Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: K7LgpvmmNeaqPd5KWIz97lx/nj6AWWlW19kpAeD4d/E=
Subject key identifier: 2B:16:D4:3B:BB:90:13:3C:0F:5C:DC:91:BD:25:FF:E7:E7:71:E6:F2
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 0199FCFD9FB589D62193A239157E98F50AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 0282
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: u8b597uaLJahPEz9R/+cCnR4p6GHPeli/Lj1seOJupU=)
3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9f:b5:89:d6:21:93:a2:39:15:7e:98:f5:0a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=2b16d43bbb90133c0f5cdc91bd25ffe7e771e6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:55:74:12:60:c1:81:09:c0:8a:f0:d4:bd:
1a:af:45:07:09:6b:44:ca:70:23:4f:3a:f0:35:5d:
44:b2:4c:ca:6d:e5:2f:96:89:58:61:33:30:78:0a:
47:ee:86:4f:bf:c6:84:ba:e3:c8:5c:a8:e4:9e:43:
be:0c:1a:da:7c:6f:7c:54:85:37:5f:68:5f:db:21:
c1:81:4e:53:6e:4c:99:a5:5e:1e:a4:85:ac:73:a8:
69:6c:ea:85:c6:e7:a2:e9:19:5d:6d:f6:56:d9:e6:
37:1c:23:69:d7:14:5e:cf:24:7b:11:20:4c:35:d2:
80:75:0e:c4:b2:bf:8c:fc:ab:f0:4e:81:ce:26:14:
dc:93:33:83:1d:c5:89:97:c7:63:d7:2c:7a:88:67:
de:33:fa:0f:f0:2e:9d:21:1b:83:0e:5e:cc:2e:b8:
6e:af:4d:46:af:51:3e:d5:22:ea:d0:11:30:48:71:
8f:dc:fa:9c:50:89:02:f9:fa:77:1f:a5:ab:cc:48:
1b:7b:3d:d4:fa:3d:e5:c4:b6:3d:57:e0:d1:e4:17:
5a:88:1a:af:7f:85:64:8f:33:f3:45:c8:3e:7c:53:
38:b6:ee:2e:35:9b:44:c3:67:80:db:4b:d7:b9:87:
a8:66:0e:3e:8b:65:e6:04:3c:02:34:33:52:1f:2d:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:16:D4:3B:BB:90:13:3C:0F:5C:DC:91:BD:25:FF:E7:E7:71:E6:F2
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:71:03:7e:4a:4b:07:7f:e6:a5:cf:e5:a7:57:41:1b:a9:c1:
88:ac:f7:ed:64:4f:1a:82:1b:46:65:31:d5:71:97:a4:7c:09:
88:f6:50:5a:80:f6:cd:a9:fd:7c:47:69:1d:41:74:56:dd:de:
ed:27:6c:15:56:49:60:4b:b3:5e:de:37:d7:4d:ce:d2:d1:9b:
b9:c8:74:2c:4d:af:7d:0c:1a:3a:b6:b0:2e:f9:de:08:1e:39:
84:ce:4e:93:d7:6f:40:c2:53:80:b3:4e:ed:a2:93:75:44:d2:
f2:46:34:17:b0:aa:a6:97:19:ed:30:4d:48:3b:e5:49:47:21:
2f:0d:b1:03:92:54:8f:ca:a6:ef:d8:b5:5a:45:a0:bd:b1:bf:
29:e8:84:7b:59:24:93:c7:36:37:85:2c:64:f5:e4:f5:cc:19:
ab:91:e1:f3:68:1c:b2:61:fe:94:1e:cf:4b:43:4f:69:ae:df:
14:61:ee:bd:4b:59:ef:8f:67:f5:c6:46:9f:e4:26:56:ac:8a:
ca:93:39:65:9f:a6:7b:05:a6:bd:50:01:47:54:21:f1:53:ee:
85:66:38:4a:cd:df:39:a8:25:7b:ab:83:f1:57:2a:c7:5d:f9:
d9:87:82:53:6c:eb:f9:ad:3f:62:62:24:e8:ab:29:81:9a:03:
36:c2:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:04 2025 by rpki-client