Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: whv+9ycw8yd+eIQrABEd4zc9cB2D49mby0cKkqQk+J0=
Subject key identifier: D9:70:D4:31:4A:D4:EB:8E:E5:87:B4:29:5B:DB:A0:CA:EC:E5:16:74
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 0199FBEBFFA070EC9DEC42A9443BB63EDB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0D49
Signing time: Sun 19 Oct 2025 10:02:51 +0000
Manifest this update: Sun 19 Oct 2025 10:02:51 +0000
Manifest next update: Mon 20 Oct 2025 10:02:51 +0000
Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: KdPgJzQG6aU2kWGmweYqXsrtTlmysN9xabhMPssSVbU=)
3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ff:a0:70:ec:9d:ec:42:a9:44:3b:b6:3e:db:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Oct 19 10:02:51 2025 GMT
Not After : Oct 20 10:02:51 2025 GMT
Subject: CN=d970d4314ad4eb8ee587b4295bdba0caece51674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:c9:b6:31:19:2a:7e:ec:bd:a5:6d:e8:88:
14:85:08:c1:89:bc:dc:29:0f:97:14:fe:99:0b:c3:
aa:82:9b:c1:63:84:73:47:97:83:29:e9:54:2a:e0:
c4:17:f1:46:d6:84:32:09:b4:8d:6d:70:c1:64:bd:
48:45:aa:ee:91:24:19:95:35:89:ce:91:78:c1:83:
10:4b:96:29:fe:24:80:07:b5:87:23:4b:29:9a:3b:
14:0e:65:0a:e2:db:95:b0:b8:a8:cf:3b:0d:4a:8a:
52:b6:99:51:ba:d9:a9:d7:a0:ef:1e:cf:dd:03:af:
08:38:2c:fa:9e:d9:63:ac:5a:09:c1:50:7a:9c:5d:
01:8c:ce:e2:c5:69:7c:3a:25:01:a1:be:7b:ea:7a:
8f:07:aa:35:9d:9a:6e:ed:f0:1c:8d:f1:fe:a5:89:
26:f5:25:40:84:aa:d6:98:c8:39:d2:f1:46:ec:e2:
7e:42:a3:b6:29:16:aa:7a:00:a0:db:d4:a8:04:50:
44:ae:ed:d5:e8:70:ea:13:69:cb:ec:85:77:0f:c2:
31:47:41:78:fe:ea:4e:45:10:00:df:50:2c:7c:e2:
f4:2e:57:87:a2:65:58:00:ec:5c:33:2d:71:2b:d2:
c2:d5:b8:d4:92:3c:48:29:80:d8:20:b4:68:e4:10:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:70:D4:31:4A:D4:EB:8E:E5:87:B4:29:5B:DB:A0:CA:EC:E5:16:74
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a7:e0:40:67:0a:24:b0:3e:eb:0a:6b:24:c4:9f:24:ce:18:
61:ac:41:aa:46:46:2e:37:6c:60:93:fa:79:f0:d5:24:77:64:
76:bd:8e:fb:1f:9d:ed:ba:37:50:e0:35:bc:e3:a4:cd:2e:41:
f8:e9:37:58:91:d3:08:46:a9:ef:8b:9c:12:af:d0:8a:7f:a9:
6d:57:cb:f7:6f:8a:c3:b7:44:8e:e0:5e:20:d1:5b:db:37:db:
d3:b3:d0:ff:19:01:3b:88:08:1a:ba:da:5d:05:fb:e9:b3:7d:
d5:6d:08:07:dc:c3:94:dd:f0:5e:6b:f4:e0:e2:21:4f:2a:da:
8d:fd:ac:06:99:ff:3a:4e:40:c2:4a:73:6f:a8:66:85:f0:21:
6a:1e:f0:73:d1:13:38:0b:64:d8:cd:9e:99:98:31:1a:c0:b1:
95:24:07:36:5a:1f:8b:67:c6:5d:dd:38:bb:d7:5f:42:c5:fb:
51:3a:59:36:da:23:de:54:f3:93:d6:f4:0c:c1:b9:69:79:cb:
fe:18:a5:cd:01:be:1a:70:f6:c2:bb:c0:8d:40:ca:54:58:08:
c7:82:3c:11:fc:10:82:ac:d3:2e:40:e5:f4:66:d7:70:f0:66:
a8:aa:13:0d:b6:2e:16:12:89:ba:64:ac:ba:29:91:89:55:1d:
34:43:92:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/+gcOyd7EKpRDu2PtuWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMzliYzVjZWYzYWVhZGYzMjYxM2Y3ZDk1OWVjOGU0MGE3
NDI5MTgwHhcNMjUxMDE5MTAwMjUxWhcNMjUxMDIwMTAwMjUxWjAzMTEwLwYDVQQD
EyhkOTcwZDQzMTRhZDRlYjhlZTU4N2I0Mjk1YmRiYTBjYWVjZTUxNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWLJtjEZKn7svaVt6IgUhQjBibzc
KQ+XFP6ZC8OqgpvBY4RzR5eDKelUKuDEF/FG1oQyCbSNbXDBZL1IRarukSQZlTWJ
zpF4wYMQS5Yp/iSAB7WHI0spmjsUDmUK4tuVsLiozzsNSopStplRutmp16DvHs/d
A68IOCz6ntljrFoJwVB6nF0BjM7ixWl8OiUBob576nqPB6o1nZpu7fAcjfH+pYkm
9SVAhKrWmMg50vFG7OJ+QqO2KRaqegCg29SoBFBEru3V6HDqE2nL7IV3D8IxR0F4
/upORRAA31AsfOL0LleHomVYAOxcMy1xK9LC1bjUkjxIKYDYILRo5BC/QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlw1DFK1OuO5Ye0KVvboMrs5RZ0MB8GA1UdIwQY
MBaAFHE5vFzvOurfMmE/fZWeyOQKdCkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYt
Nzk0YjI4ZWIxNmM1LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYtNzk0YjI4ZWIxNmM1
LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYafgQGcK
JLA+6wprJMSfJM4YYaxBqkZGLjdsYJP6efDVJHdkdr2O+x+d7bo3UOA1vOOkzS5B
+Ok3WJHTCEap74ucEq/Qin+pbVfL92+Kw7dEjuBeINFb2zfb07PQ/xkBO4gIGrra
XQX76bN91W0IB9zDlN3wXmv04OIhTyrajf2sBpn/Ok5Awkpzb6hmhfAhah7wc9ET
OAtk2M2emZgxGsCxlSQHNlofi2fGXd04u9dfQsX7UTpZNtoj3lTzk9b0DMG5aXnL
/hilzQG+GnD2wrvAjUDKVFgIx4I8EfwQgqzTLkDl9GbXcPBmqKoTDbYuFhKJumSs
uimRiVUdNEOSEg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:48 2025 by rpki-client