Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
File: fCypuamhkyJ5l3TnoXn0qnLMN0E.mft (raw, json)
Hash identifier: CyuV5y28eqs2PH1Wu0UMcVBVmZNzGGKG6XMi4qSTGMw=
Subject key identifier: 98:F9:0E:9F:47:58:17:C7:9B:A9:9E:3F:7A:BC:11:33:B1:B5:0D:5B
Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
Certificate issuer: /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Certificate serial: 019A7225ECA1B3A5584E41266DAFCA65F373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: 6B9KDmaoJ3rOhd-DXQ38naI0D4Y.roa (hash: ynSoGLNXCvZga5FxofhRDHQzU/lO6RFc2BKWCKFwLDc=)
2: fCypuamhkyJ5l3TnoXn0qnLMN0E.crl (hash: 92gsCQlWfh3V5c548LGVFIsfH/2c6XWzpinfnS9GlJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ec:a1:b3:a5:58:4e:41:26:6d:af:ca:65:f3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=98f90e9f475817c79ba99e3f7abc1133b1b50d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:76:c2:6d:c9:fb:6e:72:1a:80:88:b7:cb:
ca:4d:da:af:34:e4:f8:76:81:ec:ca:6f:ce:71:97:
4a:85:4b:89:60:7e:ba:44:00:4f:69:9d:74:f0:fc:
d4:e7:85:4f:87:e7:b7:a5:11:a4:31:28:ec:d4:e2:
ad:da:b0:b5:dc:94:40:73:e6:41:93:e2:97:77:db:
5d:cc:4c:65:df:eb:9e:06:d0:ec:33:e3:3d:64:a2:
75:8c:70:91:c3:42:68:0c:97:71:1a:fd:71:74:66:
80:54:5e:77:2a:ec:57:6d:2d:48:3d:25:db:a8:d0:
55:05:78:f2:37:de:8b:53:6e:ed:56:4a:39:32:3c:
f7:25:60:d1:71:7a:12:ea:de:21:4f:8a:52:fa:3f:
f0:62:b1:ea:94:14:94:1a:ab:db:f4:ff:15:0b:a9:
a4:6b:cb:e9:67:ea:54:9e:af:42:14:4d:e6:64:11:
4c:8b:65:75:8c:ff:29:fc:74:26:ae:9e:37:88:c5:
d8:c9:fa:0b:47:13:7b:7a:a1:5b:c9:f0:fb:a2:85:
57:78:fa:22:43:b6:da:9d:a0:7e:6c:d7:c5:21:10:
56:f1:81:3f:e4:18:db:63:67:1b:77:4d:7a:72:7d:
b2:d2:eb:a0:11:cc:e5:79:59:52:92:0f:38:db:fa:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F9:0E:9F:47:58:17:C7:9B:A9:9E:3F:7A:BC:11:33:B1:B5:0D:5B
X509v3 Authority Key Identifier:
keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0f:8c:fd:9f:b0:20:d3:53:82:b0:58:6f:cb:be:d4:2c:ab:
bb:f3:37:88:d1:ee:3d:bd:ec:3b:34:77:5f:96:1f:45:b6:9b:
5f:35:26:fd:04:12:7f:5f:f0:d9:90:ec:1b:39:88:ce:da:dd:
69:2f:c9:00:58:ca:32:33:82:a7:94:3d:d8:dc:ff:8a:1b:70:
bc:9a:f9:8e:06:8b:16:92:3e:6e:61:e3:5b:fe:05:21:79:b3:
db:5c:d8:bf:7e:fc:e5:a1:d8:87:5e:2f:ad:40:4e:e4:0f:b7:
ed:6d:89:bd:cf:c7:e5:11:a5:d8:da:5b:0c:ea:ac:67:5c:41:
cd:4c:4c:5e:01:69:8f:96:ec:c4:fd:3b:e2:79:c8:1f:60:5b:
90:05:81:d4:02:2e:57:9a:48:51:cc:08:d4:57:6f:85:d8:2a:
dd:e5:99:11:3b:b6:e0:b2:d8:a0:2a:af:24:6d:41:4a:df:dd:
43:9a:be:77:35:21:e4:27:6b:1c:ea:52:96:2e:c1:b5:6f:a6:
c3:e1:2e:33:43:7c:36:58:0d:fd:19:63:e0:db:3d:ff:77:c5:
72:4e:c4:3b:b9:3a:60:1f:7d:2a:cd:66:83:c0:eb:10:5a:dc:
6f:d5:e3:33:86:62:4d:41:6f:4e:fc:70:12:2c:42:50:c5:61:
f8:9d:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:40 2025 by rpki-client