Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: /vMx3t8RvHmhqnUvSYUNs4lFyyh0rPfaOcL2T2Y3bug=
Subject key identifier: FA:E1:5F:16:88:53:7F:98:CA:80:E6:BA:C6:AC:72:A3:5C:66:A3:B0
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 0199FF59AEEA23F6D46D8B4A0F308C0EF7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: E2
Signing time: Mon 20 Oct 2025 02:01:31 +0000
Manifest this update: Mon 20 Oct 2025 02:01:31 +0000
Manifest next update: Tue 21 Oct 2025 02:01:31 +0000
Files and hashes: 1: AUKx0J4WNHpEIs7yN_p5Gj-AKQc.roa (hash: eENZl1wDIRgwnUAmEgxPXPDBi6xMrW0OqSMxiYMTiao=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: 216nw29sRHI2iWmWdEm1ap2cmwfvYqFeqtrMN+2TSQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:ae:ea:23:f6:d4:6d:8b:4a:0f:30:8c:0e:f7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Oct 20 02:01:31 2025 GMT
Not After : Oct 21 02:01:31 2025 GMT
Subject: CN=fae15f1688537f98ca80e6bac6ac72a35c66a3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:fe:e9:23:79:7e:23:21:67:b1:9a:19:4c:
89:ba:3c:d3:39:ac:13:d8:9e:03:f9:0e:e9:56:e4:
4f:bf:79:d6:8c:6d:94:fd:03:02:e4:13:3d:b5:fd:
48:e0:31:ea:e1:b2:05:ff:5d:5f:44:54:8d:7f:89:
90:fe:4e:76:d7:5b:b6:45:d3:ea:dc:dd:77:62:b9:
1f:45:a5:ce:a5:a6:4a:8e:47:18:79:90:f4:c0:bf:
75:53:80:03:5a:30:d1:0d:e8:da:76:30:56:f2:56:
d4:d1:49:36:78:ee:d9:25:a7:7c:1c:8c:a6:26:e3:
c1:92:7c:c6:73:5c:29:39:42:09:e6:f1:c0:6f:c0:
3e:0c:22:e9:6b:c8:1f:b6:84:91:61:38:d0:c5:c0:
66:e6:25:9a:df:75:19:d6:3c:3f:ad:20:87:72:ec:
1b:c6:3d:3c:49:10:30:79:8c:ae:27:39:18:9b:36:
73:3a:16:33:41:3b:ab:61:05:01:e1:d2:da:c9:60:
62:0a:54:1d:9e:e9:76:10:95:f1:9c:51:1c:cd:43:
9a:84:2d:fe:9c:4e:f1:5b:2e:26:94:22:8a:9d:c4:
84:4f:65:74:d9:fe:44:f6:78:20:ff:76:c9:1b:77:
f8:7d:b2:e7:b8:ac:d7:f9:f8:c5:a4:38:a7:4c:44:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E1:5F:16:88:53:7F:98:CA:80:E6:BA:C6:AC:72:A3:5C:66:A3:B0
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c9:88:64:04:86:7c:30:1f:4e:32:38:58:61:50:29:85:0c:
e6:00:cf:f1:c2:7e:a2:f1:b8:65:77:54:17:1b:7a:4b:66:30:
e8:c7:5f:f5:eb:b0:4d:8e:af:eb:e7:5f:56:af:14:9d:b7:9d:
89:3d:2c:dc:39:f8:cc:60:86:e4:ae:a3:40:e9:e4:db:7a:90:
44:4b:ff:aa:95:56:74:3b:f0:5a:09:87:a1:61:55:b0:07:52:
72:70:6b:7a:07:b4:24:dd:3d:67:a0:60:ed:99:d0:dc:e9:19:
85:3d:0a:27:71:b9:b0:b3:93:ed:52:ce:a4:39:e4:1a:7c:3a:
c3:2c:5e:6c:c6:1f:c1:54:1c:ee:6b:0f:72:d4:60:ba:0d:34:
f0:c1:be:67:17:b0:63:e7:89:e3:58:43:d3:85:d8:cf:35:fa:
ee:c9:ab:ac:b3:27:e4:37:e9:8f:7b:06:b3:98:9d:07:a9:c0:
48:4c:7a:d2:98:61:7f:10:b8:8b:b7:3d:aa:42:ab:db:ed:6f:
88:fc:2b:4d:7a:09:0b:15:f4:d8:da:e4:fc:2b:7c:a0:05:dd:
8a:41:b7:90:e7:d4:4b:86:d8:64:1c:4b:b0:1c:82:d9:d6:72:
c6:36:3c:ac:41:ac:38:72:d3:f2:8d:5b:ba:82:7b:32:46:2c:
6b:8c:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:09:20 2025 by rpki-client