Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
File: RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft (raw, json)
Hash identifier: oz4/UoGYfj8IQvMZN0HxQBOdpc3xhuWpHS6K5v/s7T4=
Subject key identifier: CB:1C:C7:C7:C5:43:87:AF:B4:F4:82:F5:91:53:67:C2:9E:2C:B2:1E
Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130
Certificate serial: 019A711356B643F9DFEBE7CD7C4A77FCD14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:23 +0000
Manifest this update: Tue 11 Nov 2025 04:01:23 +0000
Manifest next update: Wed 12 Nov 2025 04:01:23 +0000
Files and hashes: 1: EXivR_Wvv2aOO3jHO658CAON0No.roa (hash: fh34cv2WRgihe99oCLRpx5puteDZpUePtPBBSbNg/Qg=)
2: RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl (hash: l+DU1IJzLlMQdrRimeCefgFSylxnKlH9lANInKDd1k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:56:b6:43:f9:df:eb:e7:cd:7c:4a:77:fc:d1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130
Validity
Not Before: Nov 11 04:01:23 2025 GMT
Not After : Nov 12 04:01:23 2025 GMT
Subject: CN=cb1cc7c7c54387afb4f482f5915367c29e2cb21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:76:60:ca:62:01:85:cb:41:c8:ce:b2:84:
9e:64:19:6a:f0:ae:00:2e:cf:3b:c7:30:cf:0a:e1:
b2:89:1b:5f:21:84:4e:98:95:63:dc:05:99:9f:7d:
b9:e8:3d:ec:8d:f2:0b:ad:ed:3a:cd:4c:cf:2f:35:
71:a4:f5:92:cd:bd:3c:a2:bf:a9:f2:5d:ac:2e:b6:
b3:c3:9e:52:22:2f:d2:9b:72:89:7d:76:dc:ac:7d:
3e:8c:c0:97:78:e3:20:ab:01:3a:56:69:cd:77:b6:
4c:27:d3:4d:54:a0:6d:06:48:a6:5d:b7:f1:78:4c:
0b:b8:cc:58:e8:2c:19:c9:27:f5:d7:d3:b8:e4:bd:
4f:8e:52:1a:27:6c:57:88:68:d3:23:75:77:2d:6a:
33:0e:4b:e3:51:df:2a:87:a5:45:41:dc:c1:cd:82:
3e:b9:b4:43:f6:59:12:0b:54:95:8e:ec:6e:4d:7d:
30:95:65:cb:ea:4a:be:0f:19:7e:d4:a4:4f:33:34:
ef:ae:51:7b:f8:79:d9:1e:6d:d6:12:04:ed:ba:a1:
75:ae:ba:5e:4e:f2:4a:16:e2:9c:b5:a3:fb:68:3f:
dd:ea:15:e6:7b:1e:25:81:20:fd:79:85:a3:48:7f:
47:a9:9e:48:32:a4:ff:35:bf:a6:d8:e3:46:14:6b:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1C:C7:C7:C5:43:87:AF:B4:F4:82:F5:91:53:67:C2:9E:2C:B2:1E
X509v3 Authority Key Identifier:
keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:07:51:3f:9b:5d:98:48:cc:19:91:df:9b:15:f1:28:af:81:
a8:9b:22:0c:44:29:c3:6a:6f:05:24:37:49:02:29:44:07:e4:
7d:21:e1:7d:6d:b4:e6:01:4c:b4:3d:f7:f1:d1:8e:d7:93:b0:
76:92:7e:19:36:c2:7a:f6:fd:e6:79:cc:5e:5a:6e:54:ea:f5:
9d:fb:b0:d7:13:62:52:8e:48:07:e7:4f:ed:4e:8a:a1:70:d2:
c7:ee:b2:6e:96:ef:0d:c5:3b:03:ed:cc:8d:8d:ff:44:f6:36:
3b:4a:b8:32:1b:dc:7b:5a:1a:f4:04:ea:b8:b5:56:4a:af:a0:
8b:61:86:60:83:ef:2c:50:7f:54:a7:1b:73:cb:87:9a:e5:8f:
e8:9e:85:51:f6:9f:27:75:8a:12:91:83:d2:4b:e0:12:68:6d:
13:7f:7f:81:7b:91:c3:c7:e0:86:c3:4d:5a:93:e7:0c:27:37:
7e:0b:fa:f3:c5:78:eb:87:52:5b:15:76:f7:b3:b4:f6:c2:29:
a2:9f:af:5d:f6:12:17:53:87:19:e4:ef:41:97:d4:5b:5e:82:
ce:e6:8a:8e:53:32:b1:a5:7f:3f:99:35:f8:75:2d:9b:3e:4b:
d8:8a:0f:38:ff:52:ac:c7:dd:d1:81:9f:15:0a:7d:e6:e5:1e:
77:aa:ea:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:54 2025 by rpki-client