Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: 88qAMevWIYnprM4tnTP+vrpU1JDTSdNVtnqjeOY1NqI=
Subject key identifier: E8:56:ED:C5:8B:90:32:46:62:6E:D0:3B:6D:DC:E1:5E:32:54:D8:5F
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 0199FC218B79741063B32421311F34E5A178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=)
2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: WpGO3p/9yhtFUN80G39PNZ/r9Pe2frTB+90a5oMl97s=)
3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8b:79:74:10:63:b3:24:21:31:1f:34:e5:a1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=e856edc58b903246626ed03b6ddce15e3254d85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:a3:a4:c5:8e:d5:c1:2f:2d:e3:83:dc:df:
59:90:99:c3:85:cc:8f:af:47:1e:90:39:43:c7:06:
ac:46:da:d3:6c:fc:37:db:75:ca:07:c0:e8:cc:04:
57:8a:54:c4:22:57:ef:53:ce:9c:5d:95:7d:35:99:
ee:a6:76:83:46:f4:2e:8f:db:24:e2:22:9b:5f:ea:
2a:ec:08:20:da:3a:23:77:ce:d3:42:40:fe:ad:b4:
f8:7a:52:3c:10:a3:2c:93:06:ad:b4:ba:a4:50:8d:
ba:c1:6d:ff:c1:37:39:47:25:aa:ac:5a:16:ae:ae:
cc:1f:4d:f2:67:05:c8:53:de:a9:e9:06:b5:84:93:
ee:cc:86:10:77:bc:0a:01:24:96:62:e6:c2:9f:4b:
8b:ee:43:1c:1e:34:30:7e:c0:6a:6a:ca:eb:44:d0:
98:df:20:26:97:0a:55:42:d9:1e:01:77:6a:4a:2e:
f7:f6:81:43:6f:d3:14:0b:da:7a:23:c2:76:96:df:
17:15:da:dd:58:ba:07:8c:3f:16:20:76:ef:7a:c3:
9e:db:36:05:31:c3:87:72:34:c9:47:5b:4f:ad:8a:
bc:d5:47:9c:32:31:72:57:6a:62:a5:72:96:3a:0a:
09:f3:6d:c2:2f:99:60:2a:9b:fd:51:47:15:9d:50:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:56:ED:C5:8B:90:32:46:62:6E:D0:3B:6D:DC:E1:5E:32:54:D8:5F
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a8:1d:75:86:2e:26:35:50:54:a5:a9:54:67:5e:8f:cc:ce:
cf:44:98:a2:2a:c4:f5:41:1e:20:dd:e3:ec:ec:20:1b:db:9c:
41:79:31:01:07:98:cb:f7:31:09:5a:2a:85:66:ce:c5:5f:e9:
d6:b0:4f:36:bc:fb:17:4c:15:61:a3:5b:31:da:7f:1d:a8:79:
d0:4e:51:bb:e0:0a:54:36:a2:67:31:32:90:0a:a1:83:ca:ea:
d4:51:97:6b:c0:29:86:0f:97:86:29:58:ab:9b:80:0c:75:2d:
39:24:70:bd:12:17:c7:9d:b2:08:90:00:de:c9:e4:f4:7d:b0:
b7:4b:c6:cd:b5:58:e7:2e:3d:d6:25:7b:b4:8c:06:6d:00:4e:
2f:92:1b:42:e1:6b:f2:f6:1f:12:c7:19:24:a0:60:96:bc:a9:
52:60:12:ec:14:9c:75:74:c4:62:ea:17:5c:7e:fa:e9:ff:01:
a5:3e:10:6b:a1:e4:b6:d3:6a:e4:7e:99:17:9b:3d:af:44:ca:
94:74:ff:30:3c:07:b7:d1:ae:0a:dc:56:85:11:f5:c9:bb:48:
4f:f5:d0:62:a0:42:92:d6:83:c7:d3:58:d4:a3:48:8c:2b:18:
76:97:3d:d8:ff:1e:54:37:f3:60:fb:ea:62:e1:ae:07:a9:2d:
28:81:2e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:29 2025 by rpki-client