Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: ATMCrfk9wsQujvtABtz8pRJpxe/UuvmWH/MrR4msCJU=
Subject key identifier: 1B:02:B6:46:2E:6C:8D:64:A5:9D:C7:33:82:2F:91:97:BE:E0:33:53
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019A2A7A5838B8BA20FAC15047C233EA7A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 1446
Signing time: Tue 28 Oct 2025 11:00:52 +0000
Manifest this update: Tue 28 Oct 2025 11:00:52 +0000
Manifest next update: Wed 29 Oct 2025 11:00:52 +0000
Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: E5LR8+571ujbBXb3ZPHyhW5WHSbZDcv4WvGOh2xdY5o=)
3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=)
4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=)
5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:58:38:b8:ba:20:fa:c1:50:47:c2:33:ea:7a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Oct 28 11:00:52 2025 GMT
Not After : Oct 29 11:00:52 2025 GMT
Subject: CN=1b02b6462e6c8d64a59dc733822f9197bee03353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:41:eb:23:96:74:b5:66:7d:bb:4a:78:23:
1a:a9:d7:5c:7a:9c:35:a6:e3:c9:dd:8f:65:a9:a0:
47:2d:89:c2:a8:44:d1:5b:17:58:56:d1:69:d3:ed:
c4:5e:aa:0a:2a:c5:37:84:c1:9a:93:71:2a:fd:7f:
69:31:45:23:54:5d:3a:30:33:32:66:27:28:30:19:
e1:35:d4:4c:5a:38:96:a9:9a:27:17:43:37:e6:c6:
32:f3:8a:02:90:cc:fb:82:14:bb:31:42:e0:ed:77:
59:fc:a0:53:09:ea:eb:c0:01:00:14:8c:8b:8a:54:
5e:2b:19:58:07:f5:00:3d:3c:91:c6:e7:ee:14:b8:
b2:01:bd:0f:b5:f0:a5:41:82:d9:8c:2b:2e:76:53:
04:dd:0c:11:e2:5e:31:e8:eb:bf:20:f3:25:b8:b8:
80:f1:8b:ec:5c:3b:bb:07:4b:99:d8:38:51:78:45:
04:a9:31:1c:cf:2d:c2:6f:ad:56:6c:59:b7:fb:d2:
8e:5d:41:8c:9f:85:ac:29:20:ad:7f:9b:b6:00:a5:
b5:28:dd:46:f9:44:15:e6:ed:7b:a1:f8:ef:09:35:
b5:64:84:9e:75:8a:71:64:32:48:fd:8d:b3:ec:ac:
07:2f:c0:ef:60:9f:ea:2a:51:63:05:f3:1e:c4:95:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:02:B6:46:2E:6C:8D:64:A5:9D:C7:33:82:2F:91:97:BE:E0:33:53
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ef:a4:a3:eb:e9:93:be:47:ad:ba:07:29:82:9e:17:cb:db:
3c:e1:af:ec:e7:91:1b:e1:82:96:37:6d:44:d6:b2:85:28:6e:
72:7f:0f:81:36:60:43:ba:a2:a5:4e:61:f8:c4:2a:e9:a5:d8:
48:e2:35:1c:f3:e2:98:ef:e0:22:ae:da:b6:1d:0c:61:af:52:
c7:22:56:cf:ec:68:5c:c1:39:52:e8:e2:d5:cb:56:4e:28:b9:
f1:a9:93:35:8d:3b:08:63:85:2e:a0:cf:70:55:71:61:96:c6:
05:3f:5e:42:40:8e:75:70:68:3b:b5:f8:ae:50:47:69:27:ad:
f5:a6:53:4a:82:18:e7:4f:08:ef:db:78:93:fe:13:54:bb:d7:
28:3f:35:3e:71:e2:b5:1f:62:6f:07:57:fd:0f:68:85:63:9f:
17:89:19:60:ee:65:84:c1:cf:74:e3:ba:4c:aa:b9:3d:00:dc:
cf:4f:c1:72:a3:a0:36:19:16:8a:e0:85:1f:b8:5f:bc:43:29:
c6:68:21:ce:8e:4e:22:0a:b0:4d:f0:2b:ed:4e:4c:16:5f:2b:
de:4e:6b:e5:b0:3e:01:21:fb:fd:03:c9:3c:98:6e:2c:69:b9:
b7:b3:83:df:be:18:cb:75:99:f2:f8:b0:a4:61:e0:31:2f:01:
7e:de:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 15:10:56 2025 by rpki-client