Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier: o83iAt3SzHCn3JjobBm4yTlGu6M5Zl7MrndTiRjAJqk=
Subject key identifier: 96:38:42:96:DD:92:A1:6D:8F:8B:E2:C8:20:41:B6:E0:E9:7E:83:EC
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 019A4D3D4B17B7564FCF7A4C295D2AC505CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 05:00:53 +0000
Manifest this update: Tue 04 Nov 2025 05:00:53 +0000
Manifest next update: Wed 05 Nov 2025 05:00:53 +0000
Files and hashes: 1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: ty0DHiPh9WjUpwJwzznOz7pZg9HfkaN3zBOoTODvY0o=)
2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:4b:17:b7:56:4f:cf:7a:4c:29:5d:2a:c5:05:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Nov 4 05:00:53 2025 GMT
Not After : Nov 5 05:00:53 2025 GMT
Subject: CN=96384296dd92a16d8f8be2c82041b6e0e97e83ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:d9:19:07:72:93:a9:4c:2a:96:29:9c:07:
c6:9f:f7:d5:4f:0b:58:8c:91:95:6b:de:b6:a8:0a:
c5:4b:0a:94:f2:53:bb:be:0d:3a:c6:98:dc:a1:ac:
b0:29:db:23:f4:93:f9:9d:ef:81:6c:65:18:0e:1d:
2f:49:4d:2e:0f:50:d4:5d:31:9c:c9:e2:44:23:24:
de:aa:84:f9:cf:0c:ff:99:03:08:ba:e2:9f:f2:5f:
b6:ac:59:38:9c:df:9f:fc:cd:1b:d6:dd:33:67:98:
01:3a:c5:4d:a0:53:70:49:97:9e:85:88:e4:0c:50:
1b:9e:d2:81:70:e8:e3:51:78:65:34:e0:c8:14:6b:
82:f5:04:59:3f:a0:ae:13:dc:be:97:ff:0f:87:b2:
de:90:bb:7a:d2:99:16:58:be:6d:7f:f2:cf:05:f2:
2c:09:48:7f:f6:86:ee:d6:4a:4e:54:72:3a:f8:c3:
92:38:49:f9:1a:3d:1d:de:2c:e6:df:9c:45:d5:6c:
17:e8:2d:46:7d:51:6f:f1:49:e8:c9:49:e3:5d:3b:
c3:ab:c7:42:3c:14:21:07:8d:ab:1d:00:09:b4:d4:
fa:ca:fb:32:89:dd:89:64:a4:63:69:c5:20:0b:7f:
67:3e:9e:31:25:68:a3:2a:9e:99:37:22:91:26:76:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:38:42:96:DD:92:A1:6D:8F:8B:E2:C8:20:41:B6:E0:E9:7E:83:EC
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b8:93:c6:e8:4e:99:a4:32:9e:1c:44:38:44:4d:6d:a7:a9:
61:f0:43:1b:63:04:5f:77:1c:7b:b9:e7:7a:db:0e:c6:36:7b:
49:54:a2:0d:27:e9:bf:02:07:93:ed:9e:d1:74:46:81:dc:f3:
ca:e0:73:3b:51:73:d6:48:3d:b7:4e:27:b9:cb:b6:6e:93:93:
0e:17:e0:e2:81:0c:74:9d:6f:b7:1a:0d:7e:cb:3d:61:cc:1b:
27:a1:09:a6:48:00:92:11:dd:e2:04:bb:38:4b:be:2b:b3:6a:
83:b4:25:11:59:59:23:de:e6:0c:9e:b9:a0:be:e3:1b:23:68:
9d:af:b7:e3:3a:48:9d:4d:01:ef:c8:77:62:1e:e1:dd:8a:e8:
8f:b9:ea:cb:27:96:74:4e:1f:51:26:1b:09:27:bc:58:66:f0:
a7:a8:23:c3:b1:3a:e2:28:3e:e5:ee:14:ca:9b:26:40:24:09:
16:4d:eb:a6:3b:ba:23:e2:ea:77:9f:c8:6f:2b:21:fe:80:51:
3d:df:f8:b5:f7:07:f7:59:c3:c3:7b:08:81:17:e4:db:d9:d5:
ed:db:25:42:19:80:01:44:1d:ae:e4:55:c6:34:a3:95:47:ad:
13:76:95:96:f7:93:d1:50:01:2c:f3:8b:ec:e4:90:b8:fc:fc:
b2:e8:33:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:48 2025 by rpki-client