
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
File: cAiszpDUdaD6oR0oVIakU1ILgfA.mft (raw, json)
Hash identifier: xQu0+00QP8tEVFHsiA/uYotlRgxy2Pd5oM0Z/RBrC3Y=
Subject key identifier: 62:CB:B2:93:FA:11:93:79:E1:9E:72:91:F0:BE:AA:5E:4D:45:80:14
Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
Certificate issuer: /CN=7008acce90d475a0faa11d285486a453520b81f0
Certificate serial: 0199FC5891827301ABAC1D580566EBD3E356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
Manifest number: 0120
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: SGExsZYw7zZNQMmCejqPLZCEzR4.roa (hash: lywDbb/BT202qwVyQW4Rrl3AkbHkGjJUpz5yvpYCOaU=)
2: cAiszpDUdaD6oR0oVIakU1ILgfA.crl (hash: jeAeXv79qY9V1ignfBkc4B6czOpnx4zwhyFpvVPst6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:91:82:73:01:ab:ac:1d:58:05:66:eb:d3:e3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=62cbb293fa119379e19e7291f0beaa5e4d458014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:12:da:60:2f:ba:35:f8:f9:bc:2b:34:17:
c4:42:71:de:3d:5c:ad:81:b2:e9:12:bc:75:61:4d:
3f:d0:29:96:ff:2d:a9:06:dc:80:09:68:41:3d:b6:
fa:25:eb:e2:2d:90:ff:67:7e:0e:cd:5c:bc:86:34:
1e:65:96:7f:0d:6b:f2:87:51:56:4d:eb:ad:2f:e9:
d0:b0:11:bc:31:9d:f7:dd:b2:ca:ab:e7:fe:93:d3:
d6:fd:0d:a1:4e:c6:86:3e:04:bb:3e:7b:97:8a:d3:
2a:40:68:1f:73:3a:4e:d6:7d:8b:02:1e:a1:9f:51:
a4:0f:3f:a6:9f:61:28:34:1a:0d:9b:98:44:fc:18:
15:c0:2a:03:71:b5:de:ec:39:03:f4:c1:79:ae:bc:
6e:24:2f:a9:24:f2:15:01:d0:d9:9c:d9:a5:a9:11:
d4:99:d7:98:e4:9f:ef:06:2f:0f:16:20:c7:ba:e3:
0b:ad:99:b0:48:61:36:35:69:e3:ac:3a:3e:3b:23:
42:7c:4d:5a:6a:18:ea:6a:b0:75:c7:44:8b:70:a8:
9d:ea:97:a8:2d:f5:ef:10:5d:7d:4e:c6:3d:a9:a1:
5c:a2:db:41:ac:bc:e6:d9:1e:81:e1:50:e1:14:7a:
4b:d8:57:0f:39:c7:0e:d9:bf:3d:63:de:3a:31:45:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:B2:93:FA:11:93:79:E1:9E:72:91:F0:BE:AA:5E:4D:45:80:14
X509v3 Authority Key Identifier:
keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e5:d6:63:c8:a0:22:7b:14:75:67:9d:57:16:97:97:19:25:
3e:6d:f1:7d:c3:ad:cc:a7:9d:23:83:ed:ad:67:66:60:0c:85:
d2:9f:17:5d:f7:9c:cb:8f:c3:a9:ea:bd:5d:08:1b:6c:78:88:
fc:89:84:11:71:88:9c:62:54:83:94:57:89:d1:60:f8:83:52:
d3:ad:9e:bd:79:cf:38:5e:0a:39:b0:b5:ce:1b:3e:a2:7a:b8:
95:b6:a3:ae:7e:15:6d:ab:4c:2f:4d:e8:16:ad:6c:1e:e8:9a:
26:77:fe:bb:09:10:68:11:2a:6a:d6:a1:2c:eb:50:e5:76:22:
53:04:02:45:1d:2a:c0:0a:48:eb:5a:b4:59:90:ba:03:aa:b9:
7e:a0:e0:3a:89:d2:7e:aa:cf:77:8c:18:12:d9:83:9c:56:06:
d9:7d:80:3e:6e:f3:61:d8:ad:19:50:e4:bd:d1:80:e9:00:75:
c0:74:35:b6:28:28:e6:59:74:78:1d:fd:82:91:91:62:05:1a:
99:35:e1:9d:80:c2:a7:e8:5c:36:cd:77:cd:31:8b:63:d3:9c:
7f:4b:8a:a4:72:40:98:1e:88:6d:19:a9:70:42:76:d9:5f:f0:
2d:7c:16:61:3a:ea:e9:1b:c2:eb:f4:f8:fd:28:a2:26:a7:c9:
36:6d:02:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJGCcwGrrB1YBWbr0+NWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMDhhY2NlOTBkNDc1YTBmYWExMWQyODU0ODZhNDUzNTIw
YjgxZjAwHhcNMjUxMDE5MTIwMTI2WhcNMjUxMDIwMTIwMTI2WjAzMTEwLwYDVQQD
Eyg2MmNiYjI5M2ZhMTE5Mzc5ZTE5ZTcyOTFmMGJlYWE1ZTRkNDU4MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr64S2mAvujX4+bwrNBfEQnHePVyt
gbLpErx1YU0/0CmW/y2pBtyACWhBPbb6JeviLZD/Z34OzVy8hjQeZZZ/DWvyh1FW
TeutL+nQsBG8MZ333bLKq+f+k9PW/Q2hTsaGPgS7PnuXitMqQGgfczpO1n2LAh6h
n1GkDz+mn2EoNBoNm5hE/BgVwCoDcbXe7DkD9MF5rrxuJC+pJPIVAdDZnNmlqRHU
mdeY5J/vBi8PFiDHuuMLrZmwSGE2NWnjrDo+OyNCfE1aahjqarB1x0SLcKid6peo
LfXvEF19TsY9qaFcottBrLzm2R6B4VDhFHpL2FcPOccO2b89Y946MUVX1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLLspP6EZN54Z5ykfC+ql5NRYAUMB8GA1UdIwQY
MBaAFHAIrM6Q1HWg+qEdKFSGpFNSC4HwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Fpc3pwRFVkYUQ2b1Iwb1ZJYWtVMUlMZ2ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85MTdkNTAtZmM2NC00YjNlLTkxZTkt
YTMxODkzYjBlYWZjLzEvY0Fpc3pwRFVkYUQ2b1Iwb1ZJYWtVMUlMZ2ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85MTdkNTAtZmM2NC00YjNlLTkxZTktYTMxODkzYjBlYWZj
LzEvY0Fpc3pwRFVkYUQ2b1Iwb1ZJYWtVMUlMZ2ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAveXWY8ig
InsUdWedVxaXlxklPm3xfcOtzKedI4PtrWdmYAyF0p8XXfecy4/Dqeq9XQgbbHiI
/ImEEXGInGJUg5RXidFg+INS062evXnPOF4KObC1zhs+onq4lbajrn4VbatML03o
Fq1sHuiaJnf+uwkQaBEqatahLOtQ5XYiUwQCRR0qwApI61q0WZC6A6q5fqDgOonS
fqrPd4wYEtmDnFYG2X2APm7zYditGVDkvdGA6QB1wHQ1tigo5ll0eB39gpGRYgUa
mTXhnYDCp+hcNs13zTGLY9Ocf0uKpHJAmB6IbRmpcEJ22V/wLXwWYTrq6RvC6/T4
/SiiJqfJNm0CJA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:52 2025 by rpki-client