Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: 42pK1lnygsu3bOlTvK1mUy/Qz2IuhLWCbyeuC5jrAYs=
Subject key identifier: A4:E2:40:B2:03:2F:C2:82:97:69:BF:89:4E:F5:B9:38:8B:30:90:57
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 0199FD3489298572F12800E79B14601E1B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 16FA
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: ELVDoYmFaTCtnTMhAqZufMc8mXg.roa (hash: GX/uRjpcUEeVnkiAfonTZ3Q7zJlqdixXVsuNiqh4BrE=)
2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: AaRCW8/3HaotLdH9KyPg94uz8aWxL6e48c4rvyIM00s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:89:29:85:72:f1:28:00:e7:9b:14:60:1e:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=a4e240b2032fc2829769bf894ef5b9388b309057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:6b:28:fb:13:89:e5:f0:6e:3c:e5:a3:52:
4e:90:9c:b6:21:ed:d5:55:00:94:9f:8c:5c:29:da:
d4:98:de:21:77:e4:45:42:2b:54:62:69:22:56:e2:
af:7d:59:60:67:91:25:86:56:82:b2:ae:f2:16:7a:
d2:5f:0b:f4:27:46:a4:d0:92:8f:73:ba:e3:3e:37:
47:82:ea:7c:b1:7e:0f:5b:f1:46:18:d0:2d:fc:64:
fd:1a:27:50:01:e6:6f:72:07:dc:12:41:97:a9:18:
a9:af:9e:2f:82:39:f0:14:70:91:a1:48:dd:28:19:
1a:b6:e2:ca:fe:2f:04:6c:b2:ac:1e:3f:53:e3:00:
20:d3:04:f5:f9:cd:cb:9c:fe:3a:56:31:44:2a:00:
d4:e6:13:0e:d0:55:5a:43:cd:26:67:70:2a:c4:62:
bd:98:95:03:b5:88:35:2f:a0:5f:7e:e9:b5:e7:68:
b3:cc:a3:99:7f:10:24:c4:75:98:f0:dc:85:14:53:
94:01:31:34:d0:cd:87:84:ac:23:96:fd:86:71:03:
b8:4a:d5:5b:4a:f5:fa:b7:6e:16:35:c9:2e:53:c9:
71:ed:66:27:ac:f6:bb:87:ff:d3:2a:19:78:2f:1a:
54:f1:bc:51:ec:2c:6d:53:99:d1:e6:a6:5c:d4:dd:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:40:B2:03:2F:C2:82:97:69:BF:89:4E:F5:B9:38:8B:30:90:57
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6a:48:c5:bd:ee:69:56:4d:a5:79:75:f1:d8:9b:73:69:66:
97:c2:57:be:47:ee:fe:8b:bd:7c:ba:eb:24:2e:a9:c0:fe:5a:
26:ff:99:54:2c:ca:f9:cb:fb:3b:c0:ad:b6:1f:41:cd:44:7f:
5b:9c:ee:2f:6e:c9:a0:06:25:12:c4:95:38:92:3b:5d:6f:43:
37:5d:3e:32:50:77:64:55:8a:f0:d0:56:c9:76:3d:98:bb:89:
21:c9:41:15:c8:f4:e5:55:9f:3f:ef:fe:6e:22:38:a1:bc:bb:
33:59:4c:3b:78:da:b9:b2:e8:ea:9e:1f:07:f0:e2:aa:59:d2:
19:96:b4:dc:ea:08:4a:4e:54:e0:ce:1e:3e:46:66:0b:22:04:
2c:23:7a:59:c8:15:80:2a:0e:c5:ca:9a:3b:0d:6f:f7:2e:a2:
8c:ca:ed:06:31:42:38:76:e7:75:d8:ab:c9:34:91:aa:52:95:
80:c5:02:95:64:5f:dc:fc:7e:75:4f:b0:06:2c:d2:40:a9:47:
ac:3b:a4:c9:42:86:7b:3f:f0:8b:a2:85:25:ed:28:8d:3b:fc:
c4:84:02:32:a9:a2:4b:85:34:de:36:71:df:20:88:a4:c6:c2:
3f:4e:29:6d:90:44:bf:80:a7:ac:7e:3f:5d:8a:f2:31:40:81:
7b:c5:95:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NIkphXLxKADnmxRgHhtoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTgxZmI1Y2YwZmIzMmM0NTc1Zjg0MTNhY2JkNDFhYTg0
YjgyZjQwHhcNMjUxMDE5MTYwMTQyWhcNMjUxMDIwMTYwMTQyWjAzMTEwLwYDVQQD
EyhhNGUyNDBiMjAzMmZjMjgyOTc2OWJmODk0ZWY1YjkzODhiMzA5MDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthBrKPsTieXwbjzlo1JOkJy2Ie3V
VQCUn4xcKdrUmN4hd+RFQitUYmkiVuKvfVlgZ5ElhlaCsq7yFnrSXwv0J0ak0JKP
c7rjPjdHgup8sX4PW/FGGNAt/GT9GidQAeZvcgfcEkGXqRipr54vgjnwFHCRoUjd
KBkatuLK/i8EbLKsHj9T4wAg0wT1+c3LnP46VjFEKgDU5hMO0FVaQ80mZ3AqxGK9
mJUDtYg1L6Bffum152izzKOZfxAkxHWY8NyFFFOUATE00M2HhKwjlv2GcQO4StVb
SvX6t24WNckuU8lx7WYnrPa7h//TKhl4LxpU8bxR7CxtU5nR5qZc1N07JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTiQLIDL8KCl2m/iU71uTiLMJBXMB8GA1UdIwQY
MBaAFHLoH7XPD7MsRXX4QTrL1BqoS4L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQt
Y2RhNmUxOWZmYjg4LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQtY2RhNmUxOWZmYjg4
LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWpIxb3u
aVZNpXl18dibc2lml8JXvkfu/ou9fLrrJC6pwP5aJv+ZVCzK+cv7O8Ctth9BzUR/
W5zuL27JoAYlEsSVOJI7XW9DN10+MlB3ZFWK8NBWyXY9mLuJIclBFcj05VWfP+/+
biI4oby7M1lMO3jaubLo6p4fB/DiqlnSGZa03OoISk5U4M4ePkZmCyIELCN6WcgV
gCoOxcqaOw1v9y6ijMrtBjFCOHbnddiryTSRqlKVgMUClWRf3Px+dU+wBizSQKlH
rDukyUKGez/wi6KFJe0ojTv8xIQCMqmiS4U03jZx3yCIpMbCP04pbZBEv4CnrH4/
XYryMUCBe8WVCQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:47 2025 by rpki-client