Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: b8M2WymFdqt2PcvPRIaIfAK4OKkssyqIJRou6ppSgZs=
Subject key identifier: 7F:88:CF:B1:F1:F0:70:48:2D:30:C5:13:04:74:36:26:9F:85:01:EB
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 0199CDFEBF0465DECFCFD47CC88CBEF96458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 16CB
Signing time: Fri 10 Oct 2025 12:00:48 +0000
Manifest this update: Fri 10 Oct 2025 12:00:48 +0000
Manifest next update: Sat 11 Oct 2025 12:00:48 +0000
Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=)
2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: eBr2p5Obz3O6Gs5TOtzZuSAA+laLy7Mhh9S8LXfpOD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:fe:bf:04:65:de:cf:cf:d4:7c:c8:8c:be:f9:64:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Oct 10 12:00:48 2025 GMT
Not After : Oct 11 12:00:48 2025 GMT
Subject: CN=7f88cfb1f1f070482d30c513047436269f8501eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:58:d7:0b:82:73:72:af:da:5d:32:19:a9:
f4:3d:7f:63:3e:80:b5:ed:15:e0:f2:27:3a:ec:41:
64:d4:1e:36:54:35:bb:3b:15:b3:2b:6d:c5:63:bb:
72:7c:77:b7:4c:8e:5f:87:a9:9d:3e:c4:d0:74:ea:
a5:f0:0f:7f:93:67:13:f0:9d:37:be:f4:96:11:a5:
54:bb:f2:9c:0b:de:3e:3e:c8:4e:96:78:4f:ba:27:
ea:bb:c3:a6:8f:96:3f:88:a2:9c:41:2d:d7:98:42:
04:35:cd:00:0f:fc:c7:7e:3e:40:ad:25:de:e8:f8:
24:fd:7c:b8:20:b4:c6:9d:66:0e:95:56:dc:6c:57:
4b:c8:49:1b:c3:5c:5e:62:f9:91:b8:c8:0e:e2:b8:
cf:4f:63:80:fb:68:1a:1a:06:ae:2f:9e:7e:02:e5:
98:29:f7:88:b2:03:6c:31:4b:36:f1:3e:70:36:79:
02:7b:a6:09:cf:81:ae:b8:a9:29:25:1d:3d:a6:c0:
07:86:0d:5a:65:c1:2b:34:69:15:3d:5c:df:d6:4f:
24:8b:41:76:b7:da:ac:40:46:27:31:97:6b:35:7a:
d1:66:44:f8:24:e2:34:ba:b7:62:84:c9:25:4e:5e:
6f:8d:d7:05:e2:b8:18:fb:69:41:a1:29:44:c3:05:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:88:CF:B1:F1:F0:70:48:2D:30:C5:13:04:74:36:26:9F:85:01:EB
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:66:02:bc:53:9d:ef:7e:01:3d:e2:f4:9c:d3:a1:c9:57:9c:
05:7c:47:ad:b8:4c:01:84:f3:f7:b1:d1:42:15:9a:85:84:2c:
02:37:5f:f7:8e:1c:f4:a3:5d:a4:5a:a8:e2:9f:78:d2:e3:02:
81:e0:bf:61:fe:ba:74:3e:88:5b:b9:7d:5d:32:2f:23:6f:8e:
78:e8:93:ac:07:7c:2f:64:ed:51:ae:f5:f6:6f:df:2b:9f:5d:
77:9c:6d:e9:22:e8:3a:b7:fd:40:7c:58:6f:3a:dd:6b:95:11:
08:de:f0:88:5e:d8:94:97:fc:15:0c:f6:ee:e4:75:6a:9a:e7:
c3:a5:ee:d9:fb:2d:ea:43:30:36:ac:8a:a1:52:b7:72:88:c8:
7c:ce:fe:a4:79:66:e0:59:15:75:00:41:10:3b:91:65:ad:49:
4a:06:ec:9c:3b:57:30:9f:dc:eb:5f:59:87:45:57:9d:33:cc:
73:4e:89:68:0f:78:98:3f:a6:b2:7e:41:55:ff:f6:a1:bd:12:
4c:4e:45:75:57:84:99:a4:4f:38:d4:aa:b0:27:91:a8:2f:3c:
52:da:e9:10:18:d9:48:10:c2:d2:26:29:80:13:e6:5d:d8:7f:
56:cf:26:af:73:28:54:b4:ef:22:1f:9e:e3:82:c5:6f:16:4f:
6a:1b:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:16:15 2025 by rpki-client