Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: 23eQwdDKwOy967zaELIN+RCfHVAR4AgNk9g4nIDUWUE=
Subject key identifier: 78:7C:13:7F:D2:97:21:EF:CD:AC:8F:72:07:29:16:60:C7:1A:00:50
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 019A4E18938D85B8BEAE5CABF8FC1CE3FEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:24 +0000
Manifest this update: Tue 04 Nov 2025 09:00:24 +0000
Manifest next update: Wed 05 Nov 2025 09:00:24 +0000
Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=)
2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: +Fju+CKJZiWstK1K4Mn2wD7u1xUwY7xmKU2vDCeaYe4=)
3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:93:8d:85:b8:be:ae:5c:ab:f8:fc:1c:e3:fe:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Nov 4 09:00:24 2025 GMT
Not After : Nov 5 09:00:24 2025 GMT
Subject: CN=787c137fd29721efcdac8f7207291660c71a0050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:92:2c:29:72:5b:27:9a:08:17:57:2c:ad:
77:8c:dd:20:3c:f4:0a:f7:bf:52:dd:29:2b:47:03:
05:fe:fe:f2:9e:41:c9:e3:97:c9:2e:09:1e:93:0b:
ed:da:c6:1f:c8:2a:e9:47:68:97:b1:a7:61:52:65:
66:c7:d2:5c:07:34:f7:77:d2:6d:ee:6f:52:ec:08:
71:17:45:43:7b:d1:e9:13:54:fb:2b:14:66:18:de:
95:a2:54:b8:44:3a:be:73:d3:aa:fb:89:6a:1b:23:
fe:2e:45:b8:29:cc:41:13:f5:bd:be:79:da:93:21:
6e:3c:3f:fd:ed:3a:85:5a:51:01:b1:fd:d4:28:b7:
ae:da:be:7f:f5:a3:f8:60:46:83:7d:36:24:6b:8d:
e6:0b:9d:4e:a2:66:c6:9f:6b:96:c2:b2:4a:92:f1:
5f:6f:f4:b2:9d:42:9f:c6:c5:0b:20:3e:af:b8:b5:
fb:da:44:ba:6a:fc:7b:0e:ae:7d:c2:33:0b:1c:e8:
1b:eb:15:c5:5a:19:44:d7:99:f2:94:ab:28:8f:38:
b2:3b:85:a7:85:a7:e1:27:23:74:44:d6:db:de:c5:
37:83:06:bf:a4:b2:06:71:81:47:de:a6:5e:0f:6a:
b5:d0:ab:4d:f3:10:d7:46:11:60:c0:20:33:d6:1c:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7C:13:7F:D2:97:21:EF:CD:AC:8F:72:07:29:16:60:C7:1A:00:50
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f0:a7:7c:03:13:0e:51:3e:a6:2a:9c:da:68:6a:1b:19:a9:
ac:4d:95:ed:f8:1f:c7:a5:54:ba:de:2b:63:ce:7d:56:6a:25:
92:52:3e:c0:8e:d7:6b:ff:b8:4e:b5:e9:4c:17:b3:1e:f4:e9:
cc:62:47:23:ae:28:0a:5b:b8:cf:bd:da:3c:cd:8c:7f:8d:be:
c4:cc:36:ad:be:f8:70:90:49:d1:7d:25:33:c4:3f:45:80:3c:
19:96:da:39:b4:f9:ef:19:cc:d6:05:02:ba:45:11:a7:55:ae:
0f:00:e3:4c:10:67:c0:f7:39:8f:ab:68:29:df:10:62:c8:51:
5c:75:dc:00:b0:44:d6:7a:b3:49:17:06:fb:22:11:20:01:51:
23:99:38:5d:03:8a:de:0b:a9:06:9e:8f:bf:31:07:10:26:bf:
16:fa:a4:35:9f:81:10:10:aa:d4:86:14:29:fd:06:5c:e9:50:
fa:14:a8:f0:4d:7c:25:df:ca:48:e7:cd:df:64:09:46:48:f4:
01:1c:d6:50:6f:79:40:7d:4d:74:9e:92:62:b6:9a:73:9c:8a:
da:41:d2:18:8b:37:10:4c:96:72:a8:2d:6e:14:fc:3f:fd:ca:
1c:25:ef:3a:57:b8:82:d6:46:05:31:a7:da:1f:1c:8a:d5:1e:
0c:9c:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:03 2025 by rpki-client