Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: c0DAxh1KiJZsC5mvoe/U/5+GwAqHGrfXYllUs5FKkNM=
Subject key identifier: 3F:60:7B:CC:47:9C:82:F8:D2:2F:A2:D0:2D:00:67:6E:43:3D:94:A3
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 0199FD347822EDCE3AC262933AFDDFCB1539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 13D2
Signing time: Sun 19 Oct 2025 16:01:38 +0000
Manifest this update: Sun 19 Oct 2025 16:01:38 +0000
Manifest next update: Mon 20 Oct 2025 16:01:38 +0000
Files and hashes: 1: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: MxS7SjP5XhCxlQXGhft58zQNRXbcjjJh0DnfqOpm+iw=)
2: iViHONOdVrtJaKvFtb1zW5ZiFfE.roa (hash: y//sfFe0FaBOPBIT3c460VOfTsEZyJ671nHpKb/hUio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:78:22:ed:ce:3a:c2:62:93:3a:fd:df:cb:15:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Oct 19 16:01:38 2025 GMT
Not After : Oct 20 16:01:38 2025 GMT
Subject: CN=3f607bcc479c82f8d22fa2d02d00676e433d94a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:23:0f:12:6e:23:68:2f:4b:99:f8:27:05:
89:88:46:73:96:d7:a7:65:ba:ac:71:cc:5f:59:0b:
ab:ed:5e:08:b9:de:45:f0:8e:5a:82:d6:9b:1d:3f:
b6:67:63:53:54:58:94:a7:73:16:01:c5:5e:bf:1d:
40:e0:d2:e3:07:f1:87:66:d8:fa:e1:63:12:b8:ae:
fb:2c:aa:b7:e5:70:cd:19:c9:8b:23:af:89:17:27:
5c:94:fc:fe:9d:f5:e8:55:5c:98:36:de:21:0d:c5:
2e:1a:55:de:54:5e:76:f9:8d:1b:4f:08:72:b8:4d:
13:4a:dc:41:81:b7:43:1c:77:83:c9:03:e6:5c:7e:
a3:e9:e3:f9:d5:66:10:aa:ab:a9:4d:9c:53:4f:b6:
23:e5:e8:f9:3d:b4:e4:44:67:58:9a:a0:ee:87:45:
6b:4f:10:bc:fb:75:97:37:f6:89:d7:98:64:41:5e:
23:25:f1:da:55:b7:4a:7a:c2:7a:3d:1f:3a:4b:9e:
e8:4c:59:ac:a9:b7:bf:10:00:f5:29:64:1a:8d:19:
ec:71:33:36:24:bd:70:40:d9:b3:b1:0d:40:b8:8e:
66:d7:1c:cc:22:fe:fb:90:e4:e4:9e:6f:9b:d0:29:
2c:2b:4b:88:ee:20:fd:79:fb:66:73:85:b9:86:42:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:60:7B:CC:47:9C:82:F8:D2:2F:A2:D0:2D:00:67:6E:43:3D:94:A3
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0c:42:d4:f5:45:24:3b:57:24:3e:ac:17:6f:b7:d8:2f:48:
43:96:e8:6e:eb:77:4a:81:97:c9:20:44:46:5f:a3:73:6a:c5:
e5:15:cc:26:bb:8f:04:67:3f:03:5d:18:a9:60:69:be:79:21:
10:84:8f:02:9d:be:ad:68:ef:10:24:08:11:b0:3a:0e:e5:5c:
7a:6a:ff:6a:b6:58:46:90:32:c3:e3:10:a3:98:ef:42:aa:04:
92:92:f5:22:f7:cf:91:c0:2d:58:57:3c:09:0f:5c:e4:7d:6a:
d7:fe:62:11:bf:50:b1:f2:88:06:0c:4f:14:bb:a7:4c:ba:8d:
50:58:62:32:f7:95:68:24:c6:63:c0:75:75:46:71:16:96:40:
d9:0e:11:f0:88:ea:e5:6a:28:91:5e:02:75:a9:2b:35:6c:05:
08:01:f8:c8:49:57:0b:3c:04:45:d9:6c:ae:40:d9:40:b7:8e:
b1:3b:1f:19:a2:da:15:f6:88:77:c5:eb:e0:7f:5a:59:73:c5:
67:95:ab:a2:6e:32:fa:0b:6b:40:7d:16:36:2b:d7:b4:7c:c3:
7b:28:25:70:26:a1:36:9a:54:0b:84:23:0e:6f:17:46:cd:23:
b7:99:04:f2:04:1e:49:8c:b0:97:e2:19:1b:cd:fa:e0:fe:2f:
e2:e1:15:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NHgi7c46wmKTOv3fyxU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjJiNDFmZDM2NjE0ODM1ZTMzZmMwODgxZGIyNDYzOGIz
YTc4N2IwHhcNMjUxMDE5MTYwMTM4WhcNMjUxMDIwMTYwMTM4WjAzMTEwLwYDVQQD
EygzZjYwN2JjYzQ3OWM4MmY4ZDIyZmEyZDAyZDAwNjc2ZTQzM2Q5NGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxwjDxJuI2gvS5n4JwWJiEZzlten
ZbqsccxfWQur7V4Iud5F8I5agtabHT+2Z2NTVFiUp3MWAcVevx1A4NLjB/GHZtj6
4WMSuK77LKq35XDNGcmLI6+JFydclPz+nfXoVVyYNt4hDcUuGlXeVF52+Y0bTwhy
uE0TStxBgbdDHHeDyQPmXH6j6eP51WYQqqupTZxTT7Yj5ej5PbTkRGdYmqDuh0Vr
TxC8+3WXN/aJ15hkQV4jJfHaVbdKesJ6PR86S57oTFmsqbe/EAD1KWQajRnscTM2
JL1wQNmzsQ1AuI5m1xzMIv77kOTknm+b0CksK0uI7iD9eftmc4W5hkIOaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9ge8xHnIL40i+i0C0AZ25DPZSjMB8GA1UdIwQY
MBaAFHDytB/TZhSDXjP8CIHbJGOLOnh7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYt
MGEzNWI3ZWQ2M2M3LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYtMGEzNWI3ZWQ2M2M3
LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgxC1PVF
JDtXJD6sF2+32C9IQ5bobut3SoGXySBERl+jc2rF5RXMJruPBGc/A10YqWBpvnkh
EISPAp2+rWjvECQIEbA6DuVcemr/arZYRpAyw+MQo5jvQqoEkpL1IvfPkcAtWFc8
CQ9c5H1q1/5iEb9QsfKIBgxPFLunTLqNUFhiMveVaCTGY8B1dUZxFpZA2Q4R8Ijq
5WookV4CdakrNWwFCAH4yElXCzwERdlsrkDZQLeOsTsfGaLaFfaId8Xr4H9aWXPF
Z5Wrom4y+gtrQH0WNivXtHzDeyglcCahNppUC4QjDm8XRs0jt5kE8gQeSYywl+IZ
G8364P4v4uEVQw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:35 2025 by rpki-client