Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: CRM71ODDF9O+Z4wgEYJitd6DD1tFQt9noIyveDbPOI8=
Subject key identifier: 58:EB:2A:00:69:F1:E2:DF:35:93:46:B5:36:C4:5D:06:79:80:A7:9B
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019A55D2943DDEE3AC8A4BC8E3EEA49D87F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 02B0
Signing time: Wed 05 Nov 2025 21:00:55 +0000
Manifest this update: Wed 05 Nov 2025 21:00:55 +0000
Manifest next update: Thu 06 Nov 2025 21:00:55 +0000
Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: s6Qkgh0uhQqz6Rrgdc1GE2z9BEK+mc6/x2O0fXhqbl0=)
3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:94:3d:de:e3:ac:8a:4b:c8:e3:ee:a4:9d:87:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Nov 5 21:00:55 2025 GMT
Not After : Nov 6 21:00:55 2025 GMT
Subject: CN=58eb2a0069f1e2df359346b536c45d067980a79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:d7:ee:68:46:b3:5d:67:c8:0c:3b:55:9e:
7b:a4:e1:3f:07:2c:63:31:30:a5:2c:58:57:61:81:
ba:8b:bf:6f:03:91:9a:32:e5:e1:84:8a:cb:7d:cc:
4c:e3:98:8a:75:40:a9:3d:88:c8:5f:ae:90:15:6f:
dd:99:7f:01:f5:68:99:0c:a5:e8:c3:fe:87:95:74:
24:21:cc:10:8a:09:0f:22:d2:03:d3:62:ff:8c:41:
3c:16:73:6f:06:a8:d0:2f:02:82:c6:01:70:e3:f7:
9f:ac:1c:35:53:f2:12:50:87:12:28:d1:17:c4:15:
21:14:57:42:22:09:ac:fd:b5:be:ff:41:2e:95:e8:
fc:e1:19:ee:22:3c:a9:bb:ab:51:b4:10:cd:3b:aa:
6f:7a:8c:61:fa:ae:3f:de:82:5c:4b:bf:50:9c:fb:
1a:71:36:16:1a:de:14:a1:b2:6a:09:22:1d:a6:8e:
68:d8:6a:d7:d3:7b:ed:b3:a1:04:ec:f1:3f:62:cf:
cd:97:f3:91:c5:62:d5:52:85:14:25:43:eb:7e:1e:
ad:a0:e9:53:04:ad:ec:da:f2:b4:90:d2:7c:25:77:
cd:10:74:67:38:63:2f:fb:fc:97:2f:22:41:56:f0:
c9:74:4c:f6:da:d4:2e:1e:31:62:85:a8:b1:5e:45:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EB:2A:00:69:F1:E2:DF:35:93:46:B5:36:C4:5D:06:79:80:A7:9B
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3d:d2:66:7d:2a:b1:db:d0:46:41:d9:f0:77:26:ca:83:de:
9f:87:3b:8e:77:ac:fe:b3:60:5e:bb:c1:68:95:4c:c2:b6:77:
fe:4c:e2:c3:51:c1:d0:8b:7d:0f:81:9f:b6:b1:49:70:5d:84:
52:d4:83:07:75:70:00:7a:18:f4:26:04:49:8c:7d:68:43:9d:
1c:2d:64:92:e7:4b:cc:fb:ae:1f:5f:b1:9b:4a:30:d6:72:cc:
f1:59:46:69:f3:06:3d:b1:20:ef:32:69:b8:cf:df:c1:be:be:
7c:5f:fe:a9:78:59:cf:99:43:c5:15:13:a7:bd:f1:8e:87:e4:
48:00:09:f3:bd:57:2e:44:3f:4d:81:c0:0e:c3:a0:3c:24:8b:
36:7e:15:18:77:04:61:1d:1d:ac:42:2e:bd:8f:61:bf:a2:8e:
72:69:28:5b:fb:59:9f:2c:57:d6:a6:95:7b:35:ab:59:22:17:
29:8d:55:a7:a2:6c:64:f3:0f:d6:d7:51:dd:86:f0:dd:ff:c1:
0c:12:2f:eb:b5:d7:06:33:d6:a1:8b:c4:d2:74:75:ad:b7:79:
76:06:45:ff:a9:ba:1c:8a:f9:9d:ed:93:29:37:9c:1f:61:7f:
96:85:e6:26:65:57:2a:66:00:94:70:74:8e:cd:3d:f5:a1:5f:
78:95:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:46:17 2025 by rpki-client