Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: pcaonVcZjlY+yY3w2A2AQpFOrV0l5/BodjWKQTgTNCE=
Subject key identifier: AC:02:C3:37:64:BB:5C:6C:B1:88:99:C1:4D:68:FF:B2:4B:4A:8E:4F
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 019A1CBF52EC3FF6AA7F8F079FDCB773493D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 1708
Signing time: Sat 25 Oct 2025 19:01:31 +0000
Manifest this update: Sat 25 Oct 2025 19:01:31 +0000
Manifest next update: Sun 26 Oct 2025 19:01:31 +0000
Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=)
2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=)
3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: 02NGSH7MdQobtzsveNl4z1E528nn4vFKa84Lmryq2kE=)
4: I9n8PdlI12zk3ftrt5ZejA1FrCU.roa (hash: kf3O7lpj7s7VfmT2vuNx6GwPZjLLFUhTpSV85VBR1i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:52:ec:3f:f6:aa:7f:8f:07:9f:dc:b7:73:49:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Oct 25 19:01:31 2025 GMT
Not After : Oct 26 19:01:31 2025 GMT
Subject: CN=ac02c33764bb5c6cb18899c14d68ffb24b4a8e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:24:85:74:d8:40:e0:5e:6b:31:49:33:3b:
32:ea:86:ec:86:71:f1:74:52:80:49:2e:42:bd:87:
8f:44:ac:b8:e0:c2:89:3e:c2:3f:78:42:92:04:9f:
b2:73:53:80:d7:ad:78:7d:28:18:a1:de:38:cd:59:
c3:dc:cd:16:27:e4:5c:1b:f5:13:b3:b9:7d:a0:05:
85:d1:57:b9:82:ac:72:d9:06:f0:cd:35:37:b8:c6:
95:9f:5a:ba:55:44:eb:e1:08:22:5d:a5:20:86:68:
c0:13:39:19:f3:d0:aa:b0:53:98:20:42:b5:eb:52:
a9:9e:bb:2f:68:12:1c:60:6e:81:93:18:66:74:72:
d7:95:99:b1:a9:79:fc:93:d1:e8:c6:16:c5:0e:53:
4b:6a:8d:c6:61:57:1a:08:1c:d3:f8:8d:72:4f:52:
eb:12:6d:98:a0:0a:6e:02:07:eb:7c:ec:08:27:09:
0b:49:3f:9f:17:35:67:53:ba:3f:72:f5:d3:d1:f0:
7b:bc:7d:97:5d:f7:5b:c8:8d:7a:48:a6:6f:d0:52:
e1:09:8a:33:69:1b:70:e0:a5:74:30:17:da:c7:ed:
69:fb:48:d5:61:04:d8:75:47:22:1f:29:68:8a:bd:
ef:fd:d0:17:59:23:b0:cf:63:c1:41:11:21:18:d4:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:02:C3:37:64:BB:5C:6C:B1:88:99:C1:4D:68:FF:B2:4B:4A:8E:4F
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8b:0d:f8:16:11:12:4e:15:c6:92:84:f8:10:3f:04:03:d5:
34:f3:8e:8b:e8:98:3c:d2:6a:7c:b9:18:b2:5f:40:06:0a:a5:
ab:1d:26:fa:04:9c:3b:74:c5:e1:39:0a:a9:ba:79:64:f2:c2:
41:bc:29:46:55:f4:98:d8:99:0d:ff:0e:ad:7a:c1:5a:c5:91:
ed:59:b6:45:d3:3e:ec:69:a1:e6:13:8f:8b:5e:d5:67:b7:8b:
56:be:07:83:1e:3d:22:4c:b7:bc:bf:89:b3:36:80:85:cc:43:
bb:a7:52:70:01:3e:c3:3c:d8:14:c3:9a:c2:12:c7:9b:af:fa:
9f:e1:f4:cd:82:6a:5a:15:fa:7b:9a:13:41:b7:bf:43:44:d0:
9b:ba:ef:f9:c2:4f:3e:4d:87:d7:73:9c:8a:4d:22:e4:52:34:
83:e3:04:02:6b:ca:1f:92:32:13:79:d4:ea:cc:97:d3:51:ef:
4f:7a:97:36:49:3e:b5:f6:f9:48:dc:cf:cc:10:a4:9e:85:b8:
1f:de:f6:e3:58:00:ea:5d:51:21:55:71:80:73:77:6e:3f:54:
89:3d:3d:56:eb:44:b2:83:a5:f2:26:9a:ea:95:ff:13:f6:cb:
df:35:ce:ff:81:9f:bc:1b:2d:bc:c9:dc:9a:9e:12:ae:fe:6e:
c9:d0:66:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:51:35 2025 by rpki-client