Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
File: cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft (raw, json)
Hash identifier: okiZCms8NFQLQ+tUyusOhBXDs3ggCRHd/oiB3vvPkSA=
Subject key identifier: 81:91:DE:77:53:86:EE:75:D5:23:F9:58:2E:6B:1E:AA:55:EF:36:08
Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
Certificate issuer: /CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Certificate serial: 0199FC8F815F60ABF755DF1287198B98CFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: 8Tphwf2TdCn6_ko-jZ8YIaCMG4Y.roa (hash: EBGUP9Onjc28Spxu+Bc1P0vLX2s/3Esh3HDfGA5b/yg=)
2: TegEFm13uYuDaVYWPUq_NWyfFhw.roa (hash: Z0NpRN8gnuSXynuy4afFeS+fqs/16nspEy2hNFbDueU=)
3: cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl (hash: x4rY02Wlnhbu6dFQ7e6iFqfcICZJfsMbPJsKbUgsB5o=)
4: fNW98zG8YgdTIxQopzVptDv3vEA.roa (hash: oH5A9HkaHxcIBBsSALBiEtsRJXsDnYZkpZH6oV0XeF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:81:5f:60:ab:f7:55:df:12:87:19:8b:98:cf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=8191de775386ee75d523f9582e6b1eaa55ef3608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:b9:f3:8f:6b:c2:6c:a7:97:e3:d6:b8:00:
93:2a:70:7b:d1:38:9c:27:4f:ef:e2:45:c4:e4:30:
4f:e1:53:8b:56:f7:7e:07:be:1f:44:6f:20:62:20:
ae:c8:77:92:86:e9:0d:85:64:e9:25:b7:88:98:2b:
79:15:ea:9c:2e:e2:ef:cc:54:78:3d:2b:e1:bb:04:
bc:d8:f6:55:55:b0:3c:4d:27:49:ce:2f:0d:a6:00:
17:be:97:59:53:fc:50:33:85:f1:f4:11:f5:ea:a6:
69:fa:41:d0:68:da:14:f2:5c:3c:e8:bf:d7:c0:1a:
14:46:90:e7:6a:63:3f:ee:00:5c:46:95:50:c6:a5:
ca:dc:fd:7f:61:da:3f:cc:62:bd:a7:25:e5:4b:c5:
01:18:f6:ba:51:52:9f:95:66:24:2e:44:4e:86:ca:
f4:a0:48:74:54:09:cc:d4:73:60:b8:eb:d7:c1:d8:
5e:3d:ec:bc:51:8c:6d:4b:5b:59:3f:1d:1a:19:d9:
4b:d2:b3:0c:23:2b:0c:5a:5f:4e:14:ef:9e:0b:1a:
84:76:f2:4e:c2:17:bc:d3:f2:8d:49:4f:7d:f0:0f:
00:7b:0e:72:bd:a0:4c:71:88:62:05:56:36:f4:5c:
af:cd:42:2b:e4:c2:8d:8a:a2:e2:b5:dd:18:ec:a2:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:DE:77:53:86:EE:75:D5:23:F9:58:2E:6B:1E:AA:55:EF:36:08
X509v3 Authority Key Identifier:
keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:ac:b9:69:fa:47:4a:80:5c:23:93:5c:de:b3:65:87:db:63:
24:37:bb:95:16:ed:9a:4f:42:40:ff:f4:ee:07:61:4e:e8:ad:
32:ee:7a:46:e2:4f:f9:97:64:27:3c:2f:e5:3a:56:f3:6d:74:
45:b2:8d:91:9d:44:ca:dc:b9:70:60:c1:da:4d:43:67:f1:de:
81:3f:9d:ec:67:1c:c3:97:7f:52:23:c1:5b:5f:5f:4f:30:0e:
f1:1a:4c:74:b0:fb:71:c8:4d:00:3a:08:76:37:ed:af:99:26:
d5:a8:35:f2:44:fb:ac:34:fd:50:13:69:b9:18:fb:2c:75:40:
53:6f:ed:a0:8f:85:d6:44:19:3b:82:ec:04:62:89:44:0a:31:
4a:eb:02:29:4b:f1:7f:65:d7:77:4b:9d:0c:c9:62:4f:78:47:
44:bc:f5:0c:d5:8b:35:b3:d8:ac:c7:7f:41:ec:77:2a:58:64:
95:b6:d0:52:1c:9b:b7:c5:64:88:28:4a:ac:7c:59:87:0e:54:
44:a1:14:53:9c:6b:1b:85:ef:99:e7:88:65:6a:c5:f9:e3:e6:
7f:40:a3:2d:0a:2b:97:85:54:38:2e:5d:f6:cc:c1:cd:de:4b:
1e:10:15:59:ac:06:8b:0a:67:47:bd:c0:a7:dc:aa:6a:57:e2:
90:c1:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:17 2025 by rpki-client