Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json)
Hash identifier: mNNVmrPiz5eGdB9f6ZW3vKz+3d6sJyJlmDmDu8OAc8U=
Subject key identifier: 30:93:4F:BE:E9:9B:C5:D9:97:69:75:BD:CF:21:CC:AD:16:44:CB:C8
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial: 019A7293E3DC77A34CDA6579DED3340FE66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 11:01:26 +0000
Manifest this update: Tue 11 Nov 2025 11:01:26 +0000
Manifest next update: Wed 12 Nov 2025 11:01:26 +0000
Files and hashes: 1: PYsPgn9EIHR5AYha-d_1rxDJZs0.roa (hash: QRdgsHwd+qGrv8yp41/SIFOyI0EFbmqDBRqqwNJuLIY=)
2: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: n3jS76aYvmWP+gVeTrGc0BknV8gxSBCzAxb49mACqtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e3:dc:77:a3:4c:da:65:79:de:d3:34:0f:e6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Validity
Not Before: Nov 11 11:01:26 2025 GMT
Not After : Nov 12 11:01:26 2025 GMT
Subject: CN=30934fbee99bc5d9976975bdcf21ccad1644cbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:26:d5:97:ad:84:fc:6f:a4:7b:0d:c9:92:
39:c7:91:a9:80:42:92:ce:d2:6c:66:71:e2:9e:3a:
dc:13:43:e9:af:df:b1:32:24:31:97:57:fe:3a:51:
12:00:59:2d:8c:f0:c9:ed:8c:f3:94:20:80:ed:df:
e7:f3:11:61:73:30:d8:eb:9c:2b:62:50:52:c4:34:
b0:dd:63:2c:56:e0:5e:61:0a:e4:57:16:7d:54:d2:
65:12:ea:a8:e2:6c:13:34:81:dd:07:9d:fc:71:fa:
76:9d:d4:9a:a3:74:89:c3:00:65:9c:78:4a:e5:3f:
33:9d:5d:c7:3f:e7:66:a3:4b:ed:59:05:b2:1a:2e:
60:25:94:f4:fc:39:74:17:13:20:81:6d:7c:d6:3b:
8e:7c:80:c3:71:ed:19:0e:40:75:65:1f:59:17:d0:
5e:e6:4e:42:58:20:76:72:4b:0e:80:3d:d5:4b:ef:
85:b9:e2:a2:d7:55:26:2b:40:11:ac:b0:04:31:91:
07:3e:59:18:5b:ee:62:d1:58:85:3b:e2:17:dd:53:
b6:97:f4:f0:c2:ce:8e:cd:6f:8b:ca:91:e2:d1:df:
cb:64:0a:62:e9:bf:2d:82:4d:e6:3d:22:6c:14:03:
96:67:72:a0:d8:50:cb:e3:5d:57:27:cb:8b:a5:1d:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:4F:BE:E9:9B:C5:D9:97:69:75:BD:CF:21:CC:AD:16:44:CB:C8
X509v3 Authority Key Identifier:
keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f0:8d:be:5c:79:3a:c1:18:16:66:61:10:a2:cf:b9:32:b5:
cf:78:17:43:16:50:16:a7:e7:d8:81:cc:50:06:68:35:8f:a6:
a0:17:6b:e7:d0:1d:57:df:d5:68:41:3a:c6:e1:09:14:d3:a4:
f2:5a:82:b6:4e:7b:cb:55:e2:1c:0b:8f:93:05:8a:73:60:70:
ba:20:87:5b:7d:bc:57:c5:79:fa:36:ae:bd:fe:67:75:bb:82:
fe:98:8f:a0:0b:6b:1d:b0:28:84:c3:6a:9c:bb:b0:3c:9f:6a:
29:03:9e:3a:c8:79:3f:ec:7c:50:dd:44:bb:67:7b:8a:89:ef:
01:ac:2e:0f:dc:b4:7c:83:0f:3d:33:af:e0:fa:27:25:27:70:
7a:ec:6e:5b:1e:64:ed:12:94:43:d7:94:e8:12:5b:c1:59:fd:
61:79:0d:7e:cc:35:8e:a1:00:71:73:09:9d:9e:d1:5a:45:90:
38:93:46:9a:d8:2d:60:9f:69:5f:a2:d1:e4:29:2e:2c:a6:de:
6e:01:45:38:19:de:ca:df:b3:a1:45:bb:63:83:a7:88:f1:24:
6d:fc:33:5d:81:68:58:b2:5a:54:b3:20:a4:0c:ad:8b:59:40:
2f:d2:0d:c3:dc:a0:3d:22:87:f5:c9:c7:20:fb:cb:35:ed:9d:
81:83:ae:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:24 2025 by rpki-client