Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: BEidcXLqV+BCVpii9+kSdZCraLHtyMlGvQyLpqaH4vk=
Subject key identifier: 8A:7A:8E:BD:CB:70:4C:1A:74:57:C1:A0:3A:A6:BB:F0:AE:9D:0B:8D
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 0199FAD7FBB716A8327063FF17B7BADE4A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:22 +0000
Manifest this update: Sun 19 Oct 2025 05:01:22 +0000
Manifest next update: Mon 20 Oct 2025 05:01:22 +0000
Files and hashes: 1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=)
2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: SECylzw0G0LJXmMQv6Hazi3pVInJfMaPg0yTH7DlKLw=)
3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:fb:b7:16:a8:32:70:63:ff:17:b7:ba:de:4a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Oct 19 05:01:22 2025 GMT
Not After : Oct 20 05:01:22 2025 GMT
Subject: CN=8a7a8ebdcb704c1a7457c1a03aa6bbf0ae9d0b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:a0:10:fe:dc:83:34:99:ff:c7:cd:4a:b4:
d1:68:5e:88:c8:01:e1:b1:a3:22:1c:8b:5e:e2:04:
1a:1c:18:e3:30:de:3a:26:de:26:be:29:07:e1:d8:
1e:45:6f:25:86:c3:4b:79:11:40:49:fc:f0:c9:73:
16:13:ac:b2:4c:6e:10:ae:cb:aa:4d:2d:8f:d8:57:
9c:d4:47:1e:6a:92:93:32:f8:12:a7:87:05:38:3a:
eb:07:82:26:d2:fb:05:d1:0c:70:f4:fe:c0:99:b4:
74:2f:f9:8e:0b:65:8f:b9:3c:9d:22:d1:8d:2d:4e:
71:80:61:87:b4:14:05:50:0b:c2:14:22:3d:3a:1e:
7a:0c:52:6e:92:97:b1:12:3f:48:e4:d8:e9:9b:86:
10:4d:59:a9:8a:04:81:96:31:32:2c:6f:5b:44:0a:
93:3e:a9:7d:a4:1b:5f:17:67:4e:db:b2:99:91:16:
07:83:e5:ef:6e:1b:c3:99:27:83:db:0d:2a:c0:82:
0e:be:cd:3c:b8:bd:39:c7:33:14:f4:62:89:62:55:
3d:30:f1:64:44:66:1d:ee:6b:d9:0a:a2:06:a6:d9:
19:ff:5a:fd:c5:8f:56:34:09:d0:11:35:75:7d:c5:
26:ad:68:68:d4:6c:9f:b4:b2:43:2a:1d:46:94:e4:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7A:8E:BD:CB:70:4C:1A:74:57:C1:A0:3A:A6:BB:F0:AE:9D:0B:8D
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a3:f5:09:c8:4f:7b:2d:2e:dd:c4:7b:46:3b:9a:78:d2:50:
56:bc:da:79:89:72:6b:e8:c5:8a:37:2f:b5:e5:0c:17:87:5e:
c1:9f:e2:bf:95:b6:29:f3:b6:1e:00:58:39:f0:76:f9:8d:14:
a6:5a:67:91:6c:74:0b:0c:c4:64:15:e7:68:80:70:5d:04:f0:
64:c5:7e:1a:cb:9a:77:ae:d2:36:4d:3c:8b:29:8b:fb:8b:48:
18:d2:8f:ff:40:c4:72:6b:c2:9b:fd:c5:fb:1c:ac:a5:1b:07:
2e:db:e8:3e:e6:ee:e9:0e:5d:51:82:03:5d:3d:d5:62:8b:69:
f7:6c:60:4a:04:d7:d1:f6:ed:fd:59:de:09:bb:9c:4e:ee:51:
0b:07:ee:c3:9c:af:5d:c7:e9:bc:cf:1e:d3:df:75:7d:c6:9e:
ae:56:28:a2:b7:2b:c0:ad:3d:e9:e9:eb:7c:cb:fe:e2:cd:c6:
f8:81:ea:da:d8:a3:e1:38:61:98:23:64:c5:fe:3e:f1:32:ee:
aa:18:74:0c:03:b8:03:72:13:b5:bc:3a:4d:5e:4e:b4:25:22:
f5:e9:67:fa:51:c9:a6:3e:4e:d3:82:8b:aa:41:12:97:ca:4b:
31:59:2e:c4:04:41:23:0c:e3:0d:46:ef:c9:34:8d:17:c8:07:
c4:d7:95:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61/u3FqgycGP/F7e63kokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjI4MmU3NTEyODZmYmJlY2M3NWVhNmVkY2MyNTQxOTJj
NTVjNzYwHhcNMjUxMDE5MDUwMTIyWhcNMjUxMDIwMDUwMTIyWjAzMTEwLwYDVQQD
Eyg4YTdhOGViZGNiNzA0YzFhNzQ1N2MxYTAzYWE2YmJmMGFlOWQwYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEugEP7cgzSZ/8fNSrTRaF6IyAHh
saMiHIte4gQaHBjjMN46Jt4mvikH4dgeRW8lhsNLeRFASfzwyXMWE6yyTG4Qrsuq
TS2P2Fec1EceapKTMvgSp4cFODrrB4Im0vsF0Qxw9P7AmbR0L/mOC2WPuTydItGN
LU5xgGGHtBQFUAvCFCI9Oh56DFJukpexEj9I5Njpm4YQTVmpigSBljEyLG9bRAqT
Pql9pBtfF2dO27KZkRYHg+XvbhvDmSeD2w0qwIIOvs08uL05xzMU9GKJYlU9MPFk
RGYd7mvZCqIGptkZ/1r9xY9WNAnQETV1fcUmrWho1GyftLJDKh1GlORamwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIp6jr3LcEwadFfBoDqmu/CunQuNMB8GA1UdIwQY
MBaAFAhigudRKG+77Mdepu3MJUGSxVx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUt
NmIwNGFhZGVlZjEwLzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUtNmIwNGFhZGVlZjEw
LzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqP1CchP
ey0u3cR7RjuaeNJQVrzaeYlya+jFijcvteUMF4dewZ/iv5W2KfO2HgBYOfB2+Y0U
plpnkWx0CwzEZBXnaIBwXQTwZMV+Gsuad67SNk08iymL+4tIGNKP/0DEcmvCm/3F
+xyspRsHLtvoPubu6Q5dUYIDXT3VYotp92xgSgTX0fbt/VneCbucTu5RCwfuw5yv
XcfpvM8e0991fcaerlYoorcrwK096enrfMv+4s3G+IHq2tij4ThhmCNkxf4+8TLu
qhh0DAO4A3ITtbw6TV5OtCUi9eln+lHJpj5O04KLqkESl8pLMVkuxARBIwzjDUbv
yTSNF8gHxNeVOQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:40 2025 by rpki-client