Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File: cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier: GA8/0n6SSESg9Wu7Rq2ymwqHPu74Y9z+Ax4f/fvzcGs=
Subject key identifier: D0:C2:24:2F:C9:0E:95:49:5C:D5:41:19:45:F1:35:72:B3:AE:62:CC
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial: 019A70A50C13DDBA94D3D1C486397394726A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 02:00:56 +0000
Manifest this update: Tue 11 Nov 2025 02:00:56 +0000
Manifest next update: Wed 12 Nov 2025 02:00:56 +0000
Files and hashes: 1: 1StjY6ciJznhPyYxQBCtbtGwaQQ.roa (hash: KYR87feBQd9Q/2I+eempgJ/F1tZKbS1g203PDf9yV98=)
2: ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa (hash: GVvErxNa6lMweOfM26d5UbHyagv3mNP8YwwVTBiOPVM=)
3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: SbuaBzvTS24UbtU+fowZj0gOKqROwNh7TvEFHfhNcso=)
4: m43cWo3KgEuK9Hc3g86LdUpWJLc.roa (hash: xJI2lb3t7JjEal+fMcBS4JFRrMKS832WVOggygXFByA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0c:13:dd:ba:94:d3:d1:c4:86:39:73:94:72:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
Validity
Not Before: Nov 11 02:00:56 2025 GMT
Not After : Nov 12 02:00:56 2025 GMT
Subject: CN=d0c2242fc90e95495cd5411945f13572b3ae62cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:fe:60:75:4c:90:7e:68:c4:cc:8d:e5:4a:
ab:18:83:65:7d:92:24:d1:39:5c:fa:40:6f:5a:ce:
af:be:99:dc:21:e1:88:e1:a6:83:8d:06:1b:f0:a9:
ee:be:cd:9d:8e:a0:dd:59:2c:5a:ac:a2:5c:f1:88:
8c:db:52:97:85:9a:3e:c6:53:d1:8b:ce:b4:de:d3:
4e:57:a4:1b:17:6a:08:8d:8e:48:3a:a2:82:ff:7b:
21:8a:b6:35:24:d4:71:a4:39:0c:4d:e2:d7:c6:72:
22:f5:3a:a7:9e:05:05:fd:0f:85:ba:e9:59:c7:f4:
49:ce:e7:38:b9:b3:ef:6c:c1:c5:dd:b4:8b:5d:69:
f3:c9:79:67:ff:9f:7a:80:89:c8:f7:90:d9:1e:8e:
6a:b5:8d:57:db:1f:05:b2:6c:0c:70:7e:68:9a:2c:
25:7b:13:0d:77:30:2d:ff:3c:39:3e:d4:93:f1:49:
e1:ce:ca:5c:35:69:53:dd:1a:5b:70:13:e3:aa:04:
92:98:8b:86:44:29:f9:12:19:ff:c6:2c:90:88:94:
91:2a:c8:8c:41:5f:72:6a:fd:33:0d:ed:51:3c:c3:
bc:66:88:9b:fc:cf:52:78:e8:1e:bc:7f:d1:66:a0:
e5:d3:b7:90:a8:f6:e8:d4:fe:2e:13:10:9d:39:3a:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C2:24:2F:C9:0E:95:49:5C:D5:41:19:45:F1:35:72:B3:AE:62:CC
X509v3 Authority Key Identifier:
keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9d:a3:2a:dd:33:9d:78:73:fa:be:1e:8b:c0:89:33:ce:02:
fe:8d:c1:5b:e4:af:d4:34:b2:04:a0:53:41:4b:78:10:a3:ef:
c7:63:f1:37:ae:c8:77:fb:4d:7f:06:79:57:8c:08:ca:e5:0f:
f9:49:5c:2e:e6:17:99:03:d0:84:ad:b8:e5:77:bb:c4:5b:1a:
a2:c5:e9:64:1c:63:d3:c7:8a:3c:45:3e:b4:e0:f2:1f:b8:ce:
7a:d7:4a:41:a6:92:ef:ab:87:56:23:ec:a8:0f:52:f7:6f:0b:
ce:ba:3f:b3:0f:25:07:0e:b3:dc:be:28:41:55:b4:e7:05:53:
b3:09:de:ce:4e:ff:57:97:38:0a:82:6e:3d:84:1b:84:ab:0f:
fb:e9:80:51:ee:47:1e:11:70:9d:98:f2:41:13:ee:79:c8:47:
d0:58:8c:7e:52:9c:89:39:3f:2f:83:5f:a6:85:35:78:2a:b2:
14:e2:34:69:9c:2e:53:2a:eb:c1:5c:53:8b:c1:ae:67:c2:b4:
77:1b:c5:1e:7d:c1:f5:95:20:be:0d:65:4c:cb:44:22:e1:27:
02:c2:4b:71:a0:f7:5c:6c:c8:49:c7:05:da:ec:a5:84:b0:19:
02:13:89:aa:16:0e:3c:5e:b2:b2:f5:70:50:89:8a:20:1c:ab:
9b:b9:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:18 2025 by rpki-client