Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: KH+pnumWbMnNRB4JMF7coVKVt/fOSJUlOJEmtSX6FOM=
Subject key identifier: A2:CB:88:BA:52:31:CB:11:6A:8E:96:F8:09:2F:F6:54:6D:5D:8C:94
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 0199FCC609973AF3A625EDC912D70D0440C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:00 +0000
Manifest this update: Sun 19 Oct 2025 14:01:00 +0000
Manifest next update: Mon 20 Oct 2025 14:01:00 +0000
Files and hashes: 1: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (hash: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=)
2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: UwyVkLUl+FzEHNny9vR+iru8Ri3NHMdrowI+f2WAh9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:09:97:3a:f3:a6:25:ed:c9:12:d7:0d:04:40:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Oct 19 14:01:00 2025 GMT
Not After : Oct 20 14:01:00 2025 GMT
Subject: CN=a2cb88ba5231cb116a8e96f8092ff6546d5d8c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:72:45:44:cb:51:cc:d6:64:89:41:bb:8e:
06:51:a3:1a:59:83:0c:a6:13:18:7f:f1:35:ab:59:
89:70:85:64:91:12:28:c7:6a:1d:c9:be:81:94:49:
71:e1:99:79:c0:e3:75:5a:cf:de:e2:b4:29:8f:06:
d3:ba:96:d9:0d:95:d1:b1:7d:89:2e:bb:23:a0:cc:
00:02:32:63:96:ad:fd:eb:cb:53:50:0c:d7:1c:c0:
5e:94:53:5d:9f:92:3f:96:75:17:90:c7:19:73:bb:
bf:30:7d:a3:1a:81:3f:bd:dd:b6:9e:fc:ed:d8:85:
e7:f4:4c:3d:a4:7f:f6:27:bf:52:64:a8:73:a7:5a:
af:99:99:35:23:23:4e:5c:31:eb:0d:de:db:0e:b3:
57:ab:79:48:35:56:ca:6c:2a:78:cc:54:45:69:3b:
b3:a1:39:d8:53:2a:1a:c3:a8:f3:27:9c:15:ff:0b:
a6:7b:95:23:fa:b1:eb:d3:07:bd:f0:35:0e:ae:ea:
77:1e:3e:fb:91:a7:44:18:89:86:21:fc:4a:a0:3c:
72:2a:1e:f9:e3:75:fe:79:1d:ec:29:bf:6f:f8:12:
32:8d:33:51:ec:a5:2d:60:15:86:b1:14:bf:c5:58:
4e:09:9c:4c:b4:de:54:01:ce:23:15:12:51:a2:87:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CB:88:BA:52:31:CB:11:6A:8E:96:F8:09:2F:F6:54:6D:5D:8C:94
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6a:ac:b8:1b:83:c7:1d:4c:7a:ab:86:cd:0f:c5:2a:5c:7d:
ad:dc:2a:fd:44:74:48:a7:26:b4:35:ab:84:13:4c:0e:1a:90:
ad:ce:4f:3f:e3:51:cd:73:c9:36:08:cd:87:73:68:7d:aa:a3:
e1:86:82:82:63:39:64:1d:99:4d:9a:37:9a:61:49:bb:85:c6:
c0:1a:3e:95:43:a9:0e:af:e6:8d:f0:09:5c:f6:b1:1b:b3:c3:
35:0c:0e:91:7c:15:14:c0:3b:24:a0:2d:c8:33:ea:5d:67:03:
60:99:9e:e0:08:2b:cc:22:2e:4f:19:21:06:c1:08:81:98:15:
2a:f2:99:6c:16:ce:5d:be:e9:1b:81:8d:69:00:88:df:c7:cf:
40:6a:60:24:52:90:2e:ac:de:4b:dd:a4:ed:ae:45:dc:98:7b:
00:eb:a0:d5:ba:3f:9e:47:37:8d:d0:dc:f4:b4:09:e3:94:ef:
97:f5:08:35:6d:c2:5f:6d:a1:70:8e:b1:c0:c4:a4:4c:01:b2:
6c:0e:19:c7:c2:77:e4:49:b4:41:59:9b:35:de:61:f0:eb:b4:
7e:09:b7:c1:dc:1c:82:d9:94:49:d1:7f:b5:68:ad:8b:5a:7b:
2f:8d:0b:69:93:14:89:19:23:a1:13:91:75:f7:b4:c2:f8:cd:
3d:8d:bf:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xgmXOvOmJe3JEtcNBEDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNzg3MDBmMTYxOWVjMWNkMzRkOTcwMDM5MjE1M2VjNGI2
MjMxZmMwHhcNMjUxMDE5MTQwMTAwWhcNMjUxMDIwMTQwMTAwWjAzMTEwLwYDVQQD
EyhhMmNiODhiYTUyMzFjYjExNmE4ZTk2ZjgwOTJmZjY1NDZkNWQ4Yzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMFyRUTLUczWZIlBu44GUaMaWYMM
phMYf/E1q1mJcIVkkRIox2odyb6BlElx4Zl5wON1Ws/e4rQpjwbTupbZDZXRsX2J
LrsjoMwAAjJjlq3968tTUAzXHMBelFNdn5I/lnUXkMcZc7u/MH2jGoE/vd22nvzt
2IXn9Ew9pH/2J79SZKhzp1qvmZk1IyNOXDHrDd7bDrNXq3lINVbKbCp4zFRFaTuz
oTnYUyoaw6jzJ5wV/wume5Uj+rHr0we98DUOrup3Hj77kadEGImGIfxKoDxyKh75
43X+eR3sKb9v+BIyjTNR7KUtYBWGsRS/xVhOCZxMtN5UAc4jFRJRooc/IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLLiLpSMcsRao6W+Akv9lRtXYyUMB8GA1UdIwQY
MBaAFHF4cA8WGewc002XADkhU+xLYjH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMt
ZDFkOGRiMTQ4ZWMyLzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMtZDFkOGRiMTQ4ZWMy
LzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWqsuBuD
xx1MequGzQ/FKlx9rdwq/UR0SKcmtDWrhBNMDhqQrc5PP+NRzXPJNgjNh3Nofaqj
4YaCgmM5ZB2ZTZo3mmFJu4XGwBo+lUOpDq/mjfAJXPaxG7PDNQwOkXwVFMA7JKAt
yDPqXWcDYJme4AgrzCIuTxkhBsEIgZgVKvKZbBbOXb7pG4GNaQCI38fPQGpgJFKQ
LqzeS92k7a5F3Jh7AOug1bo/nkc3jdDc9LQJ45Tvl/UINW3CX22hcI6xwMSkTAGy
bA4Zx8J35Em0QVmbNd5h8Ou0fgm3wdwcgtmUSdF/tWiti1p7L40LaZMUiRkjoROR
dfe0wvjNPY2/3w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:50 2025 by rpki-client