Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json)
Hash identifier: HskcPKcz4ojKgNuhMz1KmO/7PV13Ei2OefxeMeXiQwk=
Subject key identifier: 73:40:B1:7C:D3:DB:1A:C3:62:19:15:AF:6F:BD:AF:22:60:AD:22:3C
Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Certificate serial: 019A51508F85CEF46F90A16BF4F7F9EF812C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
Manifest number: 2B
Signing time: Wed 05 Nov 2025 00:00:25 +0000
Manifest this update: Wed 05 Nov 2025 00:00:25 +0000
Manifest next update: Thu 06 Nov 2025 00:00:25 +0000
Files and hashes: 1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: r+pZjO0EhcDgjlbfz28DbYrngeWHOtP1ssrs+cgDVkY=)
2: jf136iTXxi12Hjt-tW87j6RLunU.roa (hash: Y2zqrXOARQyWLcKRC6gUKA6rctKZc3uE4RdzoYUkrrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:8f:85:ce:f4:6f:90:a1:6b:f4:f7:f9:ef:81:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Validity
Not Before: Nov 5 00:00:25 2025 GMT
Not After : Nov 6 00:00:25 2025 GMT
Subject: CN=7340b17cd3db1ac3621915af6fbdaf2260ad223c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:f3:b0:e1:8a:7f:26:ab:b8:83:7c:e0:1c:
34:0a:91:54:a2:61:c4:1e:cf:62:5a:7c:ec:ae:b1:
93:52:3e:79:86:e8:ad:03:8e:f9:b8:9d:43:38:f1:
46:a7:9b:26:a1:93:c6:c2:44:35:e4:1c:58:9e:16:
43:58:21:b5:57:02:d2:51:99:f2:94:68:58:e4:5c:
1d:b2:34:28:8f:27:86:1e:7a:9b:d9:a0:3a:a9:1e:
2a:1c:d0:06:96:8c:2a:70:17:6c:94:3f:e4:be:d3:
13:0f:58:49:5e:c5:13:fa:13:b4:27:d7:c9:16:d4:
21:c2:d3:06:df:05:50:7b:56:fd:55:be:39:ae:cd:
c5:4c:91:a9:b8:3f:65:76:3c:e0:b7:ac:13:f9:2e:
1f:f0:59:71:66:d4:64:79:7e:87:77:75:04:36:28:
55:e3:ce:42:b6:e0:ae:bf:57:68:46:23:d9:4f:66:
ac:1d:0a:8f:72:b7:00:c6:7a:98:e5:95:41:78:99:
b8:2d:3b:8b:e9:a9:a8:42:81:20:bd:a2:3e:d2:0e:
a5:cd:f3:ab:ec:97:18:15:5f:d6:a0:66:1c:22:27:
94:bf:dc:ad:f8:44:84:54:66:04:ef:1b:41:cf:1c:
c4:20:0e:36:b3:d3:d6:f5:6b:48:6a:fb:b5:49:8d:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:40:B1:7C:D3:DB:1A:C3:62:19:15:AF:6F:BD:AF:22:60:AD:22:3C
X509v3 Authority Key Identifier:
keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:30:20:22:ca:ca:82:83:ed:fb:cf:5d:17:58:ef:cf:43:72:
c9:f8:ef:13:c3:63:ed:9a:d1:b4:aa:39:8f:00:d6:ce:b9:75:
a3:0d:55:f0:82:10:04:ae:6a:5c:df:14:e9:4d:af:9c:c1:68:
8f:e7:64:ca:50:86:e6:f4:93:e8:6b:10:cb:5a:a8:db:d0:04:
86:21:93:66:86:01:ab:e5:a6:53:39:2e:6e:2e:30:db:13:49:
59:91:db:32:6c:3e:8d:63:ea:2f:f7:e3:a5:c5:5e:2c:43:17:
06:5a:7d:a0:4f:2b:c1:44:be:e9:04:7c:4b:a7:ea:32:30:d5:
60:ee:94:68:47:b7:95:d0:29:5c:29:13:65:f6:eb:a3:fe:4e:
da:68:95:d0:b3:4b:0b:e3:1a:e5:8e:85:d2:c5:f2:e4:7d:72:
d1:a3:83:b5:c1:f5:3c:46:ef:01:20:01:95:ac:e9:e7:5f:ef:
92:03:2d:82:c1:6a:01:bc:20:14:3e:b5:fa:53:3e:7a:a7:0c:
47:ae:fe:41:07:07:83:8a:12:6b:de:5b:70:ff:64:52:74:5f:
a6:7d:ec:2a:ce:be:15:7f:24:db:25:72:d5:d1:9c:e5:b0:4d:
81:03:8a:80:94:b9:97:8b:9d:6e:18:27:4a:16:bc:b3:bb:56:
ec:53:26:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:24:09 2025 by rpki-client