Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: IXKystD9Z3WyZLaxaKoXzsLxpYSTyKW38CvBI7VqgbQ=
Subject key identifier: 91:CE:38:97:B2:C8:5D:03:69:43:64:60:4C:D1:6F:AA:CF:20:54:FE
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 019A72932EA4936FBB40BF9201BD172CFE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:39 +0000
Manifest this update: Tue 11 Nov 2025 11:00:39 +0000
Manifest next update: Wed 12 Nov 2025 11:00:39 +0000
Files and hashes: 1: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (hash: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=)
2: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: 8lDpztN9fhRmoM7f3izjI5F1t5Av3nk1EzlK+zmV+pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2e:a4:93:6f:bb:40:bf:92:01:bd:17:2c:fe:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Nov 11 11:00:39 2025 GMT
Not After : Nov 12 11:00:39 2025 GMT
Subject: CN=91ce3897b2c85d03694364604cd16faacf2054fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:df:74:33:77:a5:62:44:6c:c1:eb:49:80:
2d:59:14:66:5e:ad:4f:3d:a7:ef:0f:a9:9e:d8:53:
86:53:05:da:f7:88:d1:b5:1f:77:f6:79:18:f5:c3:
44:11:0f:31:1a:58:aa:68:7a:71:3e:08:d9:53:06:
f6:c6:a2:61:f3:58:d3:39:f2:88:07:33:49:7c:a4:
85:13:c4:6b:e5:80:c3:88:25:cd:37:59:ca:0b:28:
96:e4:b0:fa:61:d2:01:c8:5c:90:e3:4b:e3:7a:6f:
ea:b0:28:49:5b:6c:ab:ec:43:35:c5:b4:17:da:a0:
68:11:c5:56:8d:66:f6:55:f4:33:f1:04:6b:cc:21:
4a:b3:40:04:6e:32:2d:fd:96:3b:ca:10:05:c0:1c:
46:20:50:ee:e0:3a:7a:87:0b:1d:b5:3d:5c:67:0e:
3e:97:4e:d7:b7:00:eb:50:f3:33:7a:ff:66:98:8f:
d3:a8:75:3f:76:4d:91:c9:ac:f0:d5:1a:4b:ca:63:
eb:b6:5b:b4:12:2e:62:2c:db:34:d2:f9:af:d6:4a:
49:87:9b:6e:50:4e:11:55:fb:a3:e4:b1:b9:b6:a2:
93:77:76:57:93:48:ec:ce:2c:98:c7:e4:f5:62:c1:
87:f4:d8:6e:e7:b7:1c:df:66:89:e4:f6:77:92:89:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CE:38:97:B2:C8:5D:03:69:43:64:60:4C:D1:6F:AA:CF:20:54:FE
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:69:d3:73:43:1d:69:13:a8:d9:66:7c:92:66:01:70:ba:1a:
ad:5d:94:fc:d6:69:e1:51:42:50:c4:2c:26:2a:38:df:f0:ad:
05:49:71:40:98:84:a7:43:15:2a:93:66:43:32:97:d9:55:aa:
9b:de:84:66:8f:41:7a:5a:5d:d8:51:3a:0c:7e:21:75:79:b3:
c5:d8:59:ae:0d:37:42:10:25:b3:10:8b:f8:28:70:a6:5a:97:
a2:0d:93:b0:8d:9f:c6:c3:20:2e:91:01:72:a8:54:c7:fe:0c:
45:b2:d8:36:bc:72:b5:e9:71:e5:b5:bc:cc:1a:9d:16:a1:09:
06:5b:27:6b:5f:68:ae:f9:ec:5c:e0:1f:b7:74:ff:e6:d1:36:
3e:09:68:be:4f:49:71:67:d1:ee:3c:07:a8:cf:07:ff:e5:3f:
bc:89:be:1b:69:ac:ec:3e:99:ea:1c:51:c1:d6:01:d3:2a:08:
b2:ba:40:8e:f4:f3:18:eb:b3:ae:4b:1d:37:4f:8a:e7:65:3b:
44:e7:2e:f7:c1:43:ce:60:22:33:d3:54:02:36:d0:57:89:ba:
4f:c4:12:fd:28:4b:d8:fd:25:1a:91:35:e5:b4:75:96:c0:e8:
ad:1e:ce:75:73:9e:41:7f:bb:fa:5f:9e:ee:4c:66:f5:b5:b1:
44:51:8a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:38 2025 by rpki-client