Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
File: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft (raw, json)
Hash identifier: a4+ofEeKh9qRuZ4LK6kD1Koep3v/VRd0w68RInao230=
Subject key identifier: 22:C8:67:D1:1F:15:6C:CB:24:1C:AF:04:D5:00:43:E2:EB:83:CD:BA
Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
Certificate issuer: /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Certificate serial: 019A730105B782F66C8462C163CE2D39028C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 13:00:38 +0000
Manifest this update: Tue 11 Nov 2025 13:00:38 +0000
Manifest next update: Wed 12 Nov 2025 13:00:38 +0000
Files and hashes: 1: 5o12bWwrOgNj5T2QC_xsDzw2auo.roa (hash: z+dRGRfQAE/aaRQhADQq91xi62QWjaX7M/KM35XckmU=)
2: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl (hash: wYoWoRL2igB1cosZg93d5wk6f4MBOjHBAJNowcBgZmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:05:b7:82:f6:6c:84:62:c1:63:ce:2d:39:02:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Validity
Not Before: Nov 11 13:00:38 2025 GMT
Not After : Nov 12 13:00:38 2025 GMT
Subject: CN=22c867d11f156ccb241caf04d50043e2eb83cdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:ce:d7:61:2a:ca:13:a2:84:14:3b:68:8d:
67:4d:b9:c4:c6:50:93:e7:7d:9c:8a:0f:57:ec:b4:
22:c9:e2:27:18:d2:0d:91:9d:95:98:f5:f1:3f:33:
58:36:2c:87:1a:b2:93:8f:2e:cf:8c:5f:d6:77:35:
b8:61:ee:44:74:25:ab:4f:6a:06:10:f6:33:3a:53:
81:4f:31:2b:5a:c9:d8:e6:8a:a8:e2:4c:86:03:35:
9f:c9:1e:0e:fa:d9:ad:e5:7b:bd:1e:42:18:b2:c1:
a0:05:f2:5a:00:03:4e:4a:66:b2:b6:c3:8c:eb:8f:
2e:d6:2d:16:78:3b:d4:e9:4f:5e:30:42:51:5b:5a:
af:69:d0:53:18:24:18:4e:24:b8:6c:55:eb:13:98:
57:13:f6:1e:80:ae:3c:c0:dc:f8:33:26:a0:3c:df:
18:2f:a8:6d:d1:5f:13:78:d3:ab:10:d9:bc:c4:37:
91:14:7c:f2:58:5c:26:43:bd:91:51:61:58:bb:e6:
26:8d:7c:31:64:e7:47:c4:77:f9:a3:b9:d7:68:08:
c1:69:f3:43:a5:1c:0c:a9:78:d6:8b:74:d7:9d:4c:
d4:11:d5:a5:fe:4a:ef:7c:11:41:a3:d4:b9:02:08:
48:f0:95:24:33:25:06:97:f5:7f:d1:bb:a0:fd:c2:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:67:D1:1F:15:6C:CB:24:1C:AF:04:D5:00:43:E2:EB:83:CD:BA
X509v3 Authority Key Identifier:
keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b4:20:a0:0b:69:66:f7:cd:da:85:12:e7:f5:46:4c:fe:f6:
60:b5:63:e2:6e:b5:4f:44:41:4b:12:b1:90:c6:59:59:44:c3:
20:7d:9e:00:b3:e8:80:fc:d4:45:de:ce:28:91:6f:08:25:25:
cf:81:05:69:32:6d:0c:52:e9:8c:79:57:38:3c:c5:78:48:02:
4d:7d:34:55:29:d0:b9:b8:b0:39:e7:c1:85:3f:1a:99:91:bc:
99:58:54:1a:db:3e:98:d6:af:27:aa:bc:ff:69:d9:68:11:2d:
cf:2a:78:a5:7f:79:96:b4:83:6e:ee:6e:f7:9c:cb:e2:9b:3d:
bd:99:7c:8f:aa:a2:1e:dd:b1:64:f1:cd:0b:af:77:b8:d1:b9:
59:0b:c9:f1:de:73:c7:33:3c:3e:10:67:b3:ff:36:65:2e:33:
18:1d:bc:83:1a:a0:39:70:82:07:d3:09:eb:2f:e4:ea:a5:5c:
74:f9:fb:42:04:52:0e:f9:65:f9:75:e3:90:1c:34:ce:f1:21:
fa:60:ca:79:de:36:1c:a9:d6:bf:2a:35:ed:72:7b:18:e5:65:
90:41:67:6b:14:27:70:4e:b0:05:c4:8c:26:3e:ff:58:b9:e9:
39:14:f5:13:ea:26:7b:00:b3:68:60:7a:de:87:36:39:68:ba:
ad:a1:e2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:47:26 2025 by rpki-client