Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: /irO7f2aLzHe4xtROpkbjUedtcwftFE/2akKsL5iO9s=
Subject key identifier: 56:C8:17:8E:31:11:EC:BE:4F:12:A8:3D:28:34:71:CF:65:52:35:64
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019956E83F7A0DC14EEEC73849CC81B12903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 022C
Signing time: Wed 17 Sep 2025 09:01:25 +0000
Manifest this update: Wed 17 Sep 2025 09:01:25 +0000
Manifest next update: Thu 18 Sep 2025 09:01:25 +0000
Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: 4DegA5/N0FE76c8hyH4YxVgSRuxjgrr/HgazaAIn24Y=)
3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:e8:3f:7a:0d:c1:4e:ee:c7:38:49:cc:81:b1:29:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Sep 17 09:01:25 2025 GMT
Not After : Sep 18 09:01:25 2025 GMT
Subject: CN=56c8178e3111ecbe4f12a83d283471cf65523564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:f6:ca:3e:1d:ae:8c:44:c3:cf:0e:eb:bc:
e5:d7:a4:33:72:d2:e2:b3:f7:b9:11:48:bd:53:dc:
6f:49:27:d3:5a:b5:bf:ae:7b:21:e7:3e:7e:6e:27:
5a:17:3b:37:96:88:91:5c:82:7a:f2:bf:23:a8:4a:
c3:19:b9:19:bf:c2:da:5f:07:41:43:80:5d:ac:7e:
60:88:99:d0:c0:6a:2d:1c:31:15:11:20:28:eb:bf:
e7:1a:0a:72:25:3c:1f:ff:2f:b5:b3:cd:07:c6:18:
dd:cc:cb:9f:f0:26:99:7b:02:3f:ab:81:09:28:50:
b5:f4:ea:cc:5a:5a:7e:ef:7e:53:b8:af:0e:03:3b:
c9:d9:85:d6:24:3d:ce:27:83:6e:a3:7e:1f:67:23:
cc:ac:08:2d:f0:6a:50:6d:b0:27:9a:62:b1:71:7b:
5b:1f:86:fb:13:51:48:2d:b2:d2:e8:22:fd:bc:96:
e3:7e:95:6e:a9:37:81:3f:3e:cd:e0:d5:de:6c:42:
8b:ea:9e:6f:fa:db:b3:04:c8:99:a1:4c:59:af:f7:
25:0c:d7:9d:bd:67:85:b0:95:e4:02:a0:d1:09:a9:
96:c3:e0:4e:f8:9f:f4:59:41:20:73:5b:95:94:5f:
84:c0:c8:36:59:2d:f1:dc:a9:c1:f7:a7:0a:29:00:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C8:17:8E:31:11:EC:BE:4F:12:A8:3D:28:34:71:CF:65:52:35:64
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7e:f6:02:e1:2f:e0:63:bc:a5:0b:ac:ae:b0:99:82:5f:b3:
36:ff:54:71:7b:eb:25:3a:4a:65:9f:49:9d:9a:94:1f:71:67:
8e:09:64:a5:a2:74:58:fc:62:df:a8:e2:b4:89:ac:db:b4:61:
e5:0c:13:a2:35:e3:be:93:a9:b5:95:c8:3e:2d:5a:c5:f9:ee:
cf:b5:7b:8a:8e:73:84:0c:ca:67:ec:d1:0b:9a:75:4b:41:ac:
99:88:09:74:ac:a5:10:c7:fa:92:a9:c7:1b:09:72:95:84:f0:
13:43:3b:44:90:ee:90:38:da:3c:12:6d:c4:e6:78:db:ab:41:
fe:21:ca:c7:95:fa:43:fb:96:27:92:ea:ae:24:a7:8a:9b:18:
c4:76:da:1b:9f:d8:20:11:cd:2e:9a:42:65:0f:9d:fb:38:b9:
d2:13:35:0a:33:ee:6e:e3:f8:b2:fe:46:55:f2:c0:05:b8:8b:
2e:dd:99:6c:3d:6a:21:25:1a:00:fd:a7:05:f0:9f:2f:80:b4:
30:4e:99:66:d0:c4:a8:3b:8d:f8:12:0f:b9:a0:50:10:37:8a:
f6:62:73:91:c2:0b:d7:a6:6a:f8:49:e6:77:f6:80:41:bd:f2:
41:1e:61:73:38:27:a8:48:9c:c6:ff:93:36:0f:bd:9c:4e:e2:
94:4c:81:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 13:08:56 2025 by rpki-client