Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: HckNzYekgiK49z9OpWRlfRfD/ipCI/TCW3AuOeLCB7Y=
Subject key identifier: C4:85:91:33:5D:C5:D6:8C:8F:61:83:D3:C8:41:4E:75:D7:27:B6:75
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019A4F62A2373491C0C27DF38F18277406F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:55 +0000
Manifest this update: Tue 04 Nov 2025 15:00:55 +0000
Manifest next update: Wed 05 Nov 2025 15:00:55 +0000
Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=)
2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: uBvZCZ8cbhUhewRwlI+Pn5REAKTjYmefMceKwPSMAEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a2:37:34:91:c0:c2:7d:f3:8f:18:27:74:06:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Nov 4 15:00:55 2025 GMT
Not After : Nov 5 15:00:55 2025 GMT
Subject: CN=c48591335dc5d68c8f6183d3c8414e75d727b675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:a4:e8:c3:c9:3e:10:81:69:36:30:04:7e:
8c:29:1f:fd:e3:19:b6:12:cb:ae:ec:53:c2:1e:5a:
bd:d1:bd:9e:a4:f0:f1:b7:33:ae:c1:2e:71:33:09:
ff:66:e5:75:e5:11:23:2a:80:97:17:39:8a:46:6e:
3f:3e:ac:75:75:ee:2f:b2:42:09:a8:fe:30:f7:d5:
2d:cc:ff:a8:b4:21:5f:82:85:b1:56:17:f1:70:ad:
7b:4f:91:fa:f8:f1:f1:1a:02:36:9d:a4:3a:d3:70:
ce:50:6f:83:29:05:00:b7:05:e6:0d:46:37:d6:4b:
ec:1e:f3:84:ad:75:bd:ba:43:5c:62:d2:7b:1e:81:
92:ff:fa:6c:ec:36:b0:88:9e:e8:0c:13:eb:24:44:
7d:ae:c2:14:50:f7:55:b8:4f:be:40:39:2c:13:30:
61:ef:d1:54:e0:71:83:e0:2f:df:4e:91:99:16:ed:
2e:85:75:c5:3c:a6:e5:18:aa:b3:47:4e:46:96:77:
95:f4:14:ed:89:55:e9:74:3b:3c:35:55:2f:5b:4e:
ef:3d:82:6e:97:4c:42:fc:30:93:b0:6c:82:ac:86:
f6:39:2a:73:a7:90:29:f7:41:64:45:d7:62:ea:73:
7e:5f:c8:50:84:6a:b3:ca:06:58:87:87:3b:fb:74:
c5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:85:91:33:5D:C5:D6:8C:8F:61:83:D3:C8:41:4E:75:D7:27:B6:75
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:3c:0d:98:40:c0:7b:f1:46:a2:63:97:2e:fa:22:fa:c5:c4:
f1:21:48:64:60:5e:76:2c:d5:a1:48:c8:9f:81:ce:c0:40:a2:
a6:ce:e9:28:44:8b:a5:83:cb:50:91:95:6a:9e:e3:c9:35:f9:
74:3f:e5:59:7c:98:b9:a4:7e:ed:39:fb:d5:cf:78:bc:25:26:
97:81:7f:fb:92:17:28:4f:64:6f:10:9d:89:9f:04:62:98:de:
81:6c:39:5b:8a:9e:f6:5c:7e:53:ac:db:d6:f4:c0:e1:e2:4d:
7c:fb:24:2b:ca:d7:6e:f9:9b:39:3f:2a:1c:af:ac:98:b3:62:
47:9f:b2:d6:d8:84:00:c8:c1:de:56:28:8a:a0:54:a6:dc:94:
8a:be:b9:29:3e:71:d4:b7:e5:b1:60:63:9b:1b:9d:3e:ba:25:
0d:46:51:7a:35:d6:2b:07:f2:93:56:64:d7:3b:f9:24:35:06:
46:19:c9:10:a4:58:f6:d0:b1:eb:06:51:2e:40:4b:49:90:7f:
d5:fd:1e:2a:2b:86:97:cc:f8:58:a2:df:dd:08:96:76:ad:66:
8a:55:a5:74:17:d2:d1:e9:7c:37:e2:49:dd:06:34:b5:e4:53:
e7:02:fd:5c:45:2c:7d:bc:81:ec:a7:a7:f8:fd:b9:5d:67:97:
d7:d8:ba:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:33:07 2025 by rpki-client