Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: tmfrnEW2gQPjOyZ6sWvZTMJAsLMjNSXZBBrjo4UEKJo=
Subject key identifier: C2:78:3D:B4:B6:40:A9:C2:3F:15:9F:20:52:22:1C:D3:1C:33:25:E6
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 019A1DD141DCE89D0BB5FB974DF93E5CCC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 00:00:44 +0000
Manifest this update: Sun 26 Oct 2025 00:00:44 +0000
Manifest next update: Mon 27 Oct 2025 00:00:44 +0000
Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=)
2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: Kiz+uSvP3GPmYvXyxr+G3T+R2cIZh0Lo+VThbziZ0/w=)
3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d1:41:dc:e8:9d:0b:b5:fb:97:4d:f9:3e:5c:cc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Oct 26 00:00:44 2025 GMT
Not After : Oct 27 00:00:44 2025 GMT
Subject: CN=c2783db4b640a9c23f159f2052221cd31c3325e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:47:80:77:df:d5:fc:38:ca:c3:ca:f4:fb:
e5:fd:da:82:54:60:d8:4f:64:09:a9:05:c8:0c:f8:
ba:7e:e7:0a:81:4c:b2:cf:c6:65:55:9d:10:5e:be:
17:c4:5e:06:99:74:67:d4:f4:a6:5c:14:56:8d:a5:
59:03:73:0b:d3:00:9b:cc:76:89:9a:93:2c:d0:2b:
62:5d:64:ed:ac:2f:c6:d8:64:93:42:56:d0:5a:d0:
f2:6b:29:e1:74:dc:2a:88:07:43:c5:06:e3:bc:7f:
74:f8:6d:e7:85:90:ec:61:ae:a0:3e:7b:55:03:0a:
50:69:ca:1f:7e:05:2d:9a:43:5b:5e:ab:f7:09:b0:
86:99:5f:a5:24:7a:52:ba:ef:ed:4f:58:64:a0:58:
80:f6:65:ae:f4:ae:a8:f7:75:ac:24:5f:14:c4:fb:
78:de:2b:fa:da:88:78:d7:8b:b3:c8:4c:e0:16:77:
4d:95:78:13:b5:52:83:39:b8:a2:79:4c:84:3b:fe:
da:9f:ca:d6:c1:0f:83:ba:8b:f7:78:5b:be:d0:e3:
92:ef:8a:10:f0:31:75:75:d9:28:e9:21:5b:07:e1:
11:7c:b6:0b:d4:c8:70:64:29:60:cf:6a:fa:3f:5f:
59:e4:df:f5:b2:9f:be:c3:26:e9:6f:f8:22:9e:38:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:78:3D:B4:B6:40:A9:C2:3F:15:9F:20:52:22:1C:D3:1C:33:25:E6
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:e6:f2:6c:4a:8c:5a:cb:3b:8d:2e:ab:40:54:cf:34:13:d6:
cb:bf:8e:d6:d0:64:ba:4f:a7:15:44:7f:5b:a1:7e:e6:03:20:
f8:a4:b7:ed:6e:d1:10:5c:20:1d:79:e7:20:14:24:bf:01:67:
a7:f3:c9:5e:d9:d0:f1:1e:d7:ed:88:6a:6c:81:b3:b6:52:38:
73:5b:14:fc:cc:86:a4:3c:c9:b2:39:7e:b5:be:96:f1:96:ac:
38:c0:d7:f8:e9:0f:12:23:68:bb:ce:98:09:a1:be:26:dc:bc:
fa:d4:b8:16:6d:2f:32:75:d6:0d:0a:d8:22:df:5d:0a:2d:8d:
fd:55:cc:c5:70:d4:c8:51:bf:10:9c:7e:24:ec:cd:89:76:05:
9a:3e:da:98:04:38:b7:7b:f1:6b:b9:9d:90:1c:4e:ec:f1:4c:
90:3e:28:61:03:18:da:92:4f:87:2b:a1:3b:97:b2:bf:55:b9:
d9:85:dd:f8:ec:a5:80:0a:09:d8:19:37:dc:12:7f:0a:8d:3a:
8c:c5:40:24:d8:20:dc:fe:f2:7a:9b:24:85:5e:8e:1c:0a:f1:
4e:0c:4b:94:cc:6c:52:8c:e1:94:84:6d:61:1f:2f:ff:38:68:
74:00:03:b5:d1:65:31:4d:01:ae:55:90:02:39:47:00:47:b7:
88:af:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:55:55 2025 by rpki-client