Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: 9x0vpkKOF5bgG5yO8qRTTlZ9RycEVUdGFfzOghCQK6w=
Subject key identifier: 38:9B:66:BB:16:8E:43:C6:DE:A7:71:0E:8B:90:EA:05:A9:39:14:B7
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019A714A07CEDEB953C0321D15C5A7CA7F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 011D
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: AUKx0J4WNHpEIs7yN_p5Gj-AKQc.roa (hash: eENZl1wDIRgwnUAmEgxPXPDBi6xMrW0OqSMxiYMTiao=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: YiL174UUkU6Z5geHssNaHajJuE62mq34h21EDI+Y9A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:07:ce:de:b9:53:c0:32:1d:15:c5:a7:ca:7f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=389b66bb168e43c6dea7710e8b90ea05a93914b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:23:df:18:71:18:20:32:5e:85:9f:73:b1:
e7:2f:47:12:1f:16:7c:42:34:f9:1b:77:22:9f:fd:
0b:84:d6:20:93:d0:dd:c0:68:9a:3e:4b:88:d0:f9:
90:39:a7:51:79:1c:03:c2:cc:f4:1b:55:cf:b6:94:
3b:6e:7e:a6:76:12:89:d2:76:36:4e:14:52:05:6d:
00:11:61:d0:42:38:a2:44:2a:5a:d1:3e:d3:95:13:
95:24:57:d7:94:d1:89:0c:e6:5b:06:09:de:2b:f4:
2f:1a:2a:98:1e:13:7e:00:5e:8c:65:68:fe:08:d7:
2b:e0:3c:7f:fb:0d:ee:7b:20:04:bc:73:3e:53:10:
17:e1:19:62:e4:39:ea:12:f3:e8:9c:29:c2:0e:c9:
dc:98:8c:ea:94:67:4f:37:e1:0d:dc:54:e6:12:f7:
d0:de:2e:0a:a0:cb:4c:6d:50:9f:1e:58:80:4f:e0:
a5:21:7a:1b:5d:91:48:13:63:be:fe:43:5b:5e:2d:
f0:be:3f:75:49:ee:d0:08:69:65:09:a9:1d:24:14:
07:16:95:f8:7f:ee:10:27:c3:09:6c:57:22:f7:59:
44:13:15:ac:2b:28:a0:2a:08:48:e8:59:a8:be:61:
be:84:05:6e:f2:e9:b7:5b:7b:cd:a6:60:23:d7:a6:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:66:BB:16:8E:43:C6:DE:A7:71:0E:8B:90:EA:05:A9:39:14:B7
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4a:80:b4:44:ad:31:5a:2e:76:2e:2d:42:36:7f:e0:42:78:
0d:3f:a9:bf:b2:a7:d3:1b:3f:58:d9:51:bd:db:d2:e2:fa:cd:
c0:72:6f:7e:a2:58:e1:6b:68:b5:91:36:99:00:53:07:ef:d1:
c8:cf:11:4b:d7:c8:b2:f8:33:8a:c5:76:a9:7f:ac:3a:25:19:
a4:15:e7:8a:41:e9:74:01:10:66:f5:36:e5:ec:03:3f:8e:1b:
0f:d8:b9:69:d3:da:71:fc:2b:c3:ba:2b:3c:f4:45:b4:7e:f7:
89:15:43:a8:0c:6f:c8:48:d0:7e:ac:7e:06:68:81:79:ca:24:
5f:5a:78:ff:36:6c:4e:d5:82:c4:da:3a:e1:c0:73:65:dd:28:
a2:43:b3:c1:de:d6:3b:b2:a8:c4:50:c0:06:16:78:bb:28:51:
39:98:10:38:6a:95:f7:ba:60:f0:f1:39:0f:dd:ed:87:bf:04:
1d:de:97:e5:8a:85:a6:f5:33:88:83:77:a6:38:e1:86:85:12:
66:05:88:30:88:4c:30:ff:ed:e8:c0:5e:94:e7:e6:90:2a:a5:
46:2f:32:87:55:fe:71:a2:73:21:de:49:db:1c:7a:0d:c9:b7:
3c:79:5a:8a:3a:7c:9a:77:56:b6:1a:45:88:51:9a:23:33:8e:
45:f6:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:32 2025 by rpki-client