Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier: ygbBfOzoXt9GV93tnLb7y00BYpbt15wfubkZ554jntk=
Subject key identifier: D8:D7:DC:60:C5:51:2B:1D:CE:31:DB:D0:10:FB:4D:65:17:61:43:CF
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 0199FFC73FD1F9001BC6E20206CED873595D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:11 +0000
Manifest this update: Mon 20 Oct 2025 04:01:11 +0000
Manifest next update: Tue 21 Oct 2025 04:01:11 +0000
Files and hashes: 1: 16PMvyBjwLMgKpIOkxrHYliD-08.roa (hash: Y3LQq9IlsGjKrSV01GWpHO25wmy0HId5ENMWGwyBnEU=)
2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: YF2iSWHYFFIeEzmLe74M9qGBfSyu3/jjRx/FJzxhULU=)
3: jgcslWHmygjkRIS6MtfzGhZ40MU.roa (hash: sDmrr8zpKt5WpBGAECM7NZQll745IxQeWlqllvJtGkM=)
4: nikcVRLPEkpjmj22Ziw5gbk7U3I.roa (hash: MneHYx5l45SiPBky73Uw5AM8Oy5u1LgkSXDWT7ZAv/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:3f:d1:f9:00:1b:c6:e2:02:06:ce:d8:73:59:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Oct 20 04:01:11 2025 GMT
Not After : Oct 21 04:01:11 2025 GMT
Subject: CN=d8d7dc60c5512b1dce31dbd010fb4d65176143cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:71:88:08:a4:45:18:0c:90:ff:ac:bc:c3:
8f:67:7d:bc:8c:91:8d:d9:8b:61:4d:9a:72:9b:3f:
95:8c:21:f0:ec:5d:5f:2c:07:69:b0:fa:a5:ef:96:
90:9d:9d:d1:89:30:c8:cf:84:88:d5:d6:05:8d:72:
94:67:a4:ff:00:fc:9b:13:51:d6:65:12:92:2b:24:
c4:cd:19:e0:34:fc:47:6f:bf:11:96:04:8c:25:38:
3e:5e:e3:87:f7:c6:39:5a:19:20:fc:52:8d:5c:64:
0a:b7:64:59:8c:8d:ea:f3:6e:e0:cc:6e:a8:7c:95:
61:05:4c:3d:69:9b:87:c5:96:8a:5c:cb:4f:d1:ff:
9a:68:b1:a8:2b:7b:02:3e:ff:3c:17:b4:0f:c9:d8:
74:42:66:4b:eb:34:88:8e:cb:83:28:e1:1a:8c:0a:
77:5f:a6:0c:b3:79:95:38:00:42:eb:ac:97:cb:a4:
42:83:71:2d:5d:f4:10:75:9d:21:bb:aa:c3:8f:86:
f0:1b:ff:10:da:3c:c7:01:18:f0:99:83:60:e9:1b:
d3:b8:f8:8b:cc:12:b7:05:b9:22:83:6e:31:60:29:
9e:cf:47:5b:df:37:3a:15:10:00:be:74:d3:06:e5:
64:31:5e:f7:14:89:ba:05:88:31:37:c8:bc:a8:8c:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D7:DC:60:C5:51:2B:1D:CE:31:DB:D0:10:FB:4D:65:17:61:43:CF
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:67:43:97:77:fd:f1:91:12:af:26:83:3a:c5:ea:74:fa:21:
aa:83:ac:32:de:ba:e1:b6:be:82:35:6d:29:ef:a9:50:33:d5:
77:88:57:f9:93:c8:03:47:2f:e0:52:01:ed:39:a2:1f:ec:f3:
6c:d4:b3:ce:d5:10:50:9f:1d:2e:5c:f4:4e:e9:df:fb:fd:17:
5a:3b:81:b4:ca:16:08:d6:cf:3e:31:f8:80:b4:75:ed:4a:bf:
54:08:e7:6c:77:23:db:de:71:ef:c0:c5:2f:e2:f7:d2:91:6a:
43:84:97:01:81:55:bb:c0:17:4f:bb:8f:2c:11:62:56:fa:01:
22:ec:90:a8:80:ac:9b:06:53:e3:46:86:42:7f:df:6f:71:99:
22:32:dd:98:9f:36:58:3c:cd:f0:5a:4a:6e:4e:36:88:d0:aa:
b6:04:e6:90:8d:d5:21:a7:e7:0e:5a:31:71:e6:d4:cb:63:7d:
10:e2:f8:55:3c:b3:f2:e0:c8:79:2e:be:5c:c6:cc:ac:d4:35:
ba:86:9f:9e:75:a0:94:db:63:22:90:ac:6b:d0:e1:17:80:4d:
08:b1:d7:f4:85:00:0e:d2:e9:26:3c:4b:37:a2:35:ef:87:74:
91:4d:1a:b8:ef:27:8c:f7:7f:c1:59:e6:5e:0d:4c:ed:f8:2f:
93:b1:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:40 2025 by rpki-client