Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
File: fCypuamhkyJ5l3TnoXn0qnLMN0E.mft (raw, json)
Hash identifier: KGpq15ZjSb2Htd8Kkn83dPiLxIl58W7MGYcw/ee5eZ4=
Subject key identifier: 37:2D:21:41:13:F4:CD:F5:87:77:87:F5:4E:89:B5:C8:DA:C9:CF:D2
Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
Certificate issuer: /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Certificate serial: 019A5150C6190846FF848D9C9A467B2B53B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 00:00:39 +0000
Manifest this update: Wed 05 Nov 2025 00:00:39 +0000
Manifest next update: Thu 06 Nov 2025 00:00:39 +0000
Files and hashes: 1: 6B9KDmaoJ3rOhd-DXQ38naI0D4Y.roa (hash: ynSoGLNXCvZga5FxofhRDHQzU/lO6RFc2BKWCKFwLDc=)
2: fCypuamhkyJ5l3TnoXn0qnLMN0E.crl (hash: hqjWut+1Es32tD05Pht2+i53BcPBP3Ti+vBkKs7zoD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:c6:19:08:46:ff:84:8d:9c:9a:46:7b:2b:53:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Validity
Not Before: Nov 5 00:00:39 2025 GMT
Not After : Nov 6 00:00:39 2025 GMT
Subject: CN=372d214113f4cdf5877787f54e89b5c8dac9cfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:76:52:ac:6e:84:c9:e7:bd:01:42:0b:ef:
a5:20:31:b0:32:67:29:4e:0c:fe:73:9f:dd:2a:ab:
56:da:66:1a:14:2e:19:45:dd:61:88:05:7a:c9:eb:
e3:c5:da:88:df:f6:36:60:eb:57:ba:9f:01:14:e4:
20:12:75:c3:19:83:00:28:80:1e:9f:5d:33:81:d0:
4b:15:6f:69:b2:01:e3:f6:58:6b:c4:80:19:cb:46:
81:33:3b:e4:a9:d4:ed:f4:1a:07:b1:2e:f3:25:4d:
2a:a2:66:b9:56:ef:ee:a8:4d:71:ae:58:3a:a1:4b:
51:2b:fb:18:60:51:74:65:34:93:46:68:64:1b:e5:
71:81:fc:34:23:a0:91:20:10:0d:5f:eb:ad:08:80:
f4:15:f1:b1:11:4e:60:cf:b5:65:74:59:49:40:df:
12:2a:98:97:e2:72:3f:39:0c:e8:2e:f4:03:36:44:
b8:77:4f:16:a1:2c:c4:92:c0:9a:09:76:c4:3a:ee:
94:f1:e7:39:9b:ee:a9:68:93:f6:28:12:7a:9c:34:
79:37:07:14:b5:87:75:e6:e9:a3:02:88:45:46:55:
0b:91:19:70:34:86:26:04:04:8f:29:19:8f:1a:12:
10:fb:03:70:22:d4:03:7b:6e:ba:ea:dd:4b:61:a4:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2D:21:41:13:F4:CD:F5:87:77:87:F5:4E:89:B5:C8:DA:C9:CF:D2
X509v3 Authority Key Identifier:
keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:88:91:05:9c:3c:ec:f3:62:19:63:dd:51:de:36:4c:ec:57:
7a:b3:64:58:22:8f:4a:93:7e:5c:e3:27:d0:35:97:db:e0:8e:
f6:1a:1a:85:0e:6b:55:08:2c:d3:ed:dd:b9:c7:4e:32:9b:eb:
f9:27:19:91:87:b8:ab:a3:71:2b:f7:eb:7e:93:9f:7c:30:55:
c6:af:f7:c4:c5:db:4f:6a:15:45:78:3c:07:b5:1d:55:1a:71:
e8:e6:9e:ea:27:68:c3:36:d3:52:80:06:06:af:b4:07:29:28:
6b:fe:9a:69:0c:d8:87:00:e0:1e:9c:63:89:e1:a6:04:31:66:
48:b4:9d:70:25:01:87:fb:e2:d2:ba:5b:c9:e6:79:ef:3b:09:
62:cd:b8:eb:39:1f:f0:3e:62:ca:d7:25:c8:b7:40:7e:b5:09:
7b:b1:cd:c5:4f:bc:5d:e5:e9:f1:d7:c5:25:9c:c4:5b:7c:d2:
56:71:63:59:2a:09:d4:9a:89:32:4c:ce:27:35:f2:f3:ac:fb:
b4:fc:de:b0:54:de:ab:fb:ce:e6:fb:d0:c8:be:20:0c:8f:8a:
e8:22:9c:80:36:c1:45:7a:ed:1b:c7:4d:b8:6f:13:bf:7a:21:
22:96:92:36:ff:41:77:67:d2:c9:c0:ce:0a:c3:37:44:db:68:
06:37:7a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:35:57 2025 by rpki-client