Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier: pMd5F3iSQQhzStQhNO9a/Tb87lXmEgUh+eTE4zik+74=
Subject key identifier: DD:9A:A5:0D:5F:60:63:F3:A9:EE:2D:6D:30:3B:AE:B5:0C:79:6C:B9
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 0199FBB3670F0628B96BDDE15A33710104E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number: 12F9
Signing time: Sun 19 Oct 2025 09:01:02 +0000
Manifest this update: Sun 19 Oct 2025 09:01:02 +0000
Manifest next update: Mon 20 Oct 2025 09:01:02 +0000
Files and hashes: 1: ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa (hash: 9p84KRKbOU/bcvDuyS4jKGMGlhWUqv7TM1ev7aRzlJY=)
2: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=)
3: RUbC7Anwng13DAmADxwjexI1dI4.roa (hash: z1iIQJGzT3kqShcPysOpmjaiqY2qZ/jm3snobkdy6yE=)
4: StWwJRIdLVG2AMr41LeqT3VLiMY.roa (hash: eHQmJVkUkkZ8vtMtrgklqHvKfJQIUIWoCE0Hf2r79IE=)
5: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: yb+HY2ptSraS816GRx/QkvetoczkMe/rrpMdbRvh29w=)
6: gp9nHU_cukvMULZAvDnIuT6ptiM.roa (hash: 7wIfWYcUlSAbfRukKEeXPASEhd8fL4WRrL0l2D1YuTg=)
7: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:67:0f:06:28:b9:6b:dd:e1:5a:33:71:01:04:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Oct 19 09:01:02 2025 GMT
Not After : Oct 20 09:01:02 2025 GMT
Subject: CN=dd9aa50d5f6063f3a9ee2d6d303baeb50c796cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:9e:3f:05:62:f4:24:69:96:ff:6d:08:0f:
9a:81:f1:98:b4:79:4e:68:a5:97:df:d2:d5:a7:25:
e8:86:89:5a:ec:01:dd:e5:f5:8b:f7:0c:1e:fd:9c:
e1:a2:34:75:b4:23:59:fa:b3:c5:a5:81:95:66:36:
65:97:a2:e1:e2:93:71:81:2c:fc:1b:86:7e:06:3f:
87:e1:ac:3c:d4:ec:42:84:0d:55:da:49:d9:9c:98:
a7:ea:ed:8d:5c:ac:32:43:15:29:aa:d7:95:75:6f:
4d:a5:dd:05:8d:20:ce:10:1d:97:c9:99:84:4d:4b:
d4:d9:a4:79:e3:70:6f:5a:fa:25:17:4a:83:91:ea:
81:4d:29:76:8a:2d:8c:78:0b:07:5d:df:4a:ba:d1:
c6:02:84:db:cf:25:3e:47:a0:55:09:a2:3d:c0:88:
61:ed:26:90:1c:53:0f:08:8f:79:de:f2:f9:2a:35:
a6:30:81:1d:29:af:a1:cf:98:bd:f6:60:bc:ad:3e:
99:e6:cf:88:13:6a:93:4b:b0:af:a3:06:43:87:c5:
1c:a0:80:3c:ed:9c:36:9d:fd:a2:96:2d:17:30:ee:
88:c4:f4:bf:69:23:2d:2f:64:b6:83:ff:7c:aa:75:
ee:05:4f:ab:6d:4a:fd:3d:c9:e4:54:ba:ce:ab:69:
4c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:A5:0D:5F:60:63:F3:A9:EE:2D:6D:30:3B:AE:B5:0C:79:6C:B9
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2f:4d:35:ea:3c:51:19:50:8a:2a:42:7a:25:63:c3:e3:ab:
8c:34:b3:2e:ec:f0:73:23:ad:37:c4:71:9e:48:ba:45:31:0d:
ac:9d:1f:05:95:dd:2c:fa:94:54:1c:7b:f0:f1:73:06:5b:d8:
f7:2f:f7:96:64:c0:12:36:c7:b3:4e:ec:13:5c:1e:d2:6d:f9:
20:ce:e9:b6:d6:77:83:ea:cb:4a:43:81:50:38:f6:65:97:3a:
9f:99:7d:ce:66:6d:46:4a:ec:cc:82:7f:ae:cc:d2:11:37:81:
f2:13:78:d3:55:b7:b0:1f:dd:f7:f3:e2:ca:62:2a:f2:1b:f5:
12:2d:58:c0:74:b7:97:db:64:c2:db:2a:c9:a1:99:5e:5c:21:
14:b2:58:91:1f:7b:d4:f4:ea:ec:6b:18:d8:f6:96:89:19:f2:
56:52:d2:f7:4d:dc:38:1a:8a:a8:a5:79:71:54:38:92:1d:03:
4e:99:be:0b:f7:ca:8b:63:fd:f6:0b:67:0b:a4:67:97:94:cf:
5b:ed:2e:ff:df:7a:da:ee:7b:0e:0f:17:f3:ad:ab:8c:da:4f:
49:94:54:ab:16:4b:77:95:a8:84:99:0b:33:b4:a1:49:d3:d2:
45:08:69:cb:71:da:e5:e1:b4:e6:49:c8:84:5e:94:48:35:f4:
33:8c:e3:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s2cPBii5a93hWjNxAQTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5
MjNmMjAwHhcNMjUxMDE5MDkwMTAyWhcNMjUxMDIwMDkwMTAyWjAzMTEwLwYDVQQD
EyhkZDlhYTUwZDVmNjA2M2YzYTllZTJkNmQzMDNiYWViNTBjNzk2Y2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEKePwVi9CRplv9tCA+agfGYtHlO
aKWX39LVpyXohola7AHd5fWL9wwe/ZzhojR1tCNZ+rPFpYGVZjZll6Lh4pNxgSz8
G4Z+Bj+H4aw81OxChA1V2knZnJin6u2NXKwyQxUpqteVdW9Npd0FjSDOEB2XyZmE
TUvU2aR543BvWvolF0qDkeqBTSl2ii2MeAsHXd9KutHGAoTbzyU+R6BVCaI9wIhh
7SaQHFMPCI953vL5KjWmMIEdKa+hz5i99mC8rT6Z5s+IE2qTS7CvowZDh8UcoIA8
7Zw2nf2ili0XMO6IxPS/aSMtL2S2g/98qnXuBU+rbUr9PcnkVLrOq2lMGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2apQ1fYGPzqe4tbTA7rrUMeWy5MB8GA1UdIwQY
MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt
Nzc3MzczZTYwNTVlLzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl
LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATy9NNeo8
URlQiipCeiVjw+OrjDSzLuzwcyOtN8Rxnki6RTENrJ0fBZXdLPqUVBx78PFzBlvY
9y/3lmTAEjbHs07sE1we0m35IM7pttZ3g+rLSkOBUDj2ZZc6n5l9zmZtRkrszIJ/
rszSETeB8hN401W3sB/d9/PiymIq8hv1Ei1YwHS3l9tkwtsqyaGZXlwhFLJYkR97
1PTq7GsY2PaWiRnyVlLS903cOBqKqKV5cVQ4kh0DTpm+C/fKi2P99gtnC6Rnl5TP
W+0u/9962u57Dg8X862rjNpPSZRUqxZLd5WohJkLM7ShSdPSRQhpy3Ha5eG05knI
hF6USDX0M4zjOw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:28 2025 by rpki-client