Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File: CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier: K3xxphaW0BnGb7NsHkJPD6E/Dp5HQaGsBKRfkf7e8Ec=
Subject key identifier: 9C:11:19:31:B4:17:AC:88:D9:12:8E:54:ED:87:57:32:6B:F7:E8:B2
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial: 0199FBB3639745ADDF661902BB09410CF215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number: 0844
Signing time: Sun 19 Oct 2025 09:01:01 +0000
Manifest this update: Sun 19 Oct 2025 09:01:01 +0000
Manifest next update: Mon 20 Oct 2025 09:01:01 +0000
Files and hashes: 1: BkCfOAyCGeDGXBzB_CRhpnT85-o.roa (hash: ZCOveNEcvLz0LB1AwVgKDEY4UTtWOnEKbeJWb81WBoE=)
2: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: VQsCv+ViIix+GNYri6BPZtwjRnZpNim/gAPwyv6nNN0=)
3: NsSedmTQW8OnTTsqv3X8CBZy-xU.roa (hash: WFkKh3bAC4MDDNtqyFfpo7GUVyreugPfu/r7LcM/fN4=)
4: TeB088r0q83Xt0BxDsUFRJ09n_w.roa (hash: G48KXbKrX68pg0VWA7DNE58/xU413WQGSqX5xHVo4rY=)
5: XiH0gOSpoMJFdvBjBWzlMvnZ9hs.roa (hash: yKr2N5bCM8GXpbIakJJERWtJOnyqKHMRYj21ZgduTJA=)
6: eZ1oRKw2ZmvD0_NWa-kdmh2g-eo.roa (hash: 2jAE9EFeYAI0mBmHLdLHHE90HLI9cIG+7iKSbXwklN4=)
7: l5LQQJ1hscP11M9PGOZJoYipJjA.roa (hash: 1Qefj38Zjj0ROOLLrKtBW86/Osz3b9lr4tBY77Lptdo=)
8: nEOWg7Kmd6qTqNCYh_hqhP0HHz4.roa (hash: NGhjwZyIl+7tDpzWRbOKaVY9nx0e4i5L5ak98QKmrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:63:97:45:ad:df:66:19:02:bb:09:41:0c:f2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Validity
Not Before: Oct 19 09:01:01 2025 GMT
Not After : Oct 20 09:01:01 2025 GMT
Subject: CN=9c111931b417ac88d9128e54ed8757326bf7e8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:19:56:1c:d0:25:8f:cf:42:b6:de:94:dc:
63:94:ff:a4:0a:21:61:8a:f7:dc:5d:95:d8:0f:6d:
28:e1:6c:0c:5e:e3:c8:b0:7f:2a:c8:b0:80:26:bf:
3e:ae:d4:cd:8b:cd:32:6d:ce:ac:2b:ac:35:1d:d0:
3c:91:4d:e4:72:33:87:78:67:79:6f:da:7c:04:9e:
81:4a:1d:50:82:1f:ac:91:77:49:3c:71:6d:a9:09:
77:0c:ab:24:ec:8a:a4:3a:bc:9c:ab:f7:f9:7d:d6:
c3:db:c0:b1:71:92:30:31:43:6a:40:3f:64:47:b2:
ca:8e:39:12:71:52:58:eb:6c:66:45:f3:99:45:cc:
2d:21:e0:80:d5:cd:91:84:de:d8:72:c5:c9:a1:5c:
29:cd:0c:f1:ff:a5:6f:48:8d:a7:ed:89:03:c3:83:
d4:ac:41:50:9b:74:32:5c:02:b0:f1:c3:cf:ce:9a:
69:cc:de:b2:3d:ce:90:94:6d:85:1b:74:48:1c:93:
52:50:4c:07:1e:61:ed:0b:2e:84:ab:7b:e4:ae:a1:
98:20:18:39:f5:ec:75:27:3b:a3:40:99:5c:b6:71:
02:c6:3d:1f:c3:34:09:0a:69:20:67:20:ae:e2:4c:
45:6a:98:e8:ea:d7:db:00:af:1d:83:d8:56:6d:99:
cd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:11:19:31:B4:17:AC:88:D9:12:8E:54:ED:87:57:32:6B:F7:E8:B2
X509v3 Authority Key Identifier:
keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0f:9c:f1:be:23:f6:77:0e:cc:fe:b1:4c:6c:e5:b2:a0:64:
2d:9a:77:35:34:80:a9:39:7f:bc:7a:2f:76:2b:fb:6d:65:e7:
f0:1d:96:15:2e:83:aa:ad:80:ae:f5:8a:8f:54:84:78:af:3c:
77:87:60:47:5c:b6:94:c3:5b:95:08:ed:eb:53:35:e3:99:46:
9b:d0:1d:ce:86:46:75:49:17:88:88:53:8d:c1:28:9e:63:7c:
43:a8:d0:88:e3:54:c6:ed:bb:d7:99:69:9a:c3:13:16:e3:1f:
4a:9d:dd:45:9e:80:fe:10:ce:3c:bb:82:b4:9b:90:30:3b:7a:
4b:b0:33:bd:d4:00:95:b1:ba:07:ab:83:ac:db:92:ad:de:44:
8f:19:9c:8a:c7:58:bb:3c:0f:65:78:0b:1a:9c:b8:18:01:c3:
62:63:54:eb:36:51:93:22:c8:7a:ae:73:75:9f:fe:87:95:51:
a2:4b:52:cb:0a:8b:b6:4d:68:5b:25:c4:84:11:09:9d:9f:26:
c1:e2:e3:64:ce:5f:bd:7f:9f:d8:1f:69:8c:a8:ec:fb:83:81:
c5:cb:66:42:17:23:b7:f7:5f:47:e3:ec:b0:db:51:44:55:6d:
d1:11:f5:ab:9d:b0:4b:22:58:4d:f4:02:ae:4f:79:2b:71:00:
8f:98:51:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:35 2025 by rpki-client