Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json)
Hash identifier: ySf4lQiZc1mlPSD7odLcxQCIDoiUoN8YvL62w1QYsas=
Subject key identifier: 29:09:38:43:1C:E6:B6:E7:25:C0:75:0C:03:E7:2F:14:2D:A3:61:D5
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 0199FC8FB0D3EC1FC1A203E4092BB2680825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
Manifest number: 16F5
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: 39yOXWjYZyS68AzfLeyRW_eBtf4.roa (hash: Mz12/qdbJKM8FU8F8+Lk+lMxeg4aXuhF1UCiM+rDIsI=)
2: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (hash: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=)
3: PvXxIOTmhlDT8Zjl8pOjVtbUjqs.roa (hash: cEmlEEf5hdAMQxuyDOcKJwVECyiRzY+P8vKK1P563lo=)
4: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: HvzDmdy6Een5NiT3E0GH4C4NC8FFqwhpbecQGn17rdk=)
5: fUQV7hcWr8wDftL_A0d4dRPlV5Y.roa (hash: W1gOWwQgZ2lfD/yK9uLmMV4EF6iXlGj32IeijexRu80=)
6: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (hash: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=)
7: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (hash: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b0:d3:ec:1f:c1:a2:03:e4:09:2b:b2:68:08:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=290938431ce6b6e725c0750c03e72f142da361d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:4a:15:23:46:38:1a:90:2d:f3:a9:a7:ac:
2f:0d:8f:6b:2e:31:33:f1:f9:5c:4a:38:26:ad:e9:
16:e4:2d:79:ef:ee:ff:10:cc:ba:0c:54:7c:b9:fe:
4b:8b:99:99:ff:77:f4:0d:47:50:61:a5:0b:b0:6f:
40:00:e1:f2:08:69:e8:a3:d6:99:86:da:54:25:4a:
1c:57:0b:a0:a9:8e:b2:f0:73:cd:2c:e9:17:f3:9f:
a0:1c:78:5f:10:27:c9:a6:88:6c:50:23:ba:d8:e8:
8b:eb:69:f7:56:30:46:4f:0a:a4:70:17:75:ba:93:
62:87:e0:14:07:ce:33:4f:0f:e1:52:23:5d:d9:fc:
7b:22:d1:02:cc:92:45:92:ce:bb:ea:c1:92:5c:77:
d5:75:13:7c:75:a6:50:b7:c8:36:25:7d:38:25:d1:
4d:3f:2d:69:43:55:7a:11:65:4e:21:eb:47:c7:9c:
3a:96:aa:ff:56:71:20:e3:15:21:29:e4:47:3f:e4:
81:08:42:3e:90:8b:d6:bf:18:16:90:60:28:a7:d0:
0b:a1:f1:e9:b0:51:d8:31:91:d5:c9:b7:b4:1c:ed:
0e:fb:d4:3a:6e:57:9a:cc:aa:42:2e:7c:6c:58:7d:
b1:a2:a8:67:25:51:51:f8:a1:ff:23:a1:28:96:b9:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:09:38:43:1C:E6:B6:E7:25:C0:75:0C:03:E7:2F:14:2D:A3:61:D5
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:60:90:52:ed:cf:f7:c0:f1:cc:17:39:42:13:5c:a3:49:1a:
13:44:f4:26:aa:82:ae:75:81:91:e5:30:6c:74:ef:2e:16:df:
04:37:b4:7a:5a:76:71:9f:be:7a:c6:81:a4:7f:ca:12:12:79:
00:f4:13:b8:80:21:da:13:af:d1:d6:64:c3:1d:5f:8e:01:f0:
f5:62:a7:10:0d:e8:2a:93:0d:3b:57:bc:50:00:bf:71:2f:62:
65:80:b5:59:bc:e3:5e:ca:f3:37:37:25:2b:ad:b5:b7:e3:f9:
51:49:1f:42:86:3c:7e:80:b8:ef:91:a1:05:96:63:9b:1c:21:
13:3f:ad:b3:d3:88:1d:9a:45:63:36:02:30:65:05:54:cb:84:
d2:bf:34:f2:99:56:2b:76:9b:ec:aa:ca:35:87:53:02:75:37:
db:43:1c:90:e7:6e:b7:9e:b4:83:c2:75:7c:ae:61:cc:45:3e:
f4:29:ad:f6:b1:79:9d:a5:00:ab:a8:de:aa:bf:f0:77:cd:9b:
77:b0:b2:74:f8:10:39:f3:51:d0:89:a4:b9:54:93:43:f4:88:
1a:59:d4:60:22:a4:a9:c9:31:1c:ba:42:79:ce:4b:1e:b9:8c:
60:c5:90:5d:e2:d5:8a:3d:b0:4f:11:d4:bb:dd:cb:81:f7:43:
ab:e0:73:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j7DT7B/BogPkCSuyaAglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi
ODljMDcwHhcNMjUxMDE5MTMwMTM5WhcNMjUxMDIwMTMwMTM5WjAzMTEwLwYDVQQD
EygyOTA5Mzg0MzFjZTZiNmU3MjVjMDc1MGMwM2U3MmYxNDJkYTM2MWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHdKFSNGOBqQLfOpp6wvDY9rLjEz
8flcSjgmrekW5C157+7/EMy6DFR8uf5Li5mZ/3f0DUdQYaULsG9AAOHyCGnoo9aZ
htpUJUocVwugqY6y8HPNLOkX85+gHHhfECfJpohsUCO62OiL62n3VjBGTwqkcBd1
upNih+AUB84zTw/hUiNd2fx7ItECzJJFks676sGSXHfVdRN8daZQt8g2JX04JdFN
Py1pQ1V6EWVOIetHx5w6lqr/VnEg4xUhKeRHP+SBCEI+kIvWvxgWkGAop9ALofHp
sFHYMZHVybe0HO0O+9Q6bleazKpCLnxsWH2xoqhnJVFR+KH/I6EolrmURwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkJOEMc5rbnJcB1DAPnLxQto2HVMB8GA1UdIwQY
MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut
ZjI0MzVkNWNmMzdiLzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2UtZjI0MzVkNWNmMzdi
LzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWCQUu3P
98DxzBc5QhNco0kaE0T0JqqCrnWBkeUwbHTvLhbfBDe0elp2cZ++esaBpH/KEhJ5
APQTuIAh2hOv0dZkwx1fjgHw9WKnEA3oKpMNO1e8UAC/cS9iZYC1WbzjXsrzNzcl
K621t+P5UUkfQoY8foC475GhBZZjmxwhEz+ts9OIHZpFYzYCMGUFVMuE0r808plW
K3ab7KrKNYdTAnU320MckOdut560g8J1fK5hzEU+9Cmt9rF5naUAq6jeqr/wd82b
d7CydPgQOfNR0ImkuVSTQ/SIGlnUYCKkqckxHLpCec5LHrmMYMWQXeLVij2wTxHU
u93LgfdDq+Bz6A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:02 2025 by rpki-client