f0:84:81:b5:aa:64:ff:68:58:0c:a9:64:
84:82:0c:6f:53:98:09:61:5f:0c:dd:a2:ce:b7:0b:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:09:45:C6:51:AE:27:B7:8D:E6:46:3B:11:1F:90:D6:7F:F3:D2:46
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7a:ae:40:1d:97:c5:83:cc:bd:24:d8:94:bf:47:48:91:42:
c7:d6:13:17:3a:96:b3:5b:a5:37:0b:ff:ee:a2:b5:ab:fc:a6:
ca:68:d2:b0:85:dd:6a:12:35:70:cd:9d:5f:31:73:ee:e5:e9:
fe:95:3d:d3:da:e3:ea:be:9d:86:39:c6:f6:25:47:43:1f:c0:
12:7c:cd:4e:78:ed:f4:4a:db:88:8c:5d:5d:68:69:ae:1d:d8:
14:ad:ec:14:69:85:c5:57:63:b6:9e:3c:65:e8:04:69:a1:d3:
e7:22:e1:64:a8:fe:f4:28:f2:a4:fd:b4:5f:1a:c3:7e:e3:ef:
15:22:4a:45:b3:4a:e1:67:c8:cd:9a:a5:69:e0:4f:78:66:fb:
6f:79:28:e5:39:f5:2e:c8:99:85:78:64:70:09:78:d7:f4:63:
4b:d2:fe:30:54:9b:3a:8d:db:0d:90:be:39:c5:40:c4:53:69:
c2:b0:fe:bf:5c:c6:9c:9c:d0:48:eb:a1:c4:bc:9d:3f:32:9f:
fa:a5:67:a5:ba:62:c8:2d:3a:38:6c:93:9b:37:15:ee:c7:89:
ae:fa:13:c5:91:77:93:94:e7:86:7f:79:a2:c1:cc:c2:13:52:
d6:18:cd:b7:9b:51:15:af:41:87:12:b2:95:c9:a9:4b:90:40:
eb:d9:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:17:43 2025 by rpki-client