Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier: IEEKIa8mCD0iw528KSUz/owwbITi7rA5UXyGC8rn86Y=
Subject key identifier: 3A:C6:C8:2C:0C:CE:AB:A4:70:E8:A7:27:08:DB:E3:3A:B3:00:49:0D
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 019A71EEF8955C8ED4E3A9ABCE31BA233AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: E0Rkepqt9NfIz2rhb2NJ5Qq2r/dYcFLdlDxCA3dv/do=)
2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f8:95:5c:8e:d4:e3:a9:ab:ce:31:ba:23:3a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=3ac6c82c0cceaba470e8a72708dbe33ab300490d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:47:ea:16:dd:04:fe:bb:da:e4:e2:da:72:
f7:80:82:d9:59:05:4a:25:2b:2a:ea:1c:85:31:07:
8c:6a:fd:9b:4e:99:35:5d:89:73:32:58:45:a1:7e:
1c:09:f4:3c:74:63:df:97:48:5e:c0:7b:eb:14:b9:
86:d4:d5:8f:92:6a:a2:90:0c:b1:f5:3d:c6:fc:61:
e8:1b:91:5a:e7:bd:a1:56:bb:85:e8:a3:f1:28:fb:
c9:1c:f9:d3:33:ef:de:36:3e:bc:94:21:17:ae:2b:
b1:bd:9f:f4:ba:bf:09:bd:f9:82:69:18:2b:c7:c7:
8d:19:33:db:dc:55:fd:fe:12:56:d9:12:0b:4a:4e:
6f:09:2b:dd:b6:fd:43:d7:0d:ab:ab:ca:5a:0b:e6:
d5:81:2a:3d:41:5e:56:f9:d9:a2:18:f5:b5:88:5e:
94:f3:b5:5e:9a:db:de:da:bd:0b:53:52:76:4e:72:
90:15:d7:e2:4d:30:f2:55:22:f2:b5:26:d5:32:09:
57:bf:b3:49:a7:b5:64:ad:a1:57:38:af:ef:c3:29:
7f:c3:d5:9e:23:ea:d7:d1:a3:c7:62:e6:f6:4a:f7:
16:87:82:02:90:c7:f2:73:cf:42:6a:ea:28:e0:bf:
c2:f3:43:c2:49:d6:1e:5c:ab:3e:15:02:29:f8:06:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:C8:2C:0C:CE:AB:A4:70:E8:A7:27:08:DB:E3:3A:B3:00:49:0D
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:59:18:fc:33:5c:b2:8b:a6:ca:00:46:30:f4:37:53:bd:b8:
0f:8b:89:e3:d6:6c:ad:b3:22:27:76:07:b7:12:67:c3:31:d1:
4c:14:1a:b4:f0:1b:80:30:11:8b:a8:46:e6:3d:a3:4d:39:2b:
c0:07:b0:f1:c0:1d:64:14:44:79:e7:2d:a5:a9:8e:8b:73:a4:
7e:28:a0:68:ca:c0:00:90:5a:e6:ff:46:15:02:9a:61:f9:e3:
c5:f9:10:b2:27:aa:a6:92:0c:a6:77:ec:e3:e8:2b:32:43:0f:
f4:c9:d9:81:c5:24:15:05:46:40:8c:4f:be:e5:9b:fd:8c:f7:
b9:b9:ef:f4:1e:c0:d7:56:e2:e6:4b:b1:f9:bb:79:c8:08:2d:
a6:b7:32:8b:bb:65:50:40:72:36:48:6e:5c:33:c7:26:98:0a:
f7:56:c7:58:c0:b1:7d:a9:76:11:5e:ea:96:4e:8b:c0:35:cc:
11:e9:7b:ff:f0:cf:98:da:6a:0e:25:86:31:0b:be:66:31:dc:
20:bc:49:d3:25:5d:af:65:3e:ea:80:4f:87:72:db:07:4f:08:
8e:f9:10:d8:89:e9:4f:b1:85:ef:0c:74:bd:97:e6:70:0f:89:
72:04:6e:9b:b7:2c:14:5f:77:fc:f8:0d:86:e1:88:24:7d:8d:
be:3b:7e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:23 2025 by rpki-client