Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File: cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier: 149UhDcJeB0u2OKzWQbqGk1YBIQY7J/N3kenWG0H49c=
Subject key identifier: D7:A3:39:96:C9:57:45:F9:20:97:48:64:50:B1:22:13:53:53:E7:2B
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 0199FE7DD4E3C77C10460905765B24478292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number: 0B0B
Signing time: Sun 19 Oct 2025 22:01:23 +0000
Manifest this update: Sun 19 Oct 2025 22:01:23 +0000
Manifest next update: Mon 20 Oct 2025 22:01:23 +0000
Files and hashes: 1: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: TMZh/G1Y61vSSPbOmFcxcpnSzcnS8VSaJXb8YzYp64o=)
2: hGLXMAJyrLLUknw2I4rIa47GY5A.roa (hash: 2PfIq+E4/YZaE6ygL6f+ygB4E8ocD+aiVc7FkOqVsVA=)
3: vbTBxrwzB75awQdnuHxvUmGSxrI.roa (hash: BNvntPsh9Cs3tqn2zXlS+7ZhQF3J782Zk6D2d5jtV8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d4:e3:c7:7c:10:46:09:05:76:5b:24:47:82:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: Oct 19 22:01:23 2025 GMT
Not After : Oct 20 22:01:23 2025 GMT
Subject: CN=d7a33996c95745f92097486450b122135353e72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:ce:cc:6c:4e:bc:88:e8:6f:2e:a8:5c:34:
80:06:2a:25:12:4a:6b:38:70:53:5d:3b:63:57:c6:
e0:fd:69:21:83:b2:7b:56:4b:85:b8:3a:79:12:7c:
e5:b1:cd:3c:37:48:1a:9e:b2:a2:c7:0e:dc:18:b0:
fb:41:eb:c5:5a:15:82:55:8f:12:9c:72:17:46:da:
c2:27:29:77:dd:eb:d4:4d:d5:1b:31:5d:0d:23:7f:
84:13:b5:c9:7a:be:d5:7d:4f:56:08:45:89:65:8b:
97:a3:46:ad:1a:02:20:14:7f:03:4b:04:21:4c:2a:
ea:76:25:c8:8f:c7:d2:df:fc:09:09:b0:a0:e0:1c:
88:a6:69:3b:e9:da:32:e1:30:a2:33:93:75:f8:53:
47:0c:fa:f9:a0:10:3b:24:00:45:53:a4:c8:05:94:
45:e0:dd:12:4f:a8:3a:a5:3b:84:0d:09:37:6e:8f:
06:07:b3:74:0a:55:4f:f8:63:b0:61:39:d7:ac:46:
6a:4a:2e:b9:51:3a:33:03:63:1e:b2:09:d0:cd:18:
68:f7:a5:fb:d7:cc:1a:f5:f0:ae:11:72:66:36:d1:
c6:f8:be:b5:3d:2e:f5:7e:f1:17:7c:ce:8e:bb:1a:
ae:77:8a:c2:36:55:17:14:55:ec:82:36:dd:55:0a:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A3:39:96:C9:57:45:F9:20:97:48:64:50:B1:22:13:53:53:E7:2B
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:73:10:59:48:2d:5e:a2:63:1b:bb:cd:fc:dc:b7:9b:3b:b9:
d0:6e:66:d2:05:49:6c:bb:36:c9:fc:b3:2d:13:90:9d:73:72:
76:4c:5a:cd:fa:54:49:0e:8e:68:e5:83:e6:98:13:b4:b1:21:
ef:c3:0e:65:d0:47:39:55:7e:d1:74:f4:4c:23:6a:f0:1f:92:
6b:a8:68:d4:4b:39:b1:33:fd:b8:d8:35:61:08:d2:fc:fb:e0:
af:1e:08:f2:fc:28:66:6a:e2:72:0c:5e:f9:9b:02:de:20:19:
31:16:8a:b7:92:2e:03:44:6b:1e:70:f1:aa:5b:bc:f7:55:31:
16:42:96:46:b3:d5:b0:da:ae:aa:8e:79:43:92:03:d9:bc:f9:
5d:6c:87:aa:1e:1c:ea:db:9e:df:82:8d:4a:6b:93:5a:cc:cd:
c3:cf:cf:77:33:ea:31:a7:27:ce:97:09:3d:35:db:5a:ec:27:
a1:ea:a3:0a:16:ab:11:6d:0d:0d:60:a5:c7:e0:53:07:36:32:
22:73:ac:93:00:52:1b:c6:2f:4b:e5:6d:65:24:c2:47:06:18:
b0:b5:8a:6e:a9:47:39:65:47:57:5c:82:a9:ac:90:ed:bc:6f:
8c:88:8c:f9:dd:77:47:35:64:24:23:e0:9d:f3:22:2d:cb:95:
de:07:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:45:41 2025 by rpki-client