Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: /dB5jW2XzOLLPDxW9WUmexdEZrfHFIsEc68WF57ldkE=
Subject key identifier: 78:D8:79:BA:18:94:9E:AB:DB:C9:07:F2:38:18:84:2E:DF:BB:39:E6
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 019A7112E8191E59887E10004F43BC2BD6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 140E
Signing time: Tue 11 Nov 2025 04:00:55 +0000
Manifest this update: Tue 11 Nov 2025 04:00:55 +0000
Manifest next update: Wed 12 Nov 2025 04:00:55 +0000
Files and hashes: 1: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: qz/4vPsj6W1gRqhLQW9llNd7BxRqd7KK3l11sghhUuM=)
2: iViHONOdVrtJaKvFtb1zW5ZiFfE.roa (hash: y//sfFe0FaBOPBIT3c460VOfTsEZyJ671nHpKb/hUio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e8:19:1e:59:88:7e:10:00:4f:43:bc:2b:d6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Nov 11 04:00:55 2025 GMT
Not After : Nov 12 04:00:55 2025 GMT
Subject: CN=78d879ba18949eabdbc907f23818842edfbb39e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f0:79:a5:2b:50:d2:70:df:36:4a:19:2a:2c:
fe:d4:27:da:54:b1:43:c8:54:9d:ed:0e:4d:e2:85:
e8:22:5f:f7:75:80:d5:10:20:37:b3:ac:72:dd:c5:
f2:5b:1a:54:9a:26:c3:d6:11:4b:57:22:f2:99:3d:
06:da:a5:a8:06:b4:fc:5a:68:bb:ce:57:04:bd:03:
9d:07:e7:50:e1:60:65:25:39:19:f5:d0:1a:dd:b7:
0e:3f:a7:53:5d:e7:d1:3b:37:3c:5d:6c:8b:70:3a:
59:bb:15:af:b1:93:63:ea:98:2b:9c:56:73:67:15:
00:07:f6:aa:1a:da:5e:97:ac:3d:b6:1e:f2:31:9c:
20:79:cb:62:b5:6d:54:66:29:51:e3:6b:c8:f7:e5:
a5:a3:23:d2:a4:15:78:09:81:2a:9e:03:33:07:7c:
af:f5:d1:71:bb:c3:e9:88:d7:84:1c:54:1d:b2:ef:
52:3b:46:16:52:a4:1b:93:64:aa:e3:d8:c4:0a:0c:
ae:78:4e:0c:e4:09:07:78:33:7b:54:36:9d:14:40:
fd:98:7d:3b:50:78:7f:62:49:ae:76:86:81:e3:79:
d0:a4:f8:33:e0:5e:de:91:7a:ed:70:69:0e:b3:99:
01:cb:93:b8:9e:e2:c5:bd:37:af:5c:d4:5c:4d:a8:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D8:79:BA:18:94:9E:AB:DB:C9:07:F2:38:18:84:2E:DF:BB:39:E6
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6d:6e:cf:f4:da:a8:0c:de:69:55:41:ee:40:33:f3:b9:c2:
42:38:51:14:4d:3e:86:39:d4:90:c0:f9:32:7b:63:96:94:97:
aa:92:c3:b4:70:95:9d:e7:bf:b1:e9:c9:7f:1f:61:e2:11:bd:
e1:b3:7d:ef:0f:dc:40:fd:81:97:e2:7a:15:85:bb:b9:f3:04:
6a:48:7c:1d:0b:98:fe:5e:c3:e8:3d:1f:b8:b0:d8:82:3f:17:
f0:c6:ce:da:4a:b1:e7:0b:c5:a8:7f:bf:d7:91:d2:9e:03:b7:
bf:c2:df:66:50:82:7e:19:15:17:bb:52:80:66:8d:1a:6a:f1:
a7:04:cf:15:e1:cf:1a:be:50:2a:e2:75:1b:4a:80:12:5c:fb:
70:09:9a:98:1c:4d:e7:a4:30:a9:87:bf:51:22:74:e9:86:b2:
04:89:39:c9:6c:41:a9:13:71:46:ba:f6:42:54:43:0e:5a:52:
6b:08:d4:ab:85:83:23:a9:06:74:15:2c:93:bf:b0:f7:f8:cc:
3a:92:0e:50:f9:85:dc:6c:43:74:be:8f:94:dd:cc:a4:c3:b9:
3f:32:42:39:05:c9:10:21:be:52:40:d5:69:31:f0:c2:56:b8:
a6:25:08:43:03:ce:cb:2e:04:dc:88:c0:7b:48:a2:c1:1c:99:
9d:3f:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:34 2025 by rpki-client