Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier: VApt1KctNpC5jhCesgJa/aLM1zvKMqjHzvEYsYwR3bE=
Subject key identifier: DC:6B:46:2F:C6:CB:09:39:1E:EE:4F:DC:8E:45:C8:80:CD:C4:6E:1C
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 019A71B818D894526D3DDC8BBE39914D6480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: 16PMvyBjwLMgKpIOkxrHYliD-08.roa (hash: Y3LQq9IlsGjKrSV01GWpHO25wmy0HId5ENMWGwyBnEU=)
2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: xGZtus1qLy9yBmBdT6NUh1l/hq/sRK/hSBWi+Xss3mY=)
3: jgcslWHmygjkRIS6MtfzGhZ40MU.roa (hash: sDmrr8zpKt5WpBGAECM7NZQll745IxQeWlqllvJtGkM=)
4: nikcVRLPEkpjmj22Ziw5gbk7U3I.roa (hash: MneHYx5l45SiPBky73Uw5AM8Oy5u1LgkSXDWT7ZAv/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:18:d8:94:52:6d:3d:dc:8b:be:39:91:4d:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=dc6b462fc6cb09391eee4fdc8e45c880cdc46e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:10:fb:06:1a:66:b0:f9:88:ec:d2:d5:f1:
2d:09:29:79:68:0e:50:57:08:fa:8e:41:81:2a:92:
a1:14:64:00:be:81:a6:90:fa:8a:6b:6d:5a:ce:ce:
b7:40:4c:53:c7:f2:3c:1c:f0:dc:8d:22:9f:be:62:
dc:04:f5:b5:55:94:04:7d:d2:1a:c9:b9:3a:d5:28:
20:98:0c:67:8d:c0:b4:92:a0:a1:7f:58:82:6b:59:
9e:ea:b1:b1:33:eb:58:bb:8d:4a:b5:3b:20:4b:01:
a4:b8:7b:8c:bc:d9:76:1d:f5:93:12:d9:10:e5:bd:
0a:6a:77:ac:87:82:b5:0e:0f:3f:86:5f:87:5f:87:
f3:18:f3:65:2e:4e:0c:7b:00:f5:f2:a1:d3:91:32:
48:21:eb:ba:cb:82:33:49:03:c5:c8:62:ff:8b:c2:
da:ec:13:78:ad:b5:79:79:ba:c6:e9:7b:0d:03:62:
32:f8:7e:e3:c8:36:c0:fd:ec:57:14:69:ff:10:0f:
36:d2:0c:6b:bc:b7:0e:c3:07:1a:65:68:5f:c4:7f:
27:3e:b6:fd:33:2d:3f:55:6f:a1:ad:4e:0e:83:bb:
19:fb:1a:99:ad:b1:9a:7a:51:ea:c7:dd:e9:a0:67:
37:cb:00:e7:42:75:25:db:f2:e9:5e:4e:9e:4c:e9:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6B:46:2F:C6:CB:09:39:1E:EE:4F:DC:8E:45:C8:80:CD:C4:6E:1C
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:72:ea:92:40:76:5d:bb:7d:75:d8:bd:7f:5a:7c:5e:0b:4b:
b2:34:46:7f:64:43:d6:a4:01:28:26:36:6a:8a:fe:aa:b0:f6:
1d:cb:72:b7:c5:73:10:1d:b1:01:59:2d:6d:ce:f6:12:ba:c9:
67:2e:bf:6a:d8:e9:40:de:92:8d:b0:61:1e:66:53:27:fd:a1:
64:15:cc:fa:b0:86:37:71:7c:5d:6e:66:d7:6a:ac:3a:08:b8:
11:6e:8a:e5:9c:b5:90:a2:c4:eb:76:97:80:3a:1a:ca:f4:32:
e7:78:b9:53:ea:59:1d:da:dc:4a:ce:b1:e2:a4:0d:fb:aa:29:
71:9f:7a:d5:77:9d:b0:8d:aa:84:2c:34:79:79:c1:bb:f8:7c:
f0:b4:45:1f:1a:52:17:8b:c0:71:e1:2c:eb:a5:83:db:a2:ef:
7d:64:b4:dc:ee:26:e1:78:84:73:0f:64:fc:ba:9e:31:01:59:
a1:b5:65:64:8d:c4:d1:81:00:e5:91:c1:99:43:aa:b6:5d:3a:
02:44:59:ea:44:74:2d:08:28:96:6f:18:bf:3c:81:ea:f0:6b:
53:68:76:09:7e:e1:dd:de:07:1c:45:bd:54:b7:00:cf:f4:d0:
d5:cf:e9:34:a3:a0:ee:89:9e:d7:2c:ea:c2:96:91:90:91:1f:
7d:ac:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:52 2025 by rpki-client