Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: +ueDDR46spUUmWNPF10ZyUTH6x9UZeqwuHoszyv1/jM=
Subject key identifier: B3:86:CB:E3:FA:52:49:E1:3D:30:DB:2C:86:F2:26:CB:0F:F8:28:46
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019A51F583C27618684F0FE83C6B5B24431F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 02AE
Signing time: Wed 05 Nov 2025 03:00:35 +0000
Manifest this update: Wed 05 Nov 2025 03:00:35 +0000
Manifest next update: Thu 06 Nov 2025 03:00:35 +0000
Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: w0oAecgGOK7QS+XV6lHxZ3tpJxl42W5t6QCanYbUYfY=)
3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:83:c2:76:18:68:4f:0f:e8:3c:6b:5b:24:43:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Nov 5 03:00:35 2025 GMT
Not After : Nov 6 03:00:35 2025 GMT
Subject: CN=b386cbe3fa5249e13d30db2c86f226cb0ff82846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:7b:07:cb:3c:a4:b9:b2:81:ae:f2:d6:91:
c0:89:d4:cf:8f:ed:ae:10:0b:35:69:ca:cb:67:6f:
11:51:45:5d:31:c7:d3:4c:cb:ce:aa:73:59:4d:ed:
42:5c:a5:83:a7:08:47:c1:10:19:d4:9c:31:64:6b:
46:55:23:96:cc:e7:9d:45:24:7c:f0:69:99:be:a8:
d5:65:64:36:29:44:9d:ac:53:81:c9:fa:d4:bf:fd:
dd:60:25:ba:e7:7e:1b:67:0b:ee:7d:c7:ed:56:f4:
05:d1:24:c6:d2:0e:af:06:39:90:07:4c:53:3d:6a:
27:77:c9:3b:cc:64:c3:84:50:62:41:1e:a3:63:52:
9e:df:91:62:f1:5f:d2:0b:86:a8:98:05:a6:e8:a5:
80:13:13:5b:a2:01:9b:32:1a:aa:05:e2:62:e8:5e:
3c:15:39:cc:9c:fd:e6:1e:ef:b8:2e:a9:8e:26:33:
31:07:3d:fc:ae:94:9a:57:1c:47:5b:32:0b:bc:26:
e8:6d:25:4a:0b:f2:61:df:8f:ca:e7:1f:89:e3:0c:
72:cf:c4:87:41:5f:d0:8a:ed:a4:34:39:78:db:40:
b8:87:ac:e3:9f:b5:f6:98:59:ef:d5:b2:40:34:77:
c4:e7:90:86:6b:43:18:9b:52:46:ed:76:18:de:82:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:CB:E3:FA:52:49:E1:3D:30:DB:2C:86:F2:26:CB:0F:F8:28:46
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6d:fa:fc:c2:6e:12:2a:2f:74:ae:8b:08:33:02:be:f5:6f:
ee:03:5d:21:f6:10:cc:0d:03:a5:bd:4b:37:ef:cc:f8:94:76:
30:62:5a:c0:60:59:da:a0:3c:7d:15:d7:6c:3a:84:5a:14:d3:
a1:34:6e:4a:9d:71:1c:de:c2:b4:67:b4:3e:c9:8b:d6:d2:66:
61:5d:9f:de:74:a9:67:6c:00:f4:a3:18:03:97:06:c3:47:f9:
4b:8c:c0:27:1e:f1:01:61:66:78:65:81:5a:83:b5:64:36:f2:
0b:b4:0e:53:1e:67:89:2d:64:63:c9:6c:8a:94:9e:68:25:15:
ab:4b:1c:34:48:bc:50:0f:67:64:69:eb:36:2f:22:7a:d1:21:
a1:1a:f0:ff:0b:ca:1b:51:2f:80:2d:93:c2:8d:c2:57:16:4e:
37:01:da:cc:80:68:42:1b:92:f3:c9:b0:b2:7f:80:c9:58:89:
f5:b2:87:67:d6:37:f1:fc:31:69:30:30:a5:d7:61:92:c4:ba:
d8:d6:8b:53:da:76:02:05:0d:46:a3:5a:97:52:4a:0f:b3:81:
62:04:fb:d2:fe:f4:6e:ee:59:1d:72:73:94:37:fb:b7:51:21:
d0:7f:16:3c:9a:3a:b6:f7:32:2d:b1:ec:54:05:f2:98:5d:28:
fa:d7:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:35:11 2025 by rpki-client