Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
File: cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json)
Hash identifier: oe+q/b6VWysorNGFd/PEl+jvAClGmooApd8MWbnnvm0=
Subject key identifier: 8B:B3:DB:0C:61:56:21:AA:10:CF:56:5C:54:E7:5C:E8:3C:AD:05:D0
Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
Certificate issuer: /CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Certificate serial: 019A00DA62947FE032BC294E7562F6C4531B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
Manifest number: 019D
Signing time: Mon 20 Oct 2025 09:01:43 +0000
Manifest this update: Mon 20 Oct 2025 09:01:43 +0000
Manifest next update: Tue 21 Oct 2025 09:01:43 +0000
Files and hashes: 1: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: zmgdIuCFNWH3u72aYVukmrJGGFD7OyL8dovGuP0t/X0=)
2: xhxuKJYrPBlCKVgSSZLbkArXr9M.roa (hash: eBW3Gn9+jBJu0tA7uYFfIKZTT8p/0XeRa4Z67cWs8N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:62:94:7f:e0:32:bc:29:4e:75:62:f6:c4:53:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Validity
Not Before: Oct 20 09:01:43 2025 GMT
Not After : Oct 21 09:01:43 2025 GMT
Subject: CN=8bb3db0c615621aa10cf565c54e75ce83cad05d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:f7:da:49:6e:5f:4a:5c:cd:33:be:f9:37:
32:e7:ea:ad:5a:9b:0d:38:20:1e:88:5e:64:25:fe:
1c:85:9d:7e:20:52:dc:40:5a:e1:f3:c9:0b:fa:99:
5e:c2:a1:b8:97:85:e2:80:4e:1c:f0:e1:b4:da:3e:
43:99:a5:ba:43:ca:2b:2c:74:ed:1a:ac:26:2f:ad:
a5:5a:1d:13:6a:c8:d9:37:28:ea:b5:69:de:63:23:
36:ba:36:9e:c2:60:c3:83:ef:fe:83:30:dc:90:ca:
0c:b7:e9:5b:12:f4:55:7c:44:5f:1f:cb:86:9c:e6:
e0:31:f1:1a:7d:ef:d3:ea:e8:80:ec:76:ff:dd:9d:
ca:99:e0:9a:0a:91:32:4e:99:68:45:41:c8:db:28:
f0:09:ae:0c:14:a7:c8:7b:c9:23:29:d9:a5:2b:20:
ad:9d:eb:3a:73:0b:a4:41:92:9b:bd:10:e3:52:74:
7d:33:8f:78:b5:c9:cb:e5:c0:b8:06:92:3d:9e:a5:
a4:e3:17:8c:e7:54:8b:c8:0f:9e:96:41:2a:79:0e:
78:c9:6e:b4:2b:04:98:13:a3:c3:db:0d:d4:45:ca:
4d:42:8a:44:4a:9d:76:67:f8:6b:73:66:a6:b7:ac:
a5:f0:e3:2d:e8:cd:1a:91:c7:95:66:65:51:b5:5d:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B3:DB:0C:61:56:21:AA:10:CF:56:5C:54:E7:5C:E8:3C:AD:05:D0
X509v3 Authority Key Identifier:
keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c4:e8:6f:f1:05:af:db:60:c1:88:2a:a6:41:e0:ad:d0:49:
c0:aa:35:ed:36:74:c5:14:08:54:59:42:6b:d2:95:3a:9f:d0:
74:cc:b5:43:4c:4e:d4:32:44:c9:16:dc:3e:4f:74:e6:ff:7b:
3f:a2:d8:97:7d:b8:c6:c5:fa:a9:62:10:09:02:0d:03:68:68:
fd:2d:c0:74:46:da:65:7d:fe:0b:a9:3b:d7:d9:b8:78:72:6b:
c8:74:93:9d:15:0e:dc:6f:04:dc:f3:ae:95:2b:ad:cc:0a:e9:
4f:64:5f:4c:d5:0a:d3:0a:9b:53:06:42:79:e3:05:02:ab:77:
81:ca:f4:52:dc:27:7c:f7:83:3f:e6:9d:13:86:24:e1:f9:4d:
9a:92:80:65:03:30:83:89:56:47:16:45:95:7b:ba:26:2c:da:
4c:c9:a1:5a:5a:76:dd:18:94:1a:21:fb:ce:21:02:49:07:ab:
0a:6d:fa:19:4f:b6:7e:90:09:f3:f6:68:e8:05:82:f5:a6:cc:
4f:74:1d:be:c1:a0:a8:d3:48:e8:ad:fb:32:9d:58:cd:6f:fd:
c9:97:cf:e7:b6:be:22:89:9a:e0:3e:81:4a:25:8a:c9:63:97:
c1:46:62:04:ba:54:e4:82:8a:94:c3:eb:a9:21:56:46:99:e6:
d3:8b:5d:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2mKUf+AyvClOdWL2xFMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTEzOTE1ZmExYmM1NzlmNTg1NmY1OGVjYjI0Nzg2Mzc5
YTVkNDgwHhcNMjUxMDIwMDkwMTQzWhcNMjUxMDIxMDkwMTQzWjAzMTEwLwYDVQQD
Eyg4YmIzZGIwYzYxNTYyMWFhMTBjZjU2NWM1NGU3NWNlODNjYWQwNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTT32kluX0pczTO++Tcy5+qtWpsN
OCAeiF5kJf4chZ1+IFLcQFrh88kL+plewqG4l4XigE4c8OG02j5DmaW6Q8orLHTt
GqwmL62lWh0TasjZNyjqtWneYyM2ujaewmDDg+/+gzDckMoMt+lbEvRVfERfH8uG
nObgMfEafe/T6uiA7Hb/3Z3KmeCaCpEyTploRUHI2yjwCa4MFKfIe8kjKdmlKyCt
nes6cwukQZKbvRDjUnR9M494tcnL5cC4BpI9nqWk4xeM51SLyA+elkEqeQ54yW60
KwSYE6PD2w3URcpNQopESp12Z/hrc2amt6yl8OMt6M0akceVZmVRtV2LqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuz2wxhViGqEM9WXFTnXOg8rQXQMB8GA1UdIwQY
MBaAFHLhORX6G8V59YVvWOyyR4Y3ml1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODIt
ZjFlOGJkNzQxODBjLzEvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODItZjFlOGJkNzQxODBj
LzEvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8Tob/EF
r9tgwYgqpkHgrdBJwKo17TZ0xRQIVFlCa9KVOp/QdMy1Q0xO1DJEyRbcPk905v97
P6LYl324xsX6qWIQCQINA2ho/S3AdEbaZX3+C6k719m4eHJryHSTnRUO3G8E3POu
lSutzArpT2RfTNUK0wqbUwZCeeMFAqt3gcr0UtwnfPeDP+adE4Yk4flNmpKAZQMw
g4lWRxZFlXu6JizaTMmhWlp23RiUGiH7ziECSQerCm36GU+2fpAJ8/Zo6AWC9abM
T3QdvsGgqNNI6K37Mp1YzW/9yZfP57a+Ioma4D6BSiWKyWOXwUZiBLpU5IKKlMPr
qSFWRpnm04tdnw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:34:13 2025 by rpki-client