Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: J8P5ybpKn02lFBnc3QMjio5Oj9A3PP2ApSCdxuhxI8M=
Subject key identifier: 66:44:B1:E8:DB:41:EF:23:7C:72:6E:47:E9:D6:C0:45:84:96:F6:B8
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 019A714A2736ACD009239CA9528853A28093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:01:16 +0000
Manifest this update: Tue 11 Nov 2025 05:01:16 +0000
Manifest next update: Wed 12 Nov 2025 05:01:16 +0000
Files and hashes: 1: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: KYvL+gPCh0jQsyqFcSsWyd2Mdba8Up5ty/eCisZMGQk=)
2: jWNgVTvc3owe3kF91r8d7uRQV_o.roa (hash: uQLZ/d2z4o+33Z42D6wrDoH9q/yv6pAWgOV+vjfJeYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:27:36:ac:d0:09:23:9c:a9:52:88:53:a2:80:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Nov 11 05:01:16 2025 GMT
Not After : Nov 12 05:01:16 2025 GMT
Subject: CN=6644b1e8db41ef237c726e47e9d6c0458496f6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:4d:47:fa:62:23:bf:b4:6e:f1:21:a7:ae:
d5:29:3f:53:9a:fe:22:9e:30:4a:1d:a1:d3:ed:74:
20:a1:f1:e1:5e:40:88:41:bf:42:ae:c9:42:bb:32:
32:35:6a:3f:ea:cf:8f:e7:c9:99:4d:06:6a:62:60:
a9:1b:c5:71:ff:83:0f:d5:46:fc:16:d0:69:11:b7:
1d:37:ad:22:96:47:69:93:7c:04:e1:00:88:b9:d5:
d4:07:6e:6f:ce:ec:a8:d6:59:95:fa:03:6f:23:2e:
dc:b2:c6:46:dd:0c:1b:5f:96:d3:07:34:56:aa:eb:
68:0d:37:41:6b:58:68:86:12:f5:45:5d:95:d4:f0:
c4:7b:98:15:e5:c4:61:e9:d0:ad:97:53:54:a7:f5:
ef:32:20:92:e7:72:36:58:60:2c:8c:1b:4a:58:35:
bb:ad:83:7f:84:b7:0a:ac:45:7d:46:6b:da:6c:91:
3d:c8:5d:26:e1:6a:cd:89:8f:40:ea:ff:2a:0d:03:
47:2b:73:4c:63:bc:85:b3:20:e5:0f:f9:73:37:a5:
f5:8c:57:42:87:68:4d:f8:60:b3:9d:1e:c0:de:1a:
57:e1:24:e8:c3:4c:bc:af:4a:69:75:73:ac:2e:61:
71:3f:6b:d2:5e:a4:cb:c8:5c:e1:38:9d:8c:b3:01:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:44:B1:E8:DB:41:EF:23:7C:72:6E:47:E9:D6:C0:45:84:96:F6:B8
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d0:99:48:53:51:f8:32:53:4d:99:56:3b:d2:00:c9:85:02:
1a:23:bb:3a:77:4f:95:06:c0:cd:bb:1e:cc:2a:b4:ae:1d:d4:
9f:b0:18:d8:76:57:19:ba:9d:2e:5f:9e:db:67:f6:f9:c7:fc:
d2:c6:07:d6:39:79:58:7d:be:c8:f6:4e:85:a8:1a:a6:5d:66:
fc:8a:c1:26:16:a0:7b:25:61:57:39:1d:c0:b3:bc:91:ce:9e:
1d:b8:f0:13:1a:b6:3f:34:5f:41:0d:52:ed:42:ed:e1:79:a6:
92:54:07:39:3d:80:ea:c3:7c:ca:f2:3b:91:67:ae:e3:68:a8:
92:d6:38:56:02:81:af:58:ee:84:1a:53:02:dc:73:6d:75:07:
a1:0a:7e:e4:5f:27:c9:78:60:95:52:cc:5c:4a:74:3b:58:4a:
1d:bd:52:fb:eb:24:94:2a:87:38:60:46:a9:a6:36:d0:eb:05:
a3:b6:ae:84:32:7c:f7:03:f6:be:79:b6:51:37:5d:c5:cd:f2:
20:e0:c0:0d:78:e2:3b:28:eb:a5:2f:8f:5f:43:29:69:97:38:
74:c8:12:3a:5f:ba:5b:31:f1:1b:ce:2a:ab:e5:20:48:df:13:
52:03:76:7d:a7:8d:7c:c0:20:bf:d8:15:f6:91:04:54:94:a8:
1d:b1:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:01 2025 by rpki-client