Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: 46E8hQqvMNWjHqPAfr1BJ8+mTDxELYH+JoH47iOkhVY=
Subject key identifier: DD:18:6B:37:64:A5:6F:1E:A1:08:24:B2:C6:1F:D2:E6:EB:23:9F:92
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 019A71B95B3245AC3D9F9C8EAFFCAA2F398A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:44 +0000
Manifest this update: Tue 11 Nov 2025 07:02:44 +0000
Manifest next update: Wed 12 Nov 2025 07:02:44 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: FGRebsTcMdFn7ThXGq18tozC4AkCP4V9WDb4BHhZIUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:5b:32:45:ac:3d:9f:9c:8e:af:fc:aa:2f:39:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Nov 11 07:02:44 2025 GMT
Not After : Nov 12 07:02:44 2025 GMT
Subject: CN=dd186b3764a56f1ea10824b2c61fd2e6eb239f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:7b:ea:bd:89:37:2e:f8:3f:45:60:d4:cb:
45:2a:6c:10:e6:7f:6c:f1:c3:42:00:38:32:f0:85:
c7:bd:f7:91:d0:df:01:7c:ff:7c:b1:f8:cf:2a:fa:
cb:84:4e:a0:45:15:6a:c3:e2:f2:25:ab:29:30:7b:
d3:f7:ef:d7:81:30:1e:de:6c:5b:98:1d:22:36:3a:
33:7d:d3:9d:d1:f8:e3:6d:6f:9e:77:88:40:17:ae:
9b:37:f9:fe:4d:9a:ed:4b:50:ff:28:9f:0b:17:0e:
7c:26:19:e8:8b:e7:b0:41:17:9d:30:90:ad:a0:f3:
ac:d9:db:37:3c:6d:80:2e:52:91:f1:2f:0a:3e:1f:
db:99:18:50:a1:6e:e1:2d:33:24:d6:3d:8d:36:74:
70:fa:a5:bd:18:e7:f6:37:75:d3:92:06:71:1c:b9:
50:0c:a8:10:28:cf:dd:0c:4c:bb:19:23:db:2c:0b:
5c:9d:62:c1:a3:6c:08:77:f3:6d:cf:a0:62:b1:bc:
91:ad:00:9b:f9:5f:49:c6:97:d7:19:5b:3d:ed:6a:
50:bb:a7:45:23:b8:62:13:7f:40:f2:45:c0:b3:88:
1d:05:03:3e:ab:0e:7c:6c:e4:f8:7f:e1:68:d3:9b:
a8:9f:64:8e:47:e9:cf:a2:ce:7c:37:91:41:68:a5:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:6B:37:64:A5:6F:1E:A1:08:24:B2:C6:1F:D2:E6:EB:23:9F:92
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c6:48:77:bc:5b:bd:56:94:c5:21:01:fa:7b:a1:58:7e:4e:
24:4b:23:9e:2e:79:86:1c:2e:3a:60:a1:a5:d8:87:d0:c0:fe:
e3:8a:15:47:b9:67:c7:32:6a:eb:28:e8:45:98:bf:e1:9f:19:
06:bd:87:4e:70:4b:dd:4b:5c:ef:fc:f7:54:96:b3:f3:f8:ce:
97:42:df:cc:1a:70:4b:b3:4c:75:e0:e6:df:84:2a:c6:ec:78:
e9:eb:c9:9f:eb:58:06:8b:66:e7:69:e4:de:c1:65:83:04:af:
1e:45:b8:a0:75:d6:57:1d:84:40:f8:a3:bf:1d:af:7d:a7:fe:
3f:66:88:ee:ce:4f:f2:be:5e:53:ed:25:b0:cf:9c:7c:78:42:
a3:9d:24:fe:09:a5:95:f8:c7:cb:56:97:fe:f7:d6:c5:05:d8:
4d:59:0d:d0:fb:63:9b:6f:b9:f9:4d:2d:65:40:c6:18:c0:c9:
83:ce:dc:8c:d6:19:a7:a3:40:7a:95:8b:a5:67:6e:fc:a1:36:
15:d3:7f:3f:33:d7:80:df:f8:ec:91:70:5a:51:5e:45:20:34:
43:46:ab:2d:f4:2b:98:d8:0d:c8:bf:06:ed:a5:95:37:22:88:
75:ce:91:5d:d2:94:d3:da:86:ec:07:b7:b7:7c:a6:ba:2e:ed:
db:8c:be:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuVsyRaw9n5yOr/yqLzmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOWZkMzA4ZmUzZWFkYmEzMzQ2OGNlNGJiOTk2YmJkZDhj
ZGU2MTUwHhcNMjUxMTExMDcwMjQ0WhcNMjUxMTEyMDcwMjQ0WjAzMTEwLwYDVQQD
EyhkZDE4NmIzNzY0YTU2ZjFlYTEwODI0YjJjNjFmZDJlNmViMjM5ZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthh76r2JNy74P0Vg1MtFKmwQ5n9s
8cNCADgy8IXHvfeR0N8BfP98sfjPKvrLhE6gRRVqw+LyJaspMHvT9+/XgTAe3mxb
mB0iNjozfdOd0fjjbW+ed4hAF66bN/n+TZrtS1D/KJ8LFw58Jhnoi+ewQRedMJCt
oPOs2ds3PG2ALlKR8S8KPh/bmRhQoW7hLTMk1j2NNnRw+qW9GOf2N3XTkgZxHLlQ
DKgQKM/dDEy7GSPbLAtcnWLBo2wId/Ntz6BisbyRrQCb+V9JxpfXGVs97WpQu6dF
I7hiE39A8kXAs4gdBQM+qw58bOT4f+Fo05uon2SOR+nPos58N5FBaKVDeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0YazdkpW8eoQgkssYf0ubrI5+SMB8GA1UdIwQY
MBaAFAqf0wj+Pq26M0aM5LuZa73YzeYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDct
YTFhYmIyZWZjODFjLzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDctYTFhYmIyZWZjODFj
LzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8ZId7xb
vVaUxSEB+nuhWH5OJEsjni55hhwuOmChpdiH0MD+44oVR7lnxzJq6yjoRZi/4Z8Z
Br2HTnBL3Utc7/z3VJaz8/jOl0LfzBpwS7NMdeDm34Qqxux46evJn+tYBotm52nk
3sFlgwSvHkW4oHXWVx2EQPijvx2vfaf+P2aI7s5P8r5eU+0lsM+cfHhCo50k/gml
lfjHy1aX/vfWxQXYTVkN0Ptjm2+5+U0tZUDGGMDJg87cjNYZp6NAepWLpWdu/KE2
FdN/PzPXgN/47JFwWlFeRSA0Q0arLfQrmNgNyL8G7aWVNyKIdc6RXdKU09qG7Ae3
t3ymui7t24y+qw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:53 2025 by rpki-client