Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: si4J+Ai38FCxSU3v7ET/TDELnTrVDMfyfPIuFAuhEq8=
Subject key identifier: 77:75:F2:E2:E3:89:57:51:87:A0:A2:18:66:16:D0:68:D8:48:31:0B
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 019A4D06FA99C81B0235A852B30159A6C8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 04:01:34 +0000
Manifest this update: Tue 04 Nov 2025 04:01:34 +0000
Manifest next update: Wed 05 Nov 2025 04:01:34 +0000
Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: /1Rf2Zm7IsDI17iwmlsZ3hUj2SmvXS4+bNF6Fi3A8Sg=)
2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:fa:99:c8:1b:02:35:a8:52:b3:01:59:a6:c8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Nov 4 04:01:34 2025 GMT
Not After : Nov 5 04:01:34 2025 GMT
Subject: CN=7775f2e2e389575187a0a2186616d068d848310b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:5d:ef:16:8f:5c:1a:eb:5a:d6:61:ac:ec:
0a:b2:0a:5d:86:28:69:72:da:10:4b:a9:dd:56:b8:
f6:51:55:0e:a1:a4:8f:d1:94:db:62:e2:34:cc:6c:
19:b7:3a:ca:80:5c:bf:43:f0:a4:fd:0f:37:ad:c0:
6b:1d:e7:fc:d6:d0:e4:63:21:b1:91:fd:24:6d:99:
55:ba:67:38:97:b9:2b:21:74:56:b9:15:7e:32:3c:
d1:80:e5:29:71:60:85:49:32:34:fa:02:60:d7:d5:
d3:84:4d:a3:e8:7b:1f:93:43:f7:ad:d9:51:80:8d:
89:66:94:28:40:dc:cd:59:af:0e:93:96:1c:3d:1e:
7e:d3:51:85:c9:cb:ac:4c:08:37:6f:dc:02:e4:37:
db:a1:dd:f6:30:e2:b0:1c:40:fc:01:77:50:5a:43:
ce:d5:7e:09:5b:4e:a8:b6:23:12:82:b3:55:fc:50:
fa:d8:b7:89:e1:a0:e9:1e:22:69:c2:92:45:7f:86:
63:ae:70:ea:d2:03:d8:2e:f4:30:f8:f3:60:cf:20:
ea:74:37:cd:1e:56:39:94:bf:64:1d:f4:ea:42:c8:
7d:39:32:f1:76:52:c3:88:23:7a:5b:a7:9e:bd:d2:
68:5c:8f:32:d2:26:bc:6d:18:8e:1f:43:9f:62:1b:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:75:F2:E2:E3:89:57:51:87:A0:A2:18:66:16:D0:68:D8:48:31:0B
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:98:e0:c8:64:2f:c9:96:da:c9:a8:fd:a9:0d:aa:52:94:4a:
6d:d0:ec:eb:ee:f9:e4:94:83:61:1e:23:30:3f:a9:a5:8e:f3:
83:72:e8:54:2c:32:82:69:23:24:fc:59:7f:89:a8:2d:2b:e5:
da:d1:02:b1:f2:60:d7:0a:3f:97:cd:fb:11:17:7c:0c:a9:1e:
40:f9:d4:2b:79:6c:56:47:f1:1d:22:08:73:58:2f:41:7d:e3:
a7:c2:e7:08:7b:7d:d7:be:86:a3:34:25:eb:f2:ea:22:5f:96:
68:7b:07:ef:d0:62:5f:ce:12:e0:ca:9a:6a:f3:d4:14:66:2e:
af:67:4f:38:51:58:00:dc:04:e0:29:5e:d4:1f:7f:10:ba:ee:
2a:64:22:42:43:08:4f:53:1f:fc:7c:10:35:98:51:c2:15:53:
e9:4b:29:e0:a9:3d:c4:55:b1:e9:29:b4:dc:cc:2f:78:ba:42:
17:f7:46:4a:bc:8a:0b:37:09:2d:96:1c:cf:47:31:9a:1e:da:
8e:47:83:ce:36:7a:46:51:df:61:a2:b9:2e:a1:a4:6d:b1:e0:
4b:f4:7d:66:d3:70:e1:06:78:a1:69:17:f2:11:3b:b2:03:2b:
4f:c1:87:f5:b9:a3:73:7b:0a:40:39:33:3d:bc:19:99:4f:60:
c1:4e:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:06 2025 by rpki-client