
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: XKFqq0Fs2yfRuQKXQFX/gELqXsTYNMC8AYCt+epqNHI=
Subject key identifier: 58:4A:E5:93:F4:0A:31:F0:50:08:77:2D:F5:BD:0E:3B:6A:97:ED:FC
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 0199FC8F8DE00F843F4B848C4CAF472D6977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: uxpwokn95g1FRmJOQmGi0bhUtRFiI746vauACOhZV3Q=)
2: lmn9m784OLvYNEmoODCEhtK7M6Y.roa (hash: SMHhc3f9U107wkgd7T3SBk2Npa8W1MMzuYgHU/NZOn8=)
3: thiVarAMBeEnqBDpZfGbu3w4ANA.roa (hash: dysQvxWNncFFefbso/9XEjKk2c3ldxSqvGZG35iip3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8d:e0:0f:84:3f:4b:84:8c:4c:af:47:2d:69:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=584ae593f40a31f05008772df5bd0e3b6a97edfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:03:49:6a:95:72:e9:e6:9e:7a:0f:c1:9a:
fc:83:c0:a0:a0:e2:6d:eb:52:ef:4c:50:3e:cb:44:
9a:01:63:69:50:1e:75:ce:ec:84:ec:10:a1:dc:d2:
28:40:42:52:18:e9:e6:1b:72:eb:90:68:75:b9:18:
5b:65:94:e6:4a:f7:05:7b:26:5d:9a:e0:53:eb:0e:
38:ce:1a:99:77:3b:b8:b9:72:66:e3:a5:87:24:7a:
e0:18:11:55:a0:3f:d4:33:33:9f:6c:fb:a6:37:74:
3e:8b:73:dc:82:a7:7b:2d:58:f4:63:e0:09:0b:1f:
7e:56:fd:e0:f5:e0:e7:67:9f:de:ae:c4:a2:8f:a5:
a8:b4:56:65:23:97:9c:97:e2:68:91:dd:8f:a7:b5:
fa:77:8d:60:e6:cd:8f:40:a5:50:e6:86:b6:b0:ed:
ff:c7:8e:e3:4f:de:55:53:73:1d:03:84:26:96:aa:
a7:91:86:93:b4:49:a0:8e:1e:bb:ca:79:c6:6b:af:
d3:16:47:6d:b4:1f:a0:aa:64:79:b3:33:65:2e:33:
88:fd:36:5d:f0:c6:e8:aa:3e:6d:e8:f7:28:6f:d0:
23:75:c2:08:d0:75:3a:70:61:6b:8e:34:cb:cc:ce:
11:df:2b:d0:11:b6:ad:f7:91:37:02:8b:47:4f:16:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4A:E5:93:F4:0A:31:F0:50:08:77:2D:F5:BD:0E:3B:6A:97:ED:FC
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6c:be:5c:f7:1c:7d:5e:6c:ae:1a:af:98:bb:4f:1a:e3:e8:
50:a0:af:89:fe:53:be:60:22:2f:33:2c:e0:4c:aa:72:9c:e6:
38:7c:07:f0:8e:17:71:3d:71:7c:d8:fc:50:ff:b2:cb:17:1a:
fb:f0:d8:a6:98:36:b5:f4:99:5a:72:c2:91:45:ec:be:9e:30:
a1:99:1f:17:51:82:0a:d6:6e:16:06:a8:ad:ef:60:e8:bc:24:
ac:54:a7:c9:df:d4:bf:dd:c3:72:b8:77:4c:5f:11:97:6d:3d:
fa:06:12:a4:e2:1c:f2:67:a5:d8:57:b6:9b:b9:11:b6:fe:17:
b6:fa:c5:e9:a3:d4:c1:19:e9:6f:3d:fe:ea:bc:84:b9:04:dd:
b8:5e:e2:ea:8b:1c:19:94:64:0f:1e:82:f4:e1:c1:2b:c1:0e:
12:51:1b:40:10:89:a7:de:a9:40:ec:5d:ef:94:36:16:b5:d7:
cd:68:60:a8:c9:1f:d7:8f:eb:6d:3e:c5:79:3b:62:fb:1e:dc:
70:ac:cc:bb:b2:a2:5b:ea:ad:10:b8:25:59:5a:3a:2e:25:9c:
b8:33:65:57:bb:28:af:a0:5e:6a:60:ff:44:e7:37:b1:68:db:
26:b8:61:14:e5:88:cb:cb:ab:29:2f:71:6d:cb:8b:55:7f:80:
57:0e:5f:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j43gD4Q/S4SMTK9HLWl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjQ3NTM5ZjE5ZjBmNWExM2IwYjY5YmM3OTYyNzhmMGJm
NGFlYTQwHhcNMjUxMDE5MTMwMTMwWhcNMjUxMDIwMTMwMTMwWjAzMTEwLwYDVQQD
Eyg1ODRhZTU5M2Y0MGEzMWYwNTAwODc3MmRmNWJkMGUzYjZhOTdlZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY4DSWqVcunmnnoPwZr8g8CgoOJt
61LvTFA+y0SaAWNpUB51zuyE7BCh3NIoQEJSGOnmG3LrkGh1uRhbZZTmSvcFeyZd
muBT6w44zhqZdzu4uXJm46WHJHrgGBFVoD/UMzOfbPumN3Q+i3Pcgqd7LVj0Y+AJ
Cx9+Vv3g9eDnZ5/ersSij6WotFZlI5ecl+Jokd2Pp7X6d41g5s2PQKVQ5oa2sO3/
x47jT95VU3MdA4QmlqqnkYaTtEmgjh67ynnGa6/TFkdttB+gqmR5szNlLjOI/TZd
8Mboqj5t6Pcob9AjdcII0HU6cGFrjjTLzM4R3yvQEbat95E3AotHTxZAfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhK5ZP0CjHwUAh3LfW9Djtql+38MB8GA1UdIwQY
MBaAFHL0dTnxnw9aE7C2m8eWJ48L9K6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMt
MmVhNmVjMjg1YTE1LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMtMmVhNmVjMjg1YTE1
LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWy+XPcc
fV5srhqvmLtPGuPoUKCvif5TvmAiLzMs4EyqcpzmOHwH8I4XcT1xfNj8UP+yyxca
+/DYppg2tfSZWnLCkUXsvp4woZkfF1GCCtZuFgaore9g6LwkrFSnyd/Uv93Dcrh3
TF8Rl209+gYSpOIc8mel2Fe2m7kRtv4XtvrF6aPUwRnpbz3+6ryEuQTduF7i6osc
GZRkDx6C9OHBK8EOElEbQBCJp96pQOxd75Q2FrXXzWhgqMkf14/rbT7FeTti+x7c
cKzMu7KiW+qtELglWVo6LiWcuDNlV7sor6BeamD/ROc3sWjbJrhhFOWIy8urKS9x
bcuLVX+AVw5f2g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:12 2025 by rpki-client