Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier: Gq6z8m/SGH+8gNKUfYS9E8BTN5GmDf9kGJOTWfLgWhc=
Subject key identifier: 24:73:0A:21:B1:47:E8:75:A0:82:C8:F8:17:15:35:EE:5C:71:C3:FE
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 0199FD34984A30E12FAAA757FA2309E625D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:46 +0000
Manifest this update: Sun 19 Oct 2025 16:01:46 +0000
Manifest next update: Mon 20 Oct 2025 16:01:46 +0000
Files and hashes: 1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=)
2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: u92rfsxhv20CtCQmuqpW04Ln+X3zWUZM0lvXT6Jv8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:98:4a:30:e1:2f:aa:a7:57:fa:23:09:e6:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: Oct 19 16:01:46 2025 GMT
Not After : Oct 20 16:01:46 2025 GMT
Subject: CN=24730a21b147e875a082c8f8171535ee5c71c3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:18:ac:f6:d3:32:63:99:29:e6:30:70:33:
7e:43:03:79:83:aa:84:a1:c5:47:4c:6b:db:8e:08:
8e:e0:35:b1:f1:96:52:c1:e0:95:7f:de:37:60:78:
05:67:e4:03:e1:76:23:e5:b0:a2:12:c7:16:88:82:
e7:a7:8b:00:47:54:48:c9:e6:4f:99:06:b3:e0:03:
24:a4:3e:a7:10:ff:67:fb:95:d3:66:21:06:ab:b4:
41:f0:2e:75:9b:3a:d5:32:1c:31:20:f8:07:0e:c5:
65:43:0c:b3:22:96:c6:46:8b:e7:5b:d3:84:65:1b:
48:0d:12:a1:63:fa:d5:87:33:15:cf:49:af:53:e3:
2f:04:1f:1e:a4:08:b5:4d:2a:5c:fb:b0:a7:0f:04:
95:38:c3:4f:67:89:eb:4c:49:da:cd:8e:08:00:a9:
36:fd:32:07:cf:de:fe:54:2c:46:e1:c8:f3:a1:2a:
5e:fe:8e:8b:62:e8:a1:f7:77:a4:5e:2d:d5:99:cb:
46:00:4c:fe:18:d5:87:f5:77:db:7e:44:ed:16:20:
16:36:27:a1:ea:86:43:5c:ce:a3:4c:69:d8:bd:04:
7d:fd:c6:57:7c:b2:9e:c3:c4:2c:6e:4e:83:3b:bc:
44:b8:70:7e:a8:d4:ca:93:dd:a5:46:01:5a:d4:60:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:73:0A:21:B1:47:E8:75:A0:82:C8:F8:17:15:35:EE:5C:71:C3:FE
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8e:d4:f2:a0:23:d9:de:04:14:d7:b0:2a:6b:b5:65:00:95:
64:4c:54:6b:3e:19:8a:f2:a0:ea:a7:99:9c:be:76:3e:98:6e:
8f:86:e4:e8:be:fa:0f:ab:5b:00:02:0f:f8:6c:a7:40:82:c2:
20:f5:85:fe:98:6e:81:c7:c3:55:ee:39:c6:fc:68:bc:74:95:
4a:d0:7f:22:e0:a4:a4:53:12:12:78:e9:e2:d3:85:3f:ab:69:
39:c0:e4:7f:c3:24:0e:ff:6e:f7:03:1e:8e:18:f9:3f:83:12:
8a:56:22:4e:0e:f8:ca:76:07:52:66:37:d6:83:57:4a:e8:c3:
5e:01:b6:55:33:ad:ba:8c:0c:5b:7a:cd:c4:c3:9f:68:32:56:
c1:cf:c0:6e:56:47:12:fd:05:70:6a:dd:df:bd:97:36:db:41:
80:a0:d6:8c:17:f5:23:8e:9c:38:c5:8f:97:90:b3:77:18:43:
6a:97:00:b4:20:60:c5:1f:8e:ea:65:bc:9e:60:c6:ba:56:e0:
b9:5b:3f:bc:bb:66:47:59:fc:0b:6b:ee:2b:6a:6e:b0:8d:8a:
25:9a:dd:f8:40:bf:f7:bc:44:b6:52:fa:4f:ce:c1:8c:71:b8:
4b:8a:c6:02:28:bc:37:a1:c9:d8:f8:8a:f8:7a:d3:4e:b2:be:
65:7d:6e:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NJhKMOEvqqdX+iMJ5iXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczY2JjMTQ3ZWFkZDgxNTQ4MTUxZjM1MTBlMmRlMDlkODY4
YWM2Y2MwHhcNMjUxMDE5MTYwMTQ2WhcNMjUxMDIwMTYwMTQ2WjAzMTEwLwYDVQQD
EygyNDczMGEyMWIxNDdlODc1YTA4MmM4ZjgxNzE1MzVlZTVjNzFjM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy4YrPbTMmOZKeYwcDN+QwN5g6qE
ocVHTGvbjgiO4DWx8ZZSweCVf943YHgFZ+QD4XYj5bCiEscWiILnp4sAR1RIyeZP
mQaz4AMkpD6nEP9n+5XTZiEGq7RB8C51mzrVMhwxIPgHDsVlQwyzIpbGRovnW9OE
ZRtIDRKhY/rVhzMVz0mvU+MvBB8epAi1TSpc+7CnDwSVOMNPZ4nrTEnazY4IAKk2
/TIHz97+VCxG4cjzoSpe/o6LYuih93ekXi3VmctGAEz+GNWH9XfbfkTtFiAWNieh
6oZDXM6jTGnYvQR9/cZXfLKew8Qsbk6DO7xEuHB+qNTKk92lRgFa1GA5MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRzCiGxR+h1oILI+BcVNe5cccP+MB8GA1UdIwQY
MBaAFHPLwUfq3YFUgVHzUQ4t4J2GisbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNjMwNGItNmM1OS00ZjVmLWI2NDYt
NWYwZDkxZjRmOTA4LzEvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNjMwNGItNmM1OS00ZjVmLWI2NDYtNWYwZDkxZjRmOTA4
LzEvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU47U8qAj
2d4EFNewKmu1ZQCVZExUaz4ZivKg6qeZnL52Pphuj4bk6L76D6tbAAIP+GynQILC
IPWF/phugcfDVe45xvxovHSVStB/IuCkpFMSEnjp4tOFP6tpOcDkf8MkDv9u9wMe
jhj5P4MSilYiTg74ynYHUmY31oNXSujDXgG2VTOtuowMW3rNxMOfaDJWwc/AblZH
Ev0FcGrd372XNttBgKDWjBf1I46cOMWPl5CzdxhDapcAtCBgxR+O6mW8nmDGulbg
uVs/vLtmR1n8C2vuK2pusI2KJZrd+EC/97xEtlL6T87BjHG4S4rGAii8N6HJ2PiK
+HrTTrK+ZX1uvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:17 2025 by rpki-client