Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: 9KXzfhRonK87ITE6WHXTUWcy6SJ041M64v3/KHp7Yaw=
Subject key identifier: 13:B5:DB:46:F3:2E:2E:05:9D:0F:25:05:93:5B:E1:5B:BE:0E:00:D0
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 019A4EF4736E37B016E242092233546B93A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 158D
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: U5zNHZZyV4NyBVvI8v8bLR/6kWYDykAHhz7lRBYJSXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:73:6e:37:b0:16:e2:42:09:22:33:54:6b:93:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=13b5db46f32e2e059d0f2505935be15bbe0e00d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:70:39:e9:49:59:03:99:17:b3:93:0c:e0:3f:
9e:4d:4b:d5:56:bf:33:11:a2:e7:4f:0b:a8:42:95:
3a:f1:ae:a2:0d:fa:52:e0:a2:76:42:f1:da:d2:f0:
90:83:8c:85:a5:61:7e:44:1d:e8:51:99:94:45:97:
9e:02:46:b1:12:c2:60:1d:3f:c6:f6:b6:49:f0:8c:
a3:21:5c:e6:e2:a7:87:37:34:43:ed:7b:4d:74:f5:
4e:ae:ca:0f:ad:40:a4:e4:8d:3f:78:b4:0e:72:14:
e8:2d:92:2f:1d:65:b7:3a:84:31:4a:c8:f3:c1:83:
97:40:f5:ec:d0:22:fe:50:81:a2:83:67:1f:d9:c2:
fe:09:21:cb:e9:85:e6:d0:5d:aa:09:e5:ec:5f:d1:
3c:61:6c:7a:a0:e7:cc:d9:f0:61:4e:7a:8e:dc:5a:
d7:57:2e:ca:7b:4a:ad:ad:d3:32:c2:b3:0c:af:ce:
18:ed:46:3a:10:e9:cf:1f:7b:71:b0:60:e8:12:dc:
06:4b:07:35:be:02:b6:52:54:e4:3e:af:c1:cd:96:
0d:70:5d:b0:d7:24:dd:85:53:74:fd:12:ec:cc:b7:
60:a9:e7:57:e4:0c:2f:e5:e4:d7:13:39:dc:80:9c:
d8:f2:3c:a0:7f:45:56:91:71:f4:64:68:97:c2:a6:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B5:DB:46:F3:2E:2E:05:9D:0F:25:05:93:5B:E1:5B:BE:0E:00:D0
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a2:38:4c:f2:11:3d:fe:c9:90:e5:73:3f:a4:23:fe:0c:22:
4c:2d:53:0e:c8:6c:96:58:c9:5a:44:2a:cb:41:8a:dd:b0:2d:
42:b1:e5:65:8e:e9:a5:3d:bb:6e:6a:5d:30:55:7f:96:91:bf:
e0:9a:42:c5:67:e5:97:25:9e:9e:b9:62:bf:0c:43:61:32:91:
21:a1:9b:74:0f:be:bd:df:a0:58:82:75:aa:03:d1:d8:1c:38:
b4:9b:35:85:d8:89:20:80:38:96:f3:28:40:7f:3f:a3:dd:ff:
4f:14:b9:f0:ce:20:28:d3:cc:28:bf:53:94:0b:3e:7c:35:da:
28:c5:57:86:71:2a:8d:52:eb:c3:3d:a1:d5:e3:94:5c:66:f5:
a7:5f:78:cc:55:f4:15:ba:b2:7d:9d:d8:bf:30:f8:64:63:5e:
b8:b6:03:46:9f:b0:8f:e0:d4:63:57:06:79:3d:de:b2:75:44:
aa:ba:66:25:a3:c7:b8:5e:a1:62:ce:7b:79:9a:df:af:90:df:
da:f6:71:3f:6c:93:87:2d:c2:d5:a9:75:2b:5e:80:7e:57:c9:
a3:d2:c4:0b:f4:c1:0d:da:32:93:4b:b8:af:fb:46:1d:e1:55:
cf:70:89:59:6b:27:eb:bf:19:4e:95:7b:70:35:b0:77:15:be:
93:9d:64:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:32 2025 by rpki-client