
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
File: cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json)
Hash identifier: 7tnt7KcLIzhz6wguXNesOoK6NLW6VKThNsbI33YNQ9Y=
Subject key identifier: 16:8B:AE:9C:92:B1:9E:50:21:DE:21:E6:5C:F6:E5:6D:E9:46:76:DA
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Certificate issuer: /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial: 019A7293BEDE7F6D458B524D1A9D55018815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
Manifest number: 0418
Signing time: Tue 11 Nov 2025 11:01:16 +0000
Manifest this update: Tue 11 Nov 2025 11:01:16 +0000
Manifest next update: Wed 12 Nov 2025 11:01:16 +0000
Files and hashes: 1: Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa (hash: 8FTp4AmQ8yrNnOSj2Y/1nrH6lz6jMuxxvh24QGuNmXY=)
2: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: 3GIltfiStp0PZFQHn8R0iaxd/+1yvUWbv7WBS4rXCCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:be:de:7f:6d:45:8b:52:4d:1a:9d:55:01:88:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Validity
Not Before: Nov 11 11:01:16 2025 GMT
Not After : Nov 12 11:01:16 2025 GMT
Subject: CN=168bae9c92b19e5021de21e65cf6e56de94676da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1b:d3:3a:3a:ea:de:1b:65:df:af:2c:45:8a:
c1:d7:fd:24:9f:b4:34:8a:94:51:f6:47:d2:2a:3c:
30:f8:ae:47:9e:a9:6d:66:bc:8e:91:74:4a:39:16:
95:8a:1b:f5:eb:ac:c5:eb:8c:1b:7c:ba:07:b6:89:
98:ad:cc:65:e1:a3:ee:c6:f8:a2:ab:8b:d1:4e:36:
30:db:33:57:96:31:74:c6:a8:ec:1e:3f:5b:48:bf:
16:9d:f3:82:41:4a:3c:ac:bf:63:7b:e2:55:b3:32:
77:c3:ce:84:c7:99:b1:4a:7e:49:db:da:63:79:92:
44:25:d0:d7:0e:53:da:9b:31:57:c4:06:20:1f:bc:
f1:be:d6:14:c6:69:cb:9f:bb:65:67:bc:ba:de:64:
30:13:2d:96:0d:57:01:f2:21:48:72:a0:63:ea:4a:
7e:b0:16:0c:a4:fc:17:f2:f4:b3:b8:70:27:d8:e2:
ab:d8:d9:83:3b:ef:7c:aa:c5:4c:16:30:12:a4:2b:
ff:f3:01:d8:ba:14:53:c9:2d:41:ee:17:25:e1:1f:
83:39:f9:65:0e:88:5d:3f:63:6f:97:ca:81:74:f4:
6c:a9:07:72:60:a6:e0:6b:bf:30:34:c7:4d:26:38:
fb:07:52:9f:6f:cd:18:bc:89:d1:6f:a6:f0:53:c6:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8B:AE:9C:92:B1:9E:50:21:DE:21:E6:5C:F6:E5:6D:E9:46:76:DA
X509v3 Authority Key Identifier:
keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:a7:3a:5c:85:2e:0c:93:80:9e:50:53:36:c3:47:5b:d7:44:
b8:e6:7d:08:71:4f:33:38:48:cc:9f:6c:ca:a9:b8:cb:44:76:
74:82:f4:ae:e4:3d:0b:a7:f6:22:35:8b:10:10:93:b7:17:7d:
3c:ff:4b:b8:cd:53:7f:53:b9:3d:da:d6:7a:36:49:d8:c2:2e:
f3:6a:6a:e4:76:9a:e6:1b:73:28:2b:2a:49:73:0a:4b:10:e1:
58:e6:db:ed:67:19:c9:66:8d:53:d7:7d:81:5e:80:c0:94:b2:
6b:ff:30:84:35:00:f6:39:57:80:86:a5:22:60:d2:68:37:a8:
09:9f:ce:58:0c:70:9d:11:4a:a8:4f:ed:4b:03:de:bc:13:46:
6b:f7:20:ef:03:7b:c1:60:b3:25:9d:fd:51:1e:21:49:73:ff:
9a:6e:95:2c:1f:d4:44:45:37:f0:70:92:ec:62:17:86:e6:c4:
44:46:5c:b9:45:19:d8:99:e0:22:96:bc:78:5d:ff:29:83:f2:
42:7d:9a:42:bf:db:d9:d9:b7:75:f6:c2:d8:4a:10:e4:90:17:
9f:e1:ba:df:67:06:dc:e9:fb:ed:aa:24:98:ef:2c:e9:1b:22:
5d:07:29:57:a2:ab:5c:36:a3:9f:1f:b6:f4:58:c2:ab:d2:35:
31:63:1b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:05 2025 by rpki-client