Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: fByQs/Q0yckxL/TeJfa/dY3v5r6A9Lpio2FW0t2SgKM=
Subject key identifier: E1:E9:A4:3E:0D:B9:6A:2D:2E:D0:F6:BE:63:C7:34:67:E3:C0:43:76
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019A23D2E3FCA9A33A4F0609996427F97591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 1718
Signing time: Mon 27 Oct 2025 04:00:14 +0000
Manifest this update: Mon 27 Oct 2025 04:00:14 +0000
Manifest next update: Tue 28 Oct 2025 04:00:14 +0000
Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=)
2: AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa (hash: XfS/oUTMWeZlyIQCw2CHPz1Yz8M9tUiaYOFg7dyhr+A=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: k4fov3sU/yqjU/QvwRJFUwnzRv2FQxU5gmW5SDOXgRg=)
4: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:e3:fc:a9:a3:3a:4f:06:09:99:64:27:f9:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Oct 27 04:00:14 2025 GMT
Not After : Oct 28 04:00:14 2025 GMT
Subject: CN=e1e9a43e0db96a2d2ed0f6be63c73467e3c04376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:40:0b:fb:5b:ff:da:3d:de:3a:29:72:66:
3f:2b:b2:86:16:c6:df:2a:18:f5:87:14:d8:92:3a:
7b:e1:01:fc:a3:4e:f5:7b:9b:cd:db:f6:c3:9b:39:
84:5f:57:51:07:28:7d:a1:e2:38:79:ab:ee:c7:6c:
49:16:2b:fd:2f:7d:06:aa:52:fd:b7:af:e7:65:2c:
50:8c:59:56:ea:52:ea:d4:39:89:1b:16:18:23:1c:
48:5a:19:ee:f3:ee:81:4e:5f:b7:fa:5b:f1:dd:af:
10:04:5f:d1:71:06:ed:98:c2:9c:62:2c:29:22:bd:
c4:78:64:6b:fe:05:14:7b:30:b1:23:49:58:7d:fb:
e9:52:26:13:f2:b9:13:5d:75:2e:1a:9a:f5:c7:cf:
92:59:9e:1c:6a:a4:19:66:0e:0d:70:25:c1:b0:f3:
27:3c:4d:e1:d8:4e:36:af:e1:30:b2:aa:00:6d:99:
73:f5:ff:30:07:e6:36:25:32:ee:f0:76:56:6d:02:
7c:e6:d4:d2:e5:a2:8e:58:de:17:c9:84:c6:85:fd:
7c:73:85:40:0d:74:38:b4:18:98:ed:d1:92:18:ec:
ab:0d:e3:06:4a:4c:2e:19:3a:06:c4:87:1b:f5:ba:
79:e8:a8:fe:df:2b:fd:7a:65:34:16:77:78:36:aa:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:A4:3E:0D:B9:6A:2D:2E:D0:F6:BE:63:C7:34:67:E3:C0:43:76
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:ce:a1:22:f5:9a:8f:ee:39:0a:9b:62:a7:9b:44:78:96:
79:09:05:55:c4:0c:19:f7:78:e2:df:f1:30:5f:b6:b5:53:ae:
fd:ed:75:66:cf:d3:73:51:4e:25:1c:00:29:84:0a:c3:e9:d1:
3c:b8:3a:0d:29:39:b0:58:fa:11:48:82:3b:cb:41:02:25:2e:
a4:34:8b:f0:64:81:87:01:a0:02:ac:22:d5:2f:fd:1a:17:c2:
2a:05:d6:7d:be:29:61:40:43:c8:d5:60:f8:f7:f4:1e:2f:5a:
81:c6:e8:04:d3:56:c1:3b:3d:11:2a:98:b7:a6:0b:6a:0e:f8:
05:b8:d2:bf:5b:d1:98:98:77:1c:bb:87:32:55:1f:3b:c3:a6:
21:83:27:2d:9e:87:f9:36:02:65:2c:0e:55:ed:cb:29:d5:fa:
94:16:9c:d3:4e:94:46:b3:34:a6:d1:76:91:2e:60:0b:c7:c4:
b4:2a:f5:cc:26:b5:2a:8a:cd:11:25:ce:7f:6c:79:29:57:29:
82:0e:67:07:0e:54:eb:4b:db:56:c7:79:d0:c5:0c:c0:25:5d:
53:58:f3:cb:a4:bd:8b:6f:3b:e9:21:35:59:36:a4:f0:ab:be:
ad:a4:4c:90:57:62:e0:c3:ff:02:d2:09:1e:29:be:1e:d2:0e:
42:b6:47:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:54:29 2025 by rpki-client