Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: 5pB3BfRom/RkkZYsxeC1eJ1AK2Gwaa3lbeSBnAYCCkM=
Subject key identifier: C8:A9:14:D1:38:12:F5:8E:05:66:4A:E9:DF:66:E1:FB:3A:B8:30:D7
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 019A729348E5E1FD084FEABE3982BB9CDBB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:46 +0000
Manifest this update: Tue 11 Nov 2025 11:00:46 +0000
Manifest next update: Wed 12 Nov 2025 11:00:46 +0000
Files and hashes: 1: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (hash: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=)
2: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: s5QEq4mD+4NGycL+fxqC934J8VxVojjDnuY2MiflBDg=)
3: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (hash: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:48:e5:e1:fd:08:4f:ea:be:39:82:bb:9c:db:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Nov 11 11:00:46 2025 GMT
Not After : Nov 12 11:00:46 2025 GMT
Subject: CN=c8a914d13812f58e05664ae9df66e1fb3ab830d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:72:b3:b9:42:77:42:26:66:31:d3:2d:62:
4a:76:14:52:26:a4:cd:75:1c:ee:38:6e:67:19:d0:
f0:66:af:fe:4b:0f:7f:83:e3:fc:4c:5b:dc:4b:03:
4a:b5:4a:69:d0:f4:e5:9c:3e:32:90:a7:b3:a3:a5:
53:b6:54:16:3a:85:19:ce:7e:0a:c4:73:98:8a:4f:
de:5b:1c:75:24:69:e4:8b:d4:d4:12:8c:7c:e8:90:
e6:a2:8c:38:47:66:83:7e:5f:6d:7c:f4:05:77:13:
47:dd:3a:72:d3:7c:2f:6c:94:ce:78:f0:91:97:af:
d9:80:74:0a:5d:41:77:71:e0:38:68:38:69:72:43:
9a:e7:4d:e2:2d:33:82:f9:b6:fb:44:5d:31:4d:7e:
7b:6a:af:56:70:dc:e7:89:7f:d4:c4:94:81:80:c0:
f3:10:5c:83:44:d2:9d:7d:97:9c:be:87:f8:0c:ff:
4d:18:1a:45:b1:40:f8:81:9f:56:55:e2:42:a9:28:
14:25:2c:30:4d:21:55:de:bd:be:33:df:1b:c5:8b:
36:f4:97:58:52:7d:e4:89:97:a1:71:db:b6:35:cb:
c6:c9:01:7a:fa:ca:47:e5:c9:bf:0d:b7:3c:97:26:
a5:77:29:76:8c:10:3f:d8:b3:2e:4f:d9:ff:06:b8:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:14:D1:38:12:F5:8E:05:66:4A:E9:DF:66:E1:FB:3A:B8:30:D7
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fc:bf:ca:03:e6:79:66:3b:89:cc:bb:16:98:60:12:4d:f3:
a9:ec:d6:3a:85:67:fa:06:19:02:a4:e4:65:04:6c:8d:fa:02:
2e:8c:87:3d:fb:e7:ad:42:78:14:d4:00:5c:3e:73:2e:88:22:
3b:6a:5a:fd:75:a3:d5:5f:92:91:0a:3b:81:16:6f:22:87:05:
7e:6f:e8:ae:78:a8:e0:ad:4d:e4:45:c1:d5:ca:ba:93:4b:42:
0f:90:0a:01:81:16:f4:66:cb:b2:34:ad:09:d1:02:02:4d:62:
a5:03:4c:95:bd:17:ba:01:74:bd:c1:47:43:50:45:08:af:08:
c1:52:70:77:bd:d2:26:f4:c5:9b:92:82:f0:20:ef:7e:da:fd:
16:b0:03:ed:3e:95:52:b6:fa:65:31:a6:47:e1:65:74:47:b3:
11:39:67:85:f4:17:d9:55:fc:75:6b:f8:1a:c7:a3:03:23:e1:
12:ea:63:68:b6:cd:90:5f:a9:ae:79:f6:55:22:8f:14:f8:61:
b2:2e:c5:9e:d3:40:7e:8b:e8:ea:b5:4c:e5:43:e2:2d:a3:ca:
cb:af:6d:4e:98:99:b3:2f:93:8e:ec:94:57:11:58:63:eb:34:
ed:2a:d2:18:23:e0:87:5a:a3:d9:56:26:51:d8:35:9b:56:0e:
fe:1a:8b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:02 2025 by rpki-client