Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: tmZXmKrRouNSPibWWtMyO9UJQSxJ/BZq5yuHspSwyn4=
Subject key identifier: FE:99:83:F8:2F:B6:35:DC:AC:BF:76:66:F0:B6:7E:96:61:58:6C:59
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 019A0035424A201A319F5607861EDD47673D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 06:01:21 +0000
Manifest this update: Mon 20 Oct 2025 06:01:21 +0000
Manifest next update: Tue 21 Oct 2025 06:01:21 +0000
Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=)
2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: 1i2fX0Fx76VX3K2g1GJuP+CZK7xU3ZxG6d0vVtZYruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:42:4a:20:1a:31:9f:56:07:86:1e:dd:47:67:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Oct 20 06:01:21 2025 GMT
Not After : Oct 21 06:01:21 2025 GMT
Subject: CN=fe9983f82fb635dcacbf7666f0b67e9661586c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:ba:ed:be:0a:53:87:e6:29:db:ef:7f:e1:
c2:da:c2:36:f2:a7:5c:c8:5f:58:c9:aa:45:7d:7b:
e2:97:bc:47:bc:ba:70:94:f0:48:bf:28:75:d1:40:
aa:54:12:3a:86:62:a6:e1:0b:60:e8:40:85:c8:9a:
46:b6:ab:0c:8b:b8:62:44:64:82:ee:ec:fc:63:84:
21:8c:e2:77:0c:e4:e3:74:3f:59:42:9f:be:b6:7f:
b2:23:53:a9:36:81:40:26:4c:75:90:09:93:a3:1e:
14:0a:33:5d:34:14:f3:a6:5b:3b:ad:a4:a9:8c:7d:
9f:fc:35:c3:f5:46:e6:e2:d8:2a:38:d8:dc:2e:96:
74:06:17:56:66:f9:18:db:80:83:79:7b:bf:73:f1:
85:ac:db:10:6f:d1:43:01:41:8c:fa:c4:83:14:fb:
6b:94:91:2d:38:56:86:49:64:a0:fe:af:e7:95:16:
1c:c6:2a:d7:f4:f8:ff:85:f2:b4:0a:26:79:1a:8a:
ad:ae:05:f5:32:5e:0a:1d:28:f2:cf:8f:fb:65:e3:
e4:03:d4:34:9c:75:83:69:b8:32:c3:66:07:57:d7:
6f:d5:c6:37:b7:4c:a5:c2:cf:58:7c:8f:44:bb:d4:
55:83:71:45:cb:80:eb:3f:e0:8d:c3:d3:ad:a8:82:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:99:83:F8:2F:B6:35:DC:AC:BF:76:66:F0:B6:7E:96:61:58:6C:59
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:98:a7:90:b8:ff:73:04:8d:61:0c:7b:6d:9b:6a:6e:96:83:
bb:3d:d3:68:0f:45:62:31:52:ee:e4:e6:78:b0:d7:f0:c7:98:
be:ad:f7:59:4f:b9:9c:10:d4:ea:5e:4b:b5:59:00:ce:51:3a:
92:9e:be:2d:4f:e0:a3:48:f0:16:3c:99:de:6c:69:d0:c5:9a:
82:ac:58:25:23:e8:e9:2d:ba:71:d7:5e:03:56:ea:bd:99:fd:
c4:3b:3f:aa:d6:c0:e7:dd:4c:fc:eb:3c:85:68:79:98:6b:55:
d1:60:c4:41:b7:31:24:82:e4:3d:d3:97:49:ab:e3:ea:f0:ee:
19:1b:2b:3d:d9:36:70:7c:50:b8:42:7a:cc:90:d8:ad:92:f6:
61:8d:a2:22:7a:13:18:83:2f:e4:e5:82:e7:c4:9c:3a:8a:0b:
5e:22:48:31:a4:dd:fd:2c:3f:33:fa:59:1c:6d:dc:6b:19:98:
25:58:b4:8e:3d:8b:25:f5:89:3d:24:25:a7:45:45:82:9b:1a:
9c:c4:57:1e:c9:23:0f:6c:e0:12:59:5c:35:58:28:3a:d8:84:
63:de:12:94:bb:ea:c5:48:2e:be:3c:88:81:a4:6e:53:fa:ac:
b2:00:b5:86:9b:a9:6b:2e:2a:7a:20:24:29:3c:50:00:1f:f0:
7f:69:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:02 2025 by rpki-client