Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File: cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier: xI89Hb2g3QhckEIERrFTNy33wHIxcZM9z+cji5khWkI=
Subject key identifier: E3:61:1A:2E:33:2F:E1:64:8A:F0:59:C8:DA:87:D2:A0:29:9C:84:BC
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial: 0199FCC666DDFC3DC6A58C224BE7D8B43318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: 1StjY6ciJznhPyYxQBCtbtGwaQQ.roa (hash: KYR87feBQd9Q/2I+eempgJ/F1tZKbS1g203PDf9yV98=)
2: ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa (hash: GVvErxNa6lMweOfM26d5UbHyagv3mNP8YwwVTBiOPVM=)
3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: 5uNy1gmKbmYCCdnITzqZBY8zDKV15vllsdTv1tyiOJ0=)
4: m43cWo3KgEuK9Hc3g86LdUpWJLc.roa (hash: xJI2lb3t7JjEal+fMcBS4JFRrMKS832WVOggygXFByA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:66:dd:fc:3d:c6:a5:8c:22:4b:e7:d8:b4:33:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=e3611a2e332fe1648af059c8da87d2a0299c84bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:62:6e:58:8c:3b:7b:28:dc:36:08:6a:f1:
bc:ec:3f:c8:55:a5:6c:87:05:36:32:09:80:94:f7:
de:69:00:99:04:68:b2:57:cf:b1:88:44:f7:d6:fc:
a3:71:96:6a:4f:d6:41:bc:93:7f:aa:fa:d2:92:a2:
70:f2:95:69:62:0e:49:bf:68:7c:d1:59:aa:c7:ec:
d9:8b:f7:a5:e2:71:44:78:19:52:4a:3a:6a:3c:50:
a9:64:99:bc:76:04:0b:86:20:a8:09:1d:5d:ee:b0:
b5:07:a0:a9:bf:84:ee:33:2a:5e:68:90:20:ac:66:
77:2f:21:19:f2:d9:6f:4b:4c:5f:56:c5:fe:13:98:
b6:5d:1a:f4:57:ad:07:43:07:aa:4c:aa:ac:d2:0c:
1a:b1:bc:a0:01:c1:9d:18:9f:39:58:01:a3:f8:ee:
71:bb:fe:fe:f2:6e:19:e5:c3:d0:06:9c:2d:20:58:
d5:fa:5d:ab:72:69:be:db:13:c8:ec:24:b4:1e:36:
11:a9:29:03:e9:1a:aa:0e:62:5e:2a:41:cd:ad:92:
a0:11:8d:89:4d:70:75:8a:e3:52:4d:fd:0a:b4:90:
a0:03:9f:64:a1:af:da:00:b4:82:66:17:0c:5f:b7:
fc:20:1b:d2:80:56:05:95:b9:70:1c:fc:d1:b7:89:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:1A:2E:33:2F:E1:64:8A:F0:59:C8:DA:87:D2:A0:29:9C:84:BC
X509v3 Authority Key Identifier:
keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bf:74:54:fb:83:ae:b3:87:42:02:9a:c8:e1:2e:8a:7f:27:
f7:34:26:20:e8:4a:b4:bd:64:c3:b1:a5:55:05:8f:00:ff:8e:
b6:13:ca:98:69:04:47:db:a9:3f:48:26:9c:ef:9b:0f:07:7a:
dc:16:23:6f:38:da:80:0a:ae:09:c6:9b:12:1c:4d:dc:d8:d3:
a2:c4:a7:13:6d:d8:ea:72:0e:d6:1d:78:d7:15:f2:f4:cb:f9:
b8:7f:8d:ad:10:c1:e2:5d:4f:a2:6b:01:d6:f8:6d:0d:d9:f8:
d7:9f:07:95:1f:f8:2c:de:56:80:ac:4d:a6:c2:2f:39:27:7c:
de:78:c9:aa:2f:8c:73:e7:74:82:0b:dc:4c:1a:24:d5:20:d9:
e0:fd:aa:2d:8a:df:53:5f:b2:9a:44:1e:1f:f0:e5:ab:03:e0:
0f:91:6f:2e:39:2b:f1:77:a6:ad:05:fb:97:2c:43:8c:ef:3f:
61:86:6e:b2:c2:59:fc:5f:54:6f:76:c4:c0:b2:3a:f4:64:8b:
15:fe:c5:05:04:8c:1c:35:ca:a5:01:7c:47:ea:c8:10:65:94:
45:f4:c5:2d:fd:5c:0e:ad:d1:ec:2c:fa:29:a5:6e:60:30:d7:
95:c4:b1:fe:a8:e5:a0:fc:77:53:32:b6:c0:92:7c:30:86:74:
8e:d2:86:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xmbd/D3GpYwiS+fYtDMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjAyNjI3Njc5YTQ5ODBiNzBkOGFkZTU3OGYxNDE5MmZh
ZmViOTUwHhcNMjUxMDE5MTQwMTI0WhcNMjUxMDIwMTQwMTI0WjAzMTEwLwYDVQQD
EyhlMzYxMWEyZTMzMmZlMTY0OGFmMDU5YzhkYTg3ZDJhMDI5OWM4NGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwxibliMO3so3DYIavG87D/IVaVs
hwU2MgmAlPfeaQCZBGiyV8+xiET31vyjcZZqT9ZBvJN/qvrSkqJw8pVpYg5Jv2h8
0Vmqx+zZi/el4nFEeBlSSjpqPFCpZJm8dgQLhiCoCR1d7rC1B6Cpv4TuMypeaJAg
rGZ3LyEZ8tlvS0xfVsX+E5i2XRr0V60HQweqTKqs0gwasbygAcGdGJ85WAGj+O5x
u/7+8m4Z5cPQBpwtIFjV+l2rcmm+2xPI7CS0HjYRqSkD6RqqDmJeKkHNrZKgEY2J
TXB1iuNSTf0KtJCgA59koa/aALSCZhcMX7f8IBvSgFYFlblwHPzRt4mQsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONhGi4zL+FkivBZyNqH0qApnIS8MB8GA1UdIwQY
MBaAFHFgJidnmkmAtw2K3lePFBkvr+uVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTct
N2Q1OTMwMzNkMDA1LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTctN2Q1OTMwMzNkMDA1
LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgr90VPuD
rrOHQgKayOEuin8n9zQmIOhKtL1kw7GlVQWPAP+OthPKmGkER9upP0gmnO+bDwd6
3BYjbzjagAquCcabEhxN3NjTosSnE23Y6nIO1h141xXy9Mv5uH+NrRDB4l1PomsB
1vhtDdn4158HlR/4LN5WgKxNpsIvOSd83njJqi+Mc+d0ggvcTBok1SDZ4P2qLYrf
U1+ymkQeH/DlqwPgD5FvLjkr8XemrQX7lyxDjO8/YYZussJZ/F9Ub3bEwLI69GSL
Ff7FBQSMHDXKpQF8R+rIEGWURfTFLf1cDq3R7Cz6KaVuYDDXlcSx/qjloPx3UzK2
wJJ8MIZ0jtKGyg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:32 2025 by rpki-client