Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File: C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier: C4pDaYotUZQey+lGwF7Yz9lFMglcQI6h3otMWTdIx2I=
Subject key identifier: A6:40:C8:00:B9:76:C4:04:9D:CB:25:26:51:FC:60:18:33:88:AA:46
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 019A722663B751F5E1EFF1E9AD5184537B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: 4xDh1YjZjKfT5ygQBesN7uzUcwy9TobYzb89y0zbZPY=)
2: R78hXt59LE7w0KcWm8CyRlL8ojA.roa (hash: cdB5HrXSEQbNHbInJcgn28JFjatfOEw4A//fIUnff/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:63:b7:51:f5:e1:ef:f1:e9:ad:51:84:53:7b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=a640c800b976c4049dcb252651fc60183388aa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:21:b9:7d:5f:17:ec:b3:55:c1:6b:39:da:
75:13:67:95:d9:49:e1:07:bc:50:fe:5e:98:73:ab:
95:c1:da:1e:ec:74:a8:e2:15:92:93:e4:8c:7e:e5:
72:93:3b:a2:49:ff:b3:c0:9c:69:a4:3e:32:6e:f2:
99:50:96:ec:b6:66:4f:d2:8b:62:c4:95:62:c7:82:
55:be:22:76:88:8c:b7:e6:58:91:9d:48:f8:e4:b4:
32:a5:da:0d:90:5a:a4:d6:a9:17:6a:e4:3a:a5:c9:
65:b8:98:9c:f2:7d:f7:ec:9a:1f:11:a9:3b:bf:90:
a8:25:aa:ae:1d:d1:b5:1b:96:a1:bc:ed:8f:20:70:
9e:bf:79:b6:c6:47:fd:5b:19:51:a8:5b:fa:95:32:
d4:e3:75:ab:3d:8c:e7:fb:a4:da:42:24:c0:13:d4:
ae:0a:dc:84:3e:2a:e0:20:cc:d0:83:f2:dd:cc:e7:
b0:f0:69:48:f4:0c:4a:cb:7a:31:74:e5:a8:d6:43:
f2:3f:23:87:de:ae:51:a0:19:28:5e:c0:30:05:9d:
70:3e:bb:71:52:38:57:41:08:8e:6d:4a:12:03:b3:
59:cd:01:0b:3c:00:1f:ae:4a:34:99:7f:59:1b:e8:
1a:71:10:93:5e:f8:ef:81:99:c5:3d:5b:64:73:6f:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:C8:00:B9:76:C4:04:9D:CB:25:26:51:FC:60:18:33:88:AA:46
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c3:7e:e4:f9:03:1b:ff:b4:58:7f:57:6d:06:dd:f0:2e:35:
d6:59:d8:41:a7:fb:c1:cc:1f:e7:58:4e:1d:d2:84:cd:00:72:
9c:38:6b:a5:61:56:2c:53:ee:e4:3e:45:c8:e0:58:23:85:30:
0a:97:97:f9:19:b3:db:b5:09:91:2b:e5:fe:4f:fc:cf:4e:6f:
10:f2:4c:33:93:29:1c:a9:e3:73:73:09:c4:79:3f:62:a2:a3:
5e:92:a3:59:60:3e:c5:a5:22:59:02:63:5d:a1:37:d3:36:fe:
6a:f8:a1:c9:0c:87:9c:83:e3:84:8f:d7:16:29:9c:83:64:36:
19:12:88:0b:2b:f5:09:0a:7a:2f:61:23:a1:80:cc:22:a6:47:
3c:b3:22:dc:e3:a7:9f:7a:fa:05:a9:f1:78:5f:e4:3a:ee:9b:
37:31:f8:22:69:29:a5:ea:5b:ec:45:3c:5a:7a:f9:64:70:9b:
0d:0e:2f:d2:d0:57:51:6f:76:fc:5b:c5:19:32:dd:df:00:38:
70:11:37:63:1c:9b:85:de:74:a6:5f:57:8b:09:e0:c4:c0:33:
4d:7e:84:cc:d4:53:41:4d:cc:6a:ac:1a:4a:4d:98:1a:cc:f5:
62:d1:5b:e1:63:95:8b:39:18:8d:dd:39:2c:c2:3c:7f:0a:88:
ee:03:88:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:20 2025 by rpki-client