Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: ykjm0hPNuZ3VQdxDyGLYkEidAtRnBAn+Vx9Jew/rQZE=
Subject key identifier: AD:A1:78:48:62:87:73:07:3A:04:1F:B9:60:6D:FF:A5:25:0D:08:EA
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 019A50E4251D677D31E7BA06FF08707CC96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 22:02:00 +0000
Manifest this update: Tue 04 Nov 2025 22:02:00 +0000
Manifest next update: Wed 05 Nov 2025 22:02:00 +0000
Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: wEotzxNCCg9Maz92cqx2kITGW4kUdosxs6JDD7f2VQs=)
2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:25:1d:67:7d:31:e7:ba:06:ff:08:70:7c:c9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Nov 4 22:02:00 2025 GMT
Not After : Nov 5 22:02:00 2025 GMT
Subject: CN=ada17848628773073a041fb9606dffa5250d08ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cc:f0:c4:48:2c:3a:5d:70:0e:c7:c5:13:51:
8b:88:d0:c6:24:f3:0f:57:5d:6b:9d:5a:4f:5c:ca:
25:07:ed:ed:70:2f:52:5f:08:0e:03:84:64:24:26:
3f:d5:e3:fb:a9:85:41:04:0e:be:94:fc:24:0d:4c:
8b:ee:62:f0:dc:59:41:14:17:a0:56:f3:c6:5c:6f:
8a:c3:36:d7:7c:a1:6b:2a:34:9a:79:17:bd:5c:bc:
40:08:7a:1c:6d:e6:bc:5d:44:45:e3:c9:fc:18:6f:
ee:66:f0:2f:a5:ee:0f:67:7b:06:44:24:e8:1a:85:
42:7c:9e:e2:62:f1:23:ca:db:8e:dd:59:66:fe:b2:
d1:d7:48:ae:a6:ba:c5:1f:12:2c:3d:b3:7d:0b:92:
8d:e4:3f:d5:d4:a5:de:f9:02:7c:18:21:85:c3:f2:
14:1d:00:78:cc:34:c6:d2:5a:b7:e5:b0:fa:71:02:
87:3b:a2:de:57:3a:08:ca:8b:3e:90:f8:eb:58:eb:
df:a4:e8:06:fa:ea:31:20:0b:9c:c7:ed:d7:c7:4e:
3b:f3:f2:58:83:f0:b5:dd:67:79:04:a0:8b:1c:10:
93:55:b5:c2:f2:be:d7:3e:a4:23:8e:50:79:98:f2:
04:7f:e6:15:ea:0a:80:21:0e:6c:64:68:3b:8d:5a:
c5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A1:78:48:62:87:73:07:3A:04:1F:B9:60:6D:FF:A5:25:0D:08:EA
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cc:03:39:87:68:84:76:48:c7:5b:3b:d7:83:c7:84:31:3c:
fd:1a:b7:27:92:9d:b8:c4:59:36:c8:e9:77:4f:e9:0d:98:ed:
10:58:ae:47:ae:0c:71:e5:c8:7d:84:5b:08:84:fa:1d:63:ab:
9d:83:fd:1d:ee:ab:d2:a6:27:d3:10:a2:e7:58:16:52:99:55:
f2:85:45:16:98:82:87:3a:fb:7b:2c:c4:ce:1f:27:34:65:f0:
6e:ca:63:8f:b4:12:47:1f:db:37:43:36:d1:6a:6b:37:53:8e:
89:2e:ea:d2:db:dc:8a:ac:af:35:17:15:5a:50:70:38:21:ba:
34:4e:82:7c:7b:9f:77:66:b7:18:6c:c0:c7:50:b3:85:fb:33:
4b:a7:35:02:9d:cd:93:3b:0c:cd:db:c6:ed:b3:e4:99:c0:cf:
e3:92:36:cf:be:9f:56:ae:6b:31:66:76:bc:bd:83:71:70:e6:
63:53:e8:2a:d0:8e:8a:43:b2:32:19:b3:6b:7e:1a:28:3a:c2:
71:6f:7d:2c:40:34:49:62:f5:08:0f:10:a0:b9:9d:f3:af:4e:
67:3b:4c:3d:17:7a:08:34:96:ce:58:5c:03:9d:c6:ae:98:88:
66:b2:a4:50:12:9e:78:00:13:71:ac:99:30:6b:1d:1d:7d:82:
b5:83:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:42:51 2025 by rpki-client