Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier: UQyx+28mvJZgEvO95RKKn48FPt6YZMSMLrTY10eRfao=
Subject key identifier: 7B:29:1B:D6:0F:34:4B:82:E8:A9:8A:DD:37:33:AA:52:68:7A:C6:78
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial: 019A4EF495E1DAB9726AC4A229D8238A0435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:43 +0000
Manifest this update: Tue 04 Nov 2025 13:00:43 +0000
Manifest next update: Wed 05 Nov 2025 13:00:43 +0000
Files and hashes: 1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=)
2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: Xn45VMWK0gym4P7xy2p0fQ6F2/St0KjJY8CvvdsrKCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:95:e1:da:b9:72:6a:c4:a2:29:d8:23:8a:04:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
Validity
Not Before: Nov 4 13:00:43 2025 GMT
Not After : Nov 5 13:00:43 2025 GMT
Subject: CN=7b291bd60f344b82e8a98add3733aa52687ac678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:d0:ad:ab:af:08:67:4e:1d:3a:41:33:b6:
b5:bd:02:e5:0e:a2:a4:d9:b1:c4:3e:f5:41:a3:bc:
71:27:87:63:c9:9e:b8:35:d6:1c:67:38:ce:e9:20:
df:d6:ef:c8:d8:75:e5:ac:77:ca:78:84:ce:c3:ae:
a7:ef:3d:29:c3:3f:f0:da:d9:42:a2:3d:e3:a2:fc:
27:d8:98:e1:35:f8:f3:ca:e1:76:40:6a:4e:95:20:
f4:8a:2d:b0:95:ea:46:d1:6a:17:27:3c:51:d4:8c:
03:19:70:f6:f3:fd:a0:be:0e:38:58:ce:0d:f7:0a:
f3:43:ef:25:d0:b7:1f:1c:94:82:b7:de:49:a6:bd:
1a:ad:a5:00:ac:86:06:57:92:30:66:39:8b:31:21:
4c:c8:09:32:5c:7d:88:80:61:37:9b:6d:53:fb:ef:
23:d4:1b:28:f0:e4:ac:28:f2:b2:97:08:ab:89:0b:
66:46:f5:32:1b:5e:46:a9:75:b6:6a:a5:83:e3:62:
1d:6b:e3:c5:d7:5b:68:b6:94:2a:99:86:37:f3:40:
60:96:7e:39:c1:54:63:12:ca:63:56:8f:e5:04:24:
5d:56:07:7c:fb:18:f2:69:cb:19:3b:a4:c6:1a:bc:
25:6f:3c:cc:12:c8:34:eb:02:db:c9:77:f0:55:80:
3b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:1B:D6:0F:34:4B:82:E8:A9:8A:DD:37:33:AA:52:68:7A:C6:78
X509v3 Authority Key Identifier:
keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5b:0f:95:4d:c3:f9:02:f1:15:dc:64:a5:e9:f1:13:a5:f7:
1c:01:04:4b:da:d5:7f:24:8c:dc:8c:b5:3a:fc:e8:f2:2e:73:
2e:78:c8:9f:34:47:dc:43:a1:83:c4:4b:44:e9:70:8d:89:a4:
c6:90:43:54:d4:75:ab:a3:1a:98:7b:99:78:db:cc:5e:41:ac:
21:fb:e5:ff:5e:b2:a4:7b:72:32:d6:37:4d:49:1a:82:52:ef:
3e:06:18:b7:6d:0c:df:87:b1:c1:52:49:7f:35:c7:03:9c:30:
ff:bc:9d:d8:6f:1b:77:f9:b6:75:28:ad:5e:f8:65:aa:c2:fa:
c4:ef:50:3a:bc:13:5d:88:6d:5c:d7:94:58:f6:bd:46:3d:de:
f8:39:bd:97:fb:44:a9:c1:92:35:bd:a2:da:62:63:f1:8d:64:
0e:e2:15:bf:e8:ee:83:c7:3e:88:92:c9:da:e9:8d:e0:98:91:
fb:23:f0:f3:03:03:13:b7:50:c0:f2:f3:81:84:0f:96:c8:08:
ec:71:d9:b5:7c:cf:e8:04:2b:2d:e5:b2:de:89:e8:d5:61:77:
f6:40:1e:78:0f:64:34:3e:3e:46:c2:37:ea:14:0e:8f:2c:d2:
86:ac:36:12:d0:53:21:f5:35:90:39:5a:69:74:52:b6:68:a2:
b0:3f:33:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:14 2025 by rpki-client