
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
File: cIPC79QTNUG2RbZheEzd1JxInFs.mft (raw, json)
Hash identifier: kaARN6U5ZojGv42ZduUUnYrE+7IuZwJzihFPczzDJRA=
Subject key identifier: A3:8E:59:76:F4:A3:6A:EC:92:F1:9D:1A:3D:23:75:C1:93:BB:5F:78
Authority key identifier: 70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
Certificate issuer: /CN=7083c2efd4133541b645b661784cddd49c489c5b
Certificate serial: 0199FBEBB1BE7597B3A4E0256B433D9C745B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
Manifest number: 014F
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: WvOZemqg-ypHTTal2SMuUFTSuok.roa (hash: 2VHKeSfOF/+IIaH05goA5gK0Fp6ZUSiibX9gEoU9FvE=)
2: cIPC79QTNUG2RbZheEzd1JxInFs.crl (hash: Ta0YDRoFCqWNb3hlKd8fUdE9dDEt2DwKs2Ka6eViypE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b1:be:75:97:b3:a4:e0:25:6b:43:3d:9c:74:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7083c2efd4133541b645b661784cddd49c489c5b
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=a38e5976f4a36aec92f19d1a3d2375c193bb5f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:70:54:5e:fc:b7:36:57:d5:d3:a0:f3:42:
9e:90:52:21:28:a4:ff:6d:75:7e:b6:53:19:18:aa:
b8:e3:2b:a1:cb:38:db:85:4c:9e:49:2a:33:40:65:
63:30:8f:76:86:c1:af:9c:52:aa:2a:eb:ad:85:11:
d0:a3:e0:e6:f7:2b:95:52:f1:1c:00:dd:d2:c5:0d:
89:81:79:04:c2:41:a6:b1:71:54:9b:e7:4e:aa:d7:
c4:50:7a:98:c9:af:5a:85:68:35:13:1b:a1:be:72:
7c:3c:f8:cb:1e:2c:8a:06:3d:cd:be:23:88:db:f8:
e4:b5:15:b3:f0:a0:41:20:88:16:c9:ea:9c:2b:1f:
50:6a:4f:65:32:7c:50:36:57:e7:32:7a:64:70:58:
f0:7f:13:fc:e5:87:92:78:89:fe:ca:1d:a7:2a:8b:
41:90:85:f4:e7:29:d5:ef:4b:2f:b2:f9:d3:73:ed:
21:ef:ae:a1:1a:c2:8f:b0:00:01:81:ea:68:a0:8e:
61:05:27:54:0a:53:65:40:d3:33:59:07:3e:81:12:
98:00:78:c4:17:e9:0d:61:19:c0:3a:7d:21:39:4e:
e7:55:8d:1b:78:6b:26:5c:e3:0d:76:d1:44:f0:68:
f4:27:d3:d2:86:f6:b4:d6:ec:7a:39:66:7d:af:75:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8E:59:76:F4:A3:6A:EC:92:F1:9D:1A:3D:23:75:C1:93:BB:5F:78
X509v3 Authority Key Identifier:
keyid:70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:71:ef:fd:2d:63:eb:3a:11:84:1a:58:81:97:46:0f:32:3c:
87:24:c3:b0:97:73:6a:28:12:18:ab:3b:62:75:73:66:66:d6:
ec:ed:2a:7a:17:81:27:ea:66:87:45:de:e5:66:c3:5d:5e:8b:
67:fd:f8:ca:4f:71:e6:cf:a5:ad:e2:21:28:0c:b9:de:9f:46:
59:75:81:c3:bb:6a:5d:57:ec:8f:0e:79:18:86:41:12:47:59:
04:41:2f:ba:99:34:54:3c:bc:fa:89:12:f2:3a:e8:88:90:2d:
fb:43:a8:a3:59:a5:5f:62:79:da:a7:cc:ef:b3:da:6a:a9:21:
79:9d:5f:00:8c:ff:0e:95:b1:58:63:2c:57:28:24:82:1c:d8:
9b:f0:4e:a8:91:89:80:c0:8f:8f:74:c4:f3:94:90:a7:3f:62:
5b:c7:32:c4:5b:e6:7a:d5:24:f8:dd:65:40:44:c5:48:38:22:
5c:0c:d1:43:31:35:b3:38:2e:d6:57:75:83:6e:d7:f5:99:08:
d7:75:31:cf:14:a2:53:94:24:87:7b:ca:b9:ba:aa:2f:53:4c:
15:17:5e:ef:ba:bf:e5:e9:19:b4:10:f0:3e:8d:e1:a0:bf:2a:
95:7d:f0:97:e7:0f:ab:af:2f:81:b6:34:47:65:a4:91:33:7b:
5c:17:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:52 2025 by rpki-client