Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: NxtBVLWJGO3xp+v3weytHDxeO0RBylHsyfX10O6qYfU=
Subject key identifier: BA:3B:D8:52:41:D0:73:FA:D0:36:6C:C9:D6:95:06:94:59:86:0F:C7
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 0199FB7C7F4E2D54E1138885288D92896547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: M3fOEClsXKvLtAnTcn5Su0j9iMg.roa (hash: E6qGvNO+V5ltNH3cwyFEtJdp+n857np9BM5la+TV5nM=)
2: bkHUy_sgghNYVbWsbVxAbLGezkg.roa (hash: yMeTm4bL37IzjPkhConJ8z6pYcZ3+b2hJFSO0Nigh2w=)
3: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: X2/xtcCPNL370wujFK3BEwz2jbOwZOLGamrFoeToZ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7f:4e:2d:54:e1:13:88:85:28:8d:92:89:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=ba3bd85241d073fad0366cc9d695069459860fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:a5:f1:a7:c8:65:cb:15:5c:a5:29:62:14:
e6:4c:d7:f6:86:eb:88:a7:ab:82:d5:fc:f4:da:e0:
ac:34:2f:00:68:06:df:6c:ae:12:d0:a3:75:c2:92:
b2:19:6d:d2:a3:37:f4:b5:7e:82:0f:c0:7d:18:83:
3b:3d:c3:88:e2:34:82:6b:e3:8b:7e:d7:81:23:9f:
cb:2f:a0:c4:c6:5b:23:e8:f3:96:f6:72:98:f1:58:
e0:06:ec:3c:88:1c:c8:d0:88:47:b0:3e:12:dd:c3:
ac:1a:39:02:93:f9:cc:6c:c0:36:f2:fd:a7:f0:79:
a9:f6:94:0c:60:55:ff:af:df:4e:68:31:e9:8e:85:
5c:56:8f:e5:d1:85:5b:07:af:f5:8f:02:4e:af:b4:
1f:c3:39:f8:f6:28:0b:02:04:33:5b:05:45:cf:e9:
96:50:38:df:a5:a0:72:94:51:bc:0b:a5:73:ba:e0:
6f:87:e5:f4:28:4a:43:fb:c1:ea:c8:14:98:ed:2e:
98:3c:73:bd:14:cf:9f:ee:e4:c7:3d:9b:8b:fe:5f:
33:44:35:3e:17:8d:da:7a:ec:62:ca:a7:5b:d8:fa:
07:59:8e:07:93:67:dc:d6:f0:da:8b:9f:0f:66:10:
23:72:ab:4f:67:6b:af:86:fb:bc:ce:b2:01:d3:d7:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3B:D8:52:41:D0:73:FA:D0:36:6C:C9:D6:95:06:94:59:86:0F:C7
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2f:02:33:3f:03:bb:00:ec:1d:1f:8d:c6:7b:85:72:02:31:
5d:e2:ce:11:ab:65:b8:bd:3e:13:2c:2a:95:8f:75:4f:73:60:
ac:7a:84:f5:a4:85:1c:28:88:07:3f:d1:04:18:e9:00:29:bb:
ef:46:e2:40:4f:d6:89:68:4e:83:41:34:ca:d3:d4:0c:1d:90:
33:8e:31:2c:56:48:85:d0:a1:5b:2d:9f:fb:f2:bb:0d:b5:5f:
da:50:c7:21:8f:a6:75:cc:e7:aa:c6:5e:c8:9b:b0:ff:3e:2b:
56:cd:e1:dc:9d:6a:58:0d:9c:d5:1c:43:fb:16:67:d6:e2:4b:
41:10:c0:3c:7b:d3:7b:bb:04:1c:83:6a:c2:f4:05:a5:0f:3f:
8e:bd:34:fd:73:b3:6d:c6:d5:75:47:b1:fd:b9:98:ab:12:70:
12:59:b3:b6:cb:e2:75:67:ae:8c:5f:10:a1:60:ad:80:28:84:
cb:74:55:67:9e:75:71:25:81:84:2c:75:df:84:f7:30:5a:5d:
98:40:71:bd:ed:4f:0c:2c:89:aa:ae:0e:64:60:71:51:52:ed:
46:65:e9:22:6d:ea:9a:35:f5:dc:93:2c:2b:95:93:fc:16:95:
15:9e:55:b1:c1:b9:02:31:97:4d:08:f5:b2:a1:85:a9:8d:e7:
17:a9:af:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fH9OLVThE4iFKI2SiWVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzY5ZDZlNGEwZmMyYzk4MDEzYjcyMmViMmJlYjllNmU4
NzFmYzYwHhcNMjUxMDE5MDgwMTA0WhcNMjUxMDIwMDgwMTA0WjAzMTEwLwYDVQQD
EyhiYTNiZDg1MjQxZDA3M2ZhZDAzNjZjYzlkNjk1MDY5NDU5ODYwZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXql8afIZcsVXKUpYhTmTNf2huuI
p6uC1fz02uCsNC8AaAbfbK4S0KN1wpKyGW3Sozf0tX6CD8B9GIM7PcOI4jSCa+OL
fteBI5/LL6DExlsj6POW9nKY8VjgBuw8iBzI0IhHsD4S3cOsGjkCk/nMbMA28v2n
8Hmp9pQMYFX/r99OaDHpjoVcVo/l0YVbB6/1jwJOr7Qfwzn49igLAgQzWwVFz+mW
UDjfpaBylFG8C6VzuuBvh+X0KEpD+8HqyBSY7S6YPHO9FM+f7uTHPZuL/l8zRDU+
F43aeuxiyqdb2PoHWY4Hk2fc1vDai58PZhAjcqtPZ2uvhvu8zrIB09dphQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLo72FJB0HP60DZsydaVBpRZhg/HMB8GA1UdIwQY
MBaAFHJ2nW5KD8LJgBO3Iusr655uhx/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGIt
NjkzM2E5MGM1M2ZhLzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGItNjkzM2E5MGM1M2Zh
LzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPy8CMz8D
uwDsHR+NxnuFcgIxXeLOEatluL0+EywqlY91T3NgrHqE9aSFHCiIBz/RBBjpACm7
70biQE/WiWhOg0E0ytPUDB2QM44xLFZIhdChWy2f+/K7DbVf2lDHIY+mdcznqsZe
yJuw/z4rVs3h3J1qWA2c1RxD+xZn1uJLQRDAPHvTe7sEHINqwvQFpQ8/jr00/XOz
bcbVdUex/bmYqxJwElmztsvidWeujF8QoWCtgCiEy3RVZ551cSWBhCx134T3MFpd
mEBxve1PDCyJqq4OZGBxUVLtRmXpIm3qmjX13JMsK5WT/BaVFZ5VscG5AjGXTQj1
sqGFqY3nF6mvew==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:52 2025 by rpki-client