Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: 0ZxPNpnsvJs4uV0j7PryHvpNbYf6hVoGffH0TjUxmsI=
Subject key identifier: EB:9D:02:36:B0:FE:11:AD:5E:FF:F3:16:5D:AB:8D:03:79:0C:0E:FE
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 019A0B5D5DAE0011B345C082A69A0510E16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 156A
Signing time: Wed 22 Oct 2025 10:00:59 +0000
Manifest this update: Wed 22 Oct 2025 10:00:59 +0000
Manifest next update: Thu 23 Oct 2025 10:00:59 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: 0QgoFk73ro46vFCEyPjmzOl7Bqnxr1a1fj2bvToKf0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:5d:ae:00:11:b3:45:c0:82:a6:9a:05:10:e1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Oct 22 10:00:59 2025 GMT
Not After : Oct 23 10:00:59 2025 GMT
Subject: CN=eb9d0236b0fe11ad5efff3165dab8d03790c0efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:c7:19:52:71:e9:c7:fa:bc:17:2d:57:53:
be:fd:05:61:4e:f3:74:8d:5d:54:02:00:10:dc:e5:
88:08:d1:6f:89:f7:8f:56:53:59:c9:34:10:a5:f3:
08:62:9a:d0:e3:c2:ae:e6:e2:43:95:1e:e8:98:91:
c3:23:07:2e:ff:98:7e:30:9c:2b:67:7f:6a:7e:1c:
35:ea:4a:fd:c0:32:ac:b1:44:ce:31:9e:93:fd:fa:
46:05:78:6a:8f:98:9d:9a:70:84:1d:82:33:4d:85:
e0:92:04:e7:4c:0d:2c:39:6f:36:5d:86:0b:c4:87:
e6:82:84:7a:c8:33:ae:19:fe:6e:b8:5a:cf:eb:25:
fa:3b:c4:b9:53:fe:fe:8d:0f:e4:52:b6:aa:8a:e4:
52:71:40:dc:6d:6a:75:06:33:56:ee:20:c4:53:f7:
5e:54:1b:a7:e6:0e:21:a5:1b:29:10:28:e8:ae:7b:
22:27:54:c8:66:8e:73:1e:aa:2c:07:cd:a2:b8:ca:
71:9c:e5:07:06:a1:64:f0:9e:77:d1:f3:ac:41:d7:
91:be:0d:99:4c:97:3f:28:f7:fe:cc:ba:40:3d:c8:
b3:e8:26:aa:e2:c7:02:2e:b6:d4:02:b0:33:af:12:
28:bb:81:3e:5e:c9:c4:79:27:d1:48:0a:0b:ec:3d:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9D:02:36:B0:FE:11:AD:5E:FF:F3:16:5D:AB:8D:03:79:0C:0E:FE
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f6:cb:65:a2:48:bb:91:1d:41:17:cc:46:59:f8:21:59:5b:
8b:36:3c:9f:38:61:1e:74:e6:be:46:3c:3d:1c:c4:2b:7b:05:
f0:af:40:c5:03:1c:eb:d1:2c:8e:dc:ec:24:38:a4:cf:7f:eb:
4b:6a:9d:b7:b0:af:4e:89:2f:45:e3:4d:b0:90:b4:46:e9:76:
76:46:23:80:52:47:fd:d4:6a:fd:2b:2a:be:41:b4:3d:8b:ba:
55:d7:9f:ba:e6:5d:d4:d4:9d:56:e7:94:e4:be:3e:08:55:7b:
d7:b2:48:e8:4c:05:94:ca:cc:dd:7b:3f:41:29:7d:53:ec:55:
3e:43:0b:f4:dc:2b:3a:0a:7b:a8:ee:a1:c4:53:13:ec:3c:4c:
5e:21:a9:71:1e:45:ff:99:57:be:a7:39:b2:84:e2:55:1c:96:
e2:63:8f:aa:d3:aa:cf:ab:5f:e1:c8:01:ec:c7:89:08:5e:81:
c3:7e:90:b6:38:3d:d4:e4:8d:d6:a1:d1:d9:0f:72:e8:4a:d0:
a6:90:10:48:14:81:30:00:f6:1d:95:99:69:52:39:90:16:db:
56:7d:e9:35:4e:f5:bf:c3:47:37:ab:c5:9c:f3:62:25:72:64:
5f:d2:60:90:1e:8b:62:a2:c0:02:85:ee:d0:22:29:9c:4f:fd:
5d:9a:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:33:18 2025 by rpki-client