Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
File: cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json)
Hash identifier: V36D1BUGUxWEAAeGFtAWjn85lFAYwv+VP0zGCkwqlDk=
Subject key identifier: CA:4E:17:53:A5:16:60:03:53:5B:78:CB:D7:93:96:D1:50:8C:03:D1
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Certificate issuer: /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial: 019A4FD017A0F3FB98F21B5D028DEFF69289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
Manifest number: 0406
Signing time: Tue 04 Nov 2025 17:00:28 +0000
Manifest this update: Tue 04 Nov 2025 17:00:28 +0000
Manifest next update: Wed 05 Nov 2025 17:00:28 +0000
Files and hashes: 1: Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa (hash: 8FTp4AmQ8yrNnOSj2Y/1nrH6lz6jMuxxvh24QGuNmXY=)
2: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: zQiqApWrMhZD9HcemEGk08832EGaVtFfKMKY/dw2VhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:17:a0:f3:fb:98:f2:1b:5d:02:8d:ef:f6:92:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Validity
Not Before: Nov 4 17:00:28 2025 GMT
Not After : Nov 5 17:00:28 2025 GMT
Subject: CN=ca4e1753a5166003535b78cbd79396d1508c03d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:8c:91:0f:a3:fd:d4:b3:ee:b5:dc:f4:7a:
1f:d0:ac:9e:20:64:8d:dd:99:87:cf:c6:fd:cf:bb:
0e:b7:b0:da:99:33:1c:3e:d8:a0:70:da:3e:8d:1a:
b3:62:6c:f8:8f:7b:24:ce:15:89:a7:28:df:46:cf:
90:15:79:3b:b4:3c:b4:3c:57:92:eb:ea:e1:e5:ae:
5e:fb:74:ca:71:8d:da:5c:48:06:55:3a:b9:7c:e3:
34:79:eb:e3:53:36:7b:9d:18:21:10:17:ef:90:4f:
d0:a3:9b:c4:01:a0:78:1d:59:2b:7c:b9:84:9d:3c:
7c:26:e2:79:5c:a2:ac:21:9d:ad:42:6b:40:ad:d4:
20:49:86:cc:01:ee:22:6d:23:88:a5:d3:4f:9e:d1:
0d:89:35:98:03:d7:4e:c6:ad:66:0a:f2:65:6f:2d:
78:a2:49:c0:4a:63:b9:e6:fa:35:3e:86:d5:c1:4e:
0a:f9:d7:b7:1b:c3:06:9e:5b:dc:ec:8a:81:0e:0f:
d1:04:63:02:0d:73:fc:f4:d0:c9:20:ad:dd:bd:be:
be:3a:63:85:e4:94:44:b9:ba:b5:5e:b7:da:c1:2b:
5e:cc:63:a2:2d:fc:56:a3:3f:ec:ee:fd:7c:88:90:
6d:5c:b5:fc:69:07:07:4b:e4:de:10:a9:d6:c6:7c:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4E:17:53:A5:16:60:03:53:5B:78:CB:D7:93:96:D1:50:8C:03:D1
X509v3 Authority Key Identifier:
keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:21:f2:6b:ed:2f:76:c0:c7:57:a1:b0:b1:26:b7:7e:72:5f:
09:5d:e8:ef:ac:fe:07:25:bc:34:8d:06:83:7c:db:76:14:56:
56:d0:92:4e:6a:de:a3:f5:ff:98:da:c1:47:da:06:a1:e9:ab:
48:44:27:12:c9:01:7a:6b:22:9b:8e:12:c9:a4:d9:ca:0d:9f:
f2:5a:f3:25:48:74:d7:b7:32:eb:18:4f:f9:1c:8d:8d:72:05:
ac:70:3c:30:21:a7:f3:6a:b4:14:06:15:d4:1c:68:a6:f0:a4:
69:9c:53:b8:19:ba:50:0d:25:cd:68:0a:df:dc:e6:f5:dc:68:
45:7c:7d:bb:9d:62:42:60:63:01:af:d1:96:de:c2:8d:54:c1:
60:39:80:c1:4b:58:8d:a0:2f:e4:1e:e4:be:94:35:16:a6:b0:
9b:ab:e3:3e:ba:a7:9e:76:90:97:0b:8b:0a:52:d3:87:42:b6:
65:3a:a8:ad:73:2b:dd:de:64:53:b2:29:41:9a:d6:e7:14:eb:
9f:db:b8:de:ab:e6:9c:fc:62:3b:b4:d7:47:11:31:65:0e:73:
bd:8c:56:82:d9:ee:61:f4:2d:56:59:22:c6:da:9f:65:c6:42:
0e:df:22:18:20:09:4f:e2:b7:e2:78:da:76:95:ca:9f:ba:a2:
7e:0c:16:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0Beg8/uY8htdAo3v9pKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjRkNjA2ZTFkMTc5MDgwNjM5NzdiNjk4Nzc2ODJlZDdl
MmQxZWYwHhcNMjUxMTA0MTcwMDI4WhcNMjUxMTA1MTcwMDI4WjAzMTEwLwYDVQQD
EyhjYTRlMTc1M2E1MTY2MDAzNTM1Yjc4Y2JkNzkzOTZkMTUwOGMwM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjziMkQ+j/dSz7rXc9Hof0KyeIGSN
3ZmHz8b9z7sOt7DamTMcPtigcNo+jRqzYmz4j3skzhWJpyjfRs+QFXk7tDy0PFeS
6+rh5a5e+3TKcY3aXEgGVTq5fOM0eevjUzZ7nRghEBfvkE/Qo5vEAaB4HVkrfLmE
nTx8JuJ5XKKsIZ2tQmtArdQgSYbMAe4ibSOIpdNPntENiTWYA9dOxq1mCvJlby14
oknASmO55vo1PobVwU4K+de3G8MGnlvc7IqBDg/RBGMCDXP89NDJIK3dvb6+OmOF
5JREubq1XrfawStezGOiLfxWoz/s7v18iJBtXLX8aQcHS+TeEKnWxnw7FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpOF1OlFmADU1t4y9eTltFQjAPRMB8GA1UdIwQY
MBaAFHD01gbh0XkIBjl3tph3aC7X4tHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQt
NTc2MzM3ZTUwZGM0LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQtNTc2MzM3ZTUwZGM0
LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0SHya+0v
dsDHV6GwsSa3fnJfCV3o76z+ByW8NI0Gg3zbdhRWVtCSTmreo/X/mNrBR9oGoemr
SEQnEskBemsim44SyaTZyg2f8lrzJUh017cy6xhP+RyNjXIFrHA8MCGn82q0FAYV
1BxopvCkaZxTuBm6UA0lzWgK39zm9dxoRXx9u51iQmBjAa/Rlt7CjVTBYDmAwUtY
jaAv5B7kvpQ1Fqawm6vjPrqnnnaQlwuLClLTh0K2ZTqorXMr3d5kU7IpQZrW5xTr
n9u43qvmnPxiO7TXRxExZQ5zvYxWgtnuYfQtVlkixtqfZcZCDt8iGCAJT+K34nja
dpXKn7qifgwWng==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:38 2025 by rpki-client