Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: F+f14pSFec7Hid82Rmte/xAZ8evoRmGCU1NL0PaonsI=
Subject key identifier: 7C:02:B5:61:88:13:6E:DC:2C:C2:96:AE:F7:9B:61:DF:EC:80:CC:18
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019A5074A2A593178717EB64AF4430ED727C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 010C
Signing time: Tue 04 Nov 2025 20:00:12 +0000
Manifest this update: Tue 04 Nov 2025 20:00:12 +0000
Manifest next update: Wed 05 Nov 2025 20:00:12 +0000
Files and hashes: 1: AUKx0J4WNHpEIs7yN_p5Gj-AKQc.roa (hash: eENZl1wDIRgwnUAmEgxPXPDBi6xMrW0OqSMxiYMTiao=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: MG4DYl3Y4aQIoW4e3PdGem/Qie/80M4814GAstE/z7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a2:a5:93:17:87:17:eb:64:af:44:30:ed:72:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Nov 4 20:00:12 2025 GMT
Not After : Nov 5 20:00:12 2025 GMT
Subject: CN=7c02b56188136edc2cc296aef79b61dfec80cc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:40:f1:ed:b4:48:34:1f:a3:d9:05:94:23:
05:8e:b5:33:13:af:e3:60:40:64:6c:e3:7d:d9:d0:
5c:69:ae:20:cf:d7:be:dc:3c:97:92:a9:08:06:f8:
ba:37:7b:b6:51:59:3a:13:04:d8:3a:e7:48:52:5a:
c4:42:52:d0:f2:5c:d5:31:d6:07:a0:ad:8f:fc:84:
56:3f:e5:f6:a7:d2:d9:f1:85:f9:8f:95:b6:ad:c1:
76:c9:fd:37:7b:17:bb:b9:ee:72:56:91:e8:77:bc:
bd:08:6d:11:e0:e3:17:02:5c:5a:ad:da:c8:a6:35:
90:c4:63:5f:76:c5:13:50:51:c0:23:c2:f9:7d:c3:
1e:74:ef:80:a8:62:21:b9:33:ba:49:2f:8a:4c:6d:
8a:c8:1f:ee:be:ee:22:53:8d:05:c3:a1:b3:85:df:
88:f5:1d:f8:40:27:7a:c4:9c:75:1e:0f:b8:ca:d9:
32:be:3b:2c:73:65:b6:d8:99:d3:e2:0e:2e:7e:b5:
fe:03:e2:4c:32:70:c4:11:ac:34:87:bf:3a:e5:21:
aa:3f:a3:79:06:82:f8:9d:9a:0a:35:63:af:1a:25:
e3:be:8e:05:f2:67:22:92:95:e0:6d:0e:db:05:14:
1c:ea:85:85:48:5d:be:69:d5:6c:94:42:08:46:7c:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:02:B5:61:88:13:6E:DC:2C:C2:96:AE:F7:9B:61:DF:EC:80:CC:18
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fa:56:de:95:ee:72:c8:79:aa:a3:4d:e9:d2:a0:26:23:b6:
1d:d6:a5:bd:e0:ee:43:3c:ef:a9:41:cf:65:05:d7:cc:52:da:
85:81:e2:4b:7c:6d:bd:fc:42:05:2c:ae:cf:a1:8e:f9:95:12:
b4:3a:ea:97:d3:fc:78:0e:83:86:8f:05:af:c4:95:25:c3:f0:
22:6d:02:92:76:75:e0:5d:65:1f:60:e6:be:21:43:ae:22:88:
1e:e6:7a:df:91:51:8d:7f:ec:a6:29:50:20:ae:8e:13:3a:7a:
31:94:9f:e0:f6:63:3f:12:f9:2c:4b:67:b7:b8:81:a5:7f:aa:
2e:25:42:ea:9e:c7:cb:26:6c:ae:82:12:44:f7:7c:d7:2e:55:
dd:a8:2b:1d:1e:f7:22:78:78:01:55:25:3d:88:f0:30:6c:92:
51:ce:6f:7c:4d:79:49:52:10:de:65:22:e5:da:19:c5:67:dd:
83:26:6d:bf:56:22:3a:f4:13:e9:9c:d2:72:7d:f1:41:e0:b4:
2e:6d:10:2a:64:12:b6:59:84:4a:b5:f9:a6:aa:dd:4b:38:18:
a6:f5:f3:3b:6c:27:ad:88:a0:6d:17:fd:56:ca:e2:fd:22:f4:
7b:d8:9c:0b:6b:6c:c4:07:3a:e3:4d:66:d0:5e:33:85:25:1f:
8d:6e:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:32:12 2025 by rpki-client