Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: rabbpjUd8c0JARrHEJugetYPDCqTuEms8zmm6OQAawc=
Subject key identifier: 65:AC:8D:B4:97:74:83:9E:9B:85:25:0E:2B:C0:D8:53:9C:8D:FB:D0
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 019A70A4D3413A291E325C718A5925E7764C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:00:41 +0000
Manifest this update: Tue 11 Nov 2025 02:00:41 +0000
Manifest next update: Wed 12 Nov 2025 02:00:41 +0000
Files and hashes: 1: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (hash: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=)
2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: 4ijrztGkT1GkuftFOwGQQJ0k82V5DY8ZhWG3lUgE/Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d3:41:3a:29:1e:32:5c:71:8a:59:25:e7:76:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Nov 11 02:00:41 2025 GMT
Not After : Nov 12 02:00:41 2025 GMT
Subject: CN=65ac8db49774839e9b85250e2bc0d8539c8dfbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:01:60:c3:58:10:0f:24:8d:88:12:55:f8:
38:b1:a8:75:ef:00:db:19:6c:a3:47:7e:ef:d8:56:
e3:59:0c:39:86:bd:3d:3a:7a:2c:a2:52:d3:fa:3a:
5c:5f:80:89:1f:96:68:e5:d5:a4:1b:1f:bf:bd:82:
a8:68:95:1b:c1:ff:64:7c:66:43:4c:1d:ba:e5:84:
13:0a:92:82:e2:98:f9:ff:69:22:dd:9b:31:81:a5:
90:4c:05:af:60:05:43:e2:07:cd:f2:8e:3a:23:1d:
8b:ae:b9:a0:09:13:91:d8:f8:6a:8c:0f:cc:14:56:
55:1b:e1:2d:8a:43:88:36:44:6f:ba:99:99:28:34:
1a:f5:8a:4f:99:b7:f1:4d:85:01:24:d9:89:44:db:
93:00:99:03:2f:ee:22:97:dc:a0:96:f6:83:6b:b5:
96:1b:46:b4:3c:85:9a:d8:a8:f9:6a:80:99:4b:df:
47:f8:ab:00:f4:4e:a9:9f:70:49:22:c8:08:cc:0d:
3a:de:e3:59:f0:4d:4f:16:4f:a5:00:27:7e:f8:e7:
b3:0f:20:e4:b2:ca:23:55:90:21:41:38:81:cc:d4:
bb:6b:6a:9c:80:af:97:f1:03:3e:99:2e:30:b4:4f:
89:0a:47:79:88:54:4c:7d:b3:07:ac:a3:a4:04:2f:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AC:8D:B4:97:74:83:9E:9B:85:25:0E:2B:C0:D8:53:9C:8D:FB:D0
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:72:5a:13:db:73:56:4a:3a:93:b5:3c:09:e7:79:c2:19:0b:
d7:b9:01:6c:b9:f5:88:a0:bb:90:7e:b2:db:12:ec:06:4b:34:
2b:f9:0a:16:c1:5e:5f:10:09:b1:36:bf:e9:a3:c1:dd:87:87:
62:13:72:66:f6:00:fa:19:31:82:5a:1c:2f:35:9e:de:55:dc:
75:d5:10:78:67:68:74:b3:50:65:08:e5:5a:86:48:ce:f6:1c:
2b:0a:20:d0:fa:da:81:03:e1:c0:5f:48:8e:1a:96:04:7e:b9:
f9:f5:74:b6:9c:ad:30:32:35:e1:bc:8c:a1:5d:d3:58:95:28:
03:a8:5d:38:1d:35:64:05:9a:41:87:fe:71:89:8b:ce:76:4b:
3c:3a:33:b7:3e:83:d5:09:2c:83:1b:04:56:76:90:24:b8:38:
f3:a3:56:46:99:69:ff:0b:9b:a2:7b:4a:91:e6:4b:b2:e2:7a:
0d:46:35:e3:c7:01:97:aa:59:67:93:80:33:de:6e:14:5d:65:
81:bb:cf:ab:c6:ea:7e:2b:36:80:0a:1d:3e:92:58:f0:6f:ce:
8c:e1:29:da:df:92:d6:79:f5:fa:63:39:cb:bd:a1:91:9e:c0:
bc:05:65:51:2d:33:67:be:2f:89:ae:f5:39:b1:3d:27:34:9f:
b7:7c:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:27 2025 by rpki-client