Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier: fGymwsvvwKhZemeG/Mrm8pKP9CDiK+BNJtSsw5BT/j4=
Subject key identifier: 92:CA:D2:99:53:23:F2:42:15:1F:E2:10:DE:95:D9:96:2D:45:E6:35
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial: 019A71B9140ECB572DBA93E16E9B6DD1CD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=)
2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: Cl5OXd+C5ot8iOTy8IaCjIPSR/DJIvCQvj74WrvrY+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:14:0e:cb:57:2d:ba:93:e1:6e:9b:6d:d1:cd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=92cad2995323f242151fe210de95d9962d45e635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:ab:4c:80:be:57:02:fb:f8:88:6f:c0:1f:
a3:20:91:56:a6:26:15:bb:d0:79:4c:3e:80:37:d9:
44:22:a9:a5:ee:8f:bb:54:1d:65:95:3f:c0:9a:00:
6c:04:e0:e7:46:d7:cb:2d:e9:97:4a:69:bd:ab:97:
25:b2:bd:a8:2f:f2:ee:c2:22:99:e9:1a:37:a2:7e:
f6:b6:3a:4f:27:ae:c5:7b:6c:a6:f7:26:50:1e:76:
0d:98:7b:18:82:5e:6a:97:62:24:25:25:90:ed:11:
61:ac:ae:82:75:81:31:59:f5:53:44:f3:d9:0e:4a:
20:6f:b1:26:80:42:a4:03:57:6f:e5:27:bb:74:f7:
cc:8e:c3:9a:4c:b4:de:ea:6d:95:a9:aa:23:33:88:
6a:16:9f:8c:eb:f3:df:2f:e8:57:ad:94:7b:eb:08:
39:2c:17:45:11:eb:e3:20:fe:b7:e5:3c:af:8a:92:
f8:71:db:92:1b:16:12:d1:3e:2c:74:c5:b4:f9:b7:
80:b7:49:b0:e7:b5:04:b7:16:d7:1b:b6:80:32:98:
ce:e5:20:d3:ad:82:02:75:ff:15:36:cd:f4:06:2f:
b9:74:08:79:94:78:c5:5e:19:21:78:99:00:9f:d3:
b7:d7:e4:eb:84:71:91:7f:1d:2b:02:02:a9:a8:e5:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CA:D2:99:53:23:F2:42:15:1F:E2:10:DE:95:D9:96:2D:45:E6:35
X509v3 Authority Key Identifier:
keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f4:47:b7:04:65:40:c1:21:0e:c7:5f:bb:0a:1a:d3:f3:4a:
2b:ec:e8:c9:6f:ce:1e:84:48:20:54:c5:d0:b2:b7:e5:a9:75:
25:20:42:6e:24:5d:ef:e1:32:c1:ac:0e:34:09:03:8a:f9:fc:
94:2f:ff:0c:53:3e:8e:ee:c9:02:05:0a:ad:ac:d5:5f:3a:73:
32:84:02:6f:42:52:fc:2d:e6:65:21:16:29:67:38:22:42:f0:
27:63:2b:86:61:8b:c0:db:0f:c9:71:f7:2c:45:6b:1b:b2:bd:
96:09:46:79:37:0b:da:df:18:31:c5:71:a4:9a:0e:39:8e:37:
5e:b1:98:81:07:8e:eb:cc:4a:7d:88:b9:30:a3:0c:38:0d:fd:
2c:dc:1f:f6:80:e9:47:4c:7b:29:b9:0f:05:ab:06:6d:c7:7d:
39:a9:ab:e6:9c:91:c2:70:c7:10:fb:bb:4d:9e:3e:ab:0c:da:
f7:f4:6d:4f:5f:b3:f0:db:fd:a0:ab:f7:55:94:6b:8a:17:02:
83:80:ca:5d:96:33:0e:2e:0d:08:77:e3:1d:f9:fa:0c:e5:d0:
7c:ca:30:57:5b:f3:47:d6:12:45:1d:82:cd:35:9f:24:12:c7:
7c:b6:0b:2b:03:39:62:29:d3:ea:00:35:d0:c3:1d:06:ad:27:
d8:8f:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:50 2025 by rpki-client