Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File: cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier: o8E/mt/jXGN+kGbEFT/UwRCN7FkKisn9/iGTaO0NZE4=
Subject key identifier: CB:8C:B6:BF:30:98:59:44:C7:C9:DE:57:9F:1A:F1:68:57:7E:40:A9
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 019A72CA617876AD8A608135F21980DE9477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 12:00:57 +0000
Manifest this update: Tue 11 Nov 2025 12:00:57 +0000
Manifest next update: Wed 12 Nov 2025 12:00:57 +0000
Files and hashes: 1: Wk-27-wm2MeWL1AcRJVfERPG3M4.roa (hash: /2ZrWGFGh9bM8J1i4JDEX8CG9Dlb6SOL52JzWa/nfw0=)
2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: dnTAwVaK8hkaS0hJ9jVrnh4e7IbbveZTIlJ4RdokIEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:61:78:76:ad:8a:60:81:35:f2:19:80:de:94:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Nov 11 12:00:57 2025 GMT
Not After : Nov 12 12:00:57 2025 GMT
Subject: CN=cb8cb6bf30985944c7c9de579f1af168577e40a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:01:17:44:7f:a0:ae:bd:ba:30:98:c3:b5:
bf:46:47:1a:f4:52:2f:5c:fd:de:b6:db:d7:db:40:
e1:11:36:b2:85:94:9f:0b:3d:47:43:35:43:7f:11:
0b:d6:0c:7c:74:48:02:eb:56:be:29:79:79:e2:75:
67:ab:10:39:93:3d:fb:a2:5e:25:66:b6:bc:f7:b2:
03:39:aa:4d:96:f3:f9:94:8a:30:dc:f9:d6:3d:15:
bc:f7:66:32:ad:0b:5c:24:3e:65:34:59:91:fa:59:
8e:60:da:f9:92:f9:bf:ac:0a:b2:d3:c5:13:df:c5:
7f:5f:7d:e7:38:82:71:16:e0:16:ec:06:6e:c1:6c:
10:46:e6:5f:eb:d6:7e:c0:b8:16:19:67:c9:df:87:
15:72:4c:e2:de:be:53:f8:a3:43:7a:29:1b:f3:be:
df:8b:de:0a:9b:56:20:61:06:24:a1:38:2b:3c:40:
83:ee:d3:39:98:40:ff:70:df:a8:3a:2d:ff:29:cb:
52:66:55:33:6d:1d:0c:16:77:b0:25:00:16:95:e9:
e7:ab:cf:e1:f2:f1:86:d1:eb:cd:06:a6:d3:9d:f8:
ec:32:05:df:4f:97:34:57:05:5d:3b:07:89:f6:29:
6e:08:65:2e:ee:d5:0b:95:ad:4d:fc:b4:94:16:84:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8C:B6:BF:30:98:59:44:C7:C9:DE:57:9F:1A:F1:68:57:7E:40:A9
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:62:c5:af:81:05:84:97:f2:5f:4c:55:06:9a:14:80:03:f8:
80:8d:bf:bd:67:7f:bf:05:3c:ac:94:67:c8:42:40:8f:54:d8:
f2:da:9a:9b:0d:4f:7b:b2:41:9e:46:70:a0:f5:52:46:fa:8f:
4c:6d:00:f8:d4:e9:2f:64:df:d7:a9:dc:5a:f9:69:5f:7a:64:
61:01:56:da:95:c5:61:d3:b6:6a:1e:5a:ac:48:64:07:de:bf:
5d:1b:c8:b0:d0:73:d5:b4:f8:fb:50:73:98:16:9b:df:ef:3f:
df:f5:24:d7:ca:50:dc:cc:f3:86:c6:76:c2:16:ab:89:d3:4a:
04:25:ea:ee:e9:43:a8:1b:a9:14:6d:17:b6:ec:33:33:c5:98:
84:79:2c:ec:31:45:81:11:01:cb:ef:ca:16:80:59:9b:4c:5c:
a3:56:5b:3d:75:33:cc:e8:07:4f:b6:6d:83:7f:33:7b:be:6a:
a5:8d:55:f0:1b:8d:7c:fe:45:cc:91:ba:df:76:74:fa:e3:19:
89:8a:8f:9e:38:4e:f5:4c:d0:d1:93:28:5f:d6:52:0f:c1:af:
ea:13:54:6e:7b:e5:ad:f9:e0:df:1f:07:49:39:b1:a0:33:9f:
75:52:aa:d9:8e:30:7b:32:80:0d:62:64:5f:db:7b:8b:be:19:
46:d8:72:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:06 2025 by rpki-client