Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier: Sax+bqDGIqzIWD31iGYnHQMrmHUEl+Nij823pmevaAQ=
Subject key identifier: A1:77:1C:94:3E:95:07:CF:DE:18:1A:C5:98:D6:83:A3:2B:93:0D:71
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial: 0199FB7CF1921D37E385D045139A2E043177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 08:01:33 +0000
Manifest this update: Sun 19 Oct 2025 08:01:33 +0000
Manifest next update: Mon 20 Oct 2025 08:01:33 +0000
Files and hashes: 1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=)
2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: /T1FHIADgZOYTFbgntzc1XWc4tbcQjIgH9hh7eqhbH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f1:92:1d:37:e3:85:d0:45:13:9a:2e:04:31:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
Validity
Not Before: Oct 19 08:01:33 2025 GMT
Not After : Oct 20 08:01:33 2025 GMT
Subject: CN=a1771c943e9507cfde181ac598d683a32b930d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6d:28:63:64:7e:d1:28:38:a7:84:f2:b8:3f:
26:3d:17:ff:de:5c:6d:6a:c6:ff:4f:ac:67:fa:77:
f0:01:b0:b4:ed:ab:c1:04:6f:ab:88:4d:58:96:a5:
b2:20:8b:65:05:be:c0:a0:88:39:67:23:14:a9:d7:
27:ab:0b:88:82:8f:e4:10:fd:7a:53:cd:81:6d:1b:
a1:92:68:d6:8a:b0:f3:e1:b5:c1:52:69:a8:4d:28:
b2:1c:2c:d0:96:cd:11:33:9f:37:ab:7a:41:0d:e0:
4b:94:e0:57:80:76:1f:00:83:83:0a:21:1c:c5:f8:
0b:d3:31:59:3b:f4:59:33:3e:e0:94:15:ea:03:8c:
cd:59:af:6f:62:a5:b9:b5:77:5b:3e:f9:c6:40:3c:
04:f9:04:64:3b:fa:a2:bf:61:3c:bc:dd:a2:b2:b0:
ce:8b:fd:cd:70:67:b1:43:20:40:58:2b:2c:cc:3b:
36:b5:d9:46:7d:2d:7f:b9:aa:bd:46:c8:5c:d4:c9:
c2:9e:38:78:d0:06:76:a7:88:78:e2:92:c3:d3:3b:
77:5e:04:8a:ef:02:4c:be:28:13:ce:5a:af:e0:96:
4b:d2:3f:a9:53:f4:62:ff:8e:1c:2a:36:19:b7:93:
4c:96:33:1e:04:c6:63:77:40:2a:0b:90:cb:95:df:
69:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:1C:94:3E:95:07:CF:DE:18:1A:C5:98:D6:83:A3:2B:93:0D:71
X509v3 Authority Key Identifier:
keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2b:fb:de:26:a6:ac:56:eb:a9:43:82:44:cc:28:9e:5f:93:
e1:2b:a6:a8:e9:a4:be:47:18:3c:fc:ef:3f:08:01:64:71:88:
c1:e9:12:34:f4:c0:91:89:a4:ad:38:aa:11:e9:d4:ae:f1:82:
be:b8:b5:5d:2d:f3:51:12:d0:af:df:c0:ce:c9:7a:9a:ec:03:
18:cc:c4:a7:94:08:67:9d:2e:dd:4b:b0:8b:57:d5:9b:bb:50:
63:96:9e:b9:67:de:cc:16:83:e2:b7:67:8b:ab:60:30:67:90:
54:de:da:e9:8f:c1:58:9c:bc:9a:18:70:b0:67:14:5e:0b:41:
7f:b7:43:27:6a:90:2f:60:3a:88:ec:b6:13:01:a2:6b:eb:30:
10:b0:e0:6e:26:96:bc:32:bb:ab:82:56:dc:a4:80:f8:dc:62:
99:76:6a:91:cc:e7:39:69:9d:52:09:0a:15:26:5b:b9:7f:c6:
5c:04:e9:a0:63:35:a2:33:4b:ec:23:01:5f:68:65:51:e7:06:
1b:2c:a5:e5:aa:4a:69:6a:83:9a:81:12:df:14:f6:71:a5:17:
f1:0e:9e:35:25:c2:59:f1:e7:b8:3b:05:04:94:7c:2c:32:d4:
6f:7c:a9:ae:b4:20:7c:98:43:8e:fa:65:9b:24:8d:b8:df:ce:
b9:bc:f8:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fPGSHTfjhdBFE5ouBDF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNGFiOTY4ODQyNzA3M2ZmN2UxNzlkZTVhZjAwMmUwOWYy
MzYwMTMwHhcNMjUxMDE5MDgwMTMzWhcNMjUxMDIwMDgwMTMzWjAzMTEwLwYDVQQD
EyhhMTc3MWM5NDNlOTUwN2NmZGUxODFhYzU5OGQ2ODNhMzJiOTMwZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7W0oY2R+0Sg4p4TyuD8mPRf/3lxt
asb/T6xn+nfwAbC07avBBG+riE1YlqWyIItlBb7AoIg5ZyMUqdcnqwuIgo/kEP16
U82BbRuhkmjWirDz4bXBUmmoTSiyHCzQls0RM583q3pBDeBLlOBXgHYfAIODCiEc
xfgL0zFZO/RZMz7glBXqA4zNWa9vYqW5tXdbPvnGQDwE+QRkO/qiv2E8vN2isrDO
i/3NcGexQyBAWCsszDs2tdlGfS1/uaq9Rshc1MnCnjh40AZ2p4h44pLD0zt3XgSK
7wJMvigTzlqv4JZL0j+pU/Ri/44cKjYZt5NMljMeBMZjd0AqC5DLld9ppQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF3HJQ+lQfP3hgaxZjWg6Mrkw1xMB8GA1UdIwQY
MBaAFHBKuWiEJwc/9+F53lrwAuCfI2ATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjIt
NDZhOGIxOTFhMzc0LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjItNDZhOGIxOTFhMzc0
LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyv73iam
rFbrqUOCRMwonl+T4SumqOmkvkcYPPzvPwgBZHGIwekSNPTAkYmkrTiqEenUrvGC
vri1XS3zURLQr9/Azsl6muwDGMzEp5QIZ50u3Uuwi1fVm7tQY5aeuWfezBaD4rdn
i6tgMGeQVN7a6Y/BWJy8mhhwsGcUXgtBf7dDJ2qQL2A6iOy2EwGia+swELDgbiaW
vDK7q4JW3KSA+NximXZqkcznOWmdUgkKFSZbuX/GXATpoGM1ojNL7CMBX2hlUecG
Gyyl5apKaWqDmoES3xT2caUX8Q6eNSXCWfHnuDsFBJR8LDLUb3yprrQgfJhDjvpl
mySNuN/Oubz42A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:49 2025 by rpki-client