Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
File: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft (raw, json)
Hash identifier: BadxiHjR4RWmPzD7hqnleiNhGh6m6opRml3tU/8vi0o=
Subject key identifier: 00:11:71:3A:1C:49:71:53:68:55:84:AE:C0:50:F5:68:71:04:0C:70
Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
Certificate issuer: /CN=72e6826c8628489db041fe78c09ef28b5421e45c
Certificate serial: 019A0035C6EE13E0F1FE4DB8E6F46B893045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 06:01:55 +0000
Manifest this update: Mon 20 Oct 2025 06:01:55 +0000
Manifest next update: Tue 21 Oct 2025 06:01:55 +0000
Files and hashes: 1: 7Zrn_XBWju-Og5hlhKowGwl2kf8.roa (hash: CHg97u7b8WBMpcTvfGndNn9XQr55QZ9IWb+Xsbuljto=)
2: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl (hash: 1/g9un81cKNu2G55TKH8UTC+89xGVUleRxwLLNu1TB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c6:ee:13:e0:f1:fe:4d:b8:e6:f4:6b:89:30:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c
Validity
Not Before: Oct 20 06:01:55 2025 GMT
Not After : Oct 21 06:01:55 2025 GMT
Subject: CN=0011713a1c497153685584aec050f56871040c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:cc:b2:70:6a:76:2a:5e:de:8a:4f:1e:6e:
6c:1d:91:b0:f0:bf:d1:09:c2:fd:f7:2d:7d:f3:34:
4d:03:9c:ec:55:53:bd:13:49:db:86:e7:08:6c:3f:
f8:61:b6:69:05:eb:92:fd:05:c8:d7:93:e1:ec:03:
a2:23:6a:46:53:2f:9f:d0:d7:e1:ab:7b:a2:44:28:
1b:c4:97:a2:07:60:e3:c1:de:fc:09:e3:eb:ff:f5:
02:61:43:ca:05:cb:dc:e1:f6:b4:ae:a6:04:3f:f4:
17:ff:d9:14:a3:4b:77:96:b9:96:d9:e8:91:5d:0a:
75:21:f1:9b:46:51:20:01:87:15:4c:99:44:05:8f:
88:fe:50:64:95:f8:dd:7e:9e:0c:fc:73:07:9a:a8:
d8:e5:41:95:93:3f:e5:01:7c:6d:dd:68:3d:a2:7e:
e2:e5:f6:51:3e:be:8f:14:85:12:9a:0a:4a:83:21:
de:e3:45:f5:60:52:6c:bd:36:90:1e:a9:e6:68:eb:
2a:dd:ba:b3:f1:a1:0d:57:c4:84:28:51:23:1c:82:
2f:c3:f2:47:3f:b8:4e:8a:84:ef:55:23:ef:52:f8:
bd:57:10:f0:a8:1e:7b:17:d4:6b:36:52:aa:e4:f8:
87:c5:0a:a7:92:63:b2:37:2a:e7:8c:21:ee:d9:6c:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:11:71:3A:1C:49:71:53:68:55:84:AE:C0:50:F5:68:71:04:0C:70
X509v3 Authority Key Identifier:
keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:61:61:89:ff:eb:82:46:db:c5:8b:6d:47:bf:b9:fc:ee:9e:
53:50:47:3b:b2:24:01:cf:94:28:c5:d0:5c:af:d1:2a:61:76:
fd:6f:d1:4f:28:78:c3:81:94:c9:e2:43:e9:ba:9c:0b:63:ac:
8e:de:02:43:ff:9e:58:75:1b:c9:62:87:76:b1:4d:40:8b:0a:
54:f7:da:98:4c:76:f7:79:8f:87:1f:f5:cb:6e:61:f0:17:17:
6e:10:75:60:a8:81:50:d3:24:97:58:15:e7:b1:3d:89:70:ee:
a0:ca:66:d8:d6:9b:da:3c:a5:9b:32:6e:f4:30:b1:43:fb:de:
f0:22:0e:a5:25:c4:ed:f0:36:97:d2:bd:d2:ad:a2:7a:4d:a8:
d2:42:c1:c5:93:a4:6a:60:f2:fc:47:fe:c1:a2:b4:65:2e:93:
66:3e:72:b9:c5:b3:26:a1:31:f7:db:d0:0a:5a:38:02:6d:70:
1d:30:07:63:66:b7:f8:26:fd:bd:ea:66:b9:65:c5:ee:22:d2:
b0:1a:67:ed:4d:c3:bf:64:ba:bf:e7:c1:9f:5f:19:d1:56:7e:
8b:82:ca:99:22:f8:a7:18:47:ff:27:56:2e:34:8b:0a:7c:ec:
29:46:68:e0:c1:61:a0:f4:a4:27:37:da:da:69:1f:4d:26:a4:
95:36:bf:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANcbuE+Dx/k245vRriTBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTY4MjZjODYyODQ4OWRiMDQxZmU3OGMwOWVmMjhiNTQy
MWU0NWMwHhcNMjUxMDIwMDYwMTU1WhcNMjUxMDIxMDYwMTU1WjAzMTEwLwYDVQQD
EygwMDExNzEzYTFjNDk3MTUzNjg1NTg0YWVjMDUwZjU2ODcxMDQwYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYzMsnBqdipe3opPHm5sHZGw8L/R
CcL99y198zRNA5zsVVO9E0nbhucIbD/4YbZpBeuS/QXI15Ph7AOiI2pGUy+f0Nfh
q3uiRCgbxJeiB2Djwd78CePr//UCYUPKBcvc4fa0rqYEP/QX/9kUo0t3lrmW2eiR
XQp1IfGbRlEgAYcVTJlEBY+I/lBklfjdfp4M/HMHmqjY5UGVkz/lAXxt3Wg9on7i
5fZRPr6PFIUSmgpKgyHe40X1YFJsvTaQHqnmaOsq3bqz8aENV8SEKFEjHIIvw/JH
P7hOioTvVSPvUvi9VxDwqB57F9RrNlKq5PiHxQqnkmOyNyrnjCHu2WxGyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAARcTocSXFTaFWErsBQ9WhxBAxwMB8GA1UdIwQY
MBaAFHLmgmyGKEidsEH+eMCe8otUIeRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEt
OTc1YWQwM2Q4OGU2LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEtOTc1YWQwM2Q4OGU2
LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2Fhif/r
gkbbxYttR7+5/O6eU1BHO7IkAc+UKMXQXK/RKmF2/W/RTyh4w4GUyeJD6bqcC2Os
jt4CQ/+eWHUbyWKHdrFNQIsKVPfamEx293mPhx/1y25h8BcXbhB1YKiBUNMkl1gV
57E9iXDuoMpm2Nab2jylmzJu9DCxQ/ve8CIOpSXE7fA2l9K90q2iek2o0kLBxZOk
amDy/Ef+waK0ZS6TZj5yucWzJqEx99vQClo4Am1wHTAHY2a3+Cb9vepmuWXF7iLS
sBpn7U3Dv2S6v+fBn18Z0VZ+i4LKmSL4pxhH/ydWLjSLCnzsKUZo4MFhoPSkJzfa
2mkfTSaklTa/bw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:47 2025 by rpki-client