Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: 4NxakgvzCMI1JiOaCphU0B9elA9om8PYP/pdc9xFTN4=
Subject key identifier: B8:DA:2A:45:BA:2E:85:15:32:4A:94:07:29:5D:1E:AF:D5:EE:3F:B0
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 0199FE102DB987B97447A4C2B61FD545AD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:37 +0000
Manifest this update: Sun 19 Oct 2025 20:01:37 +0000
Manifest next update: Mon 20 Oct 2025 20:01:37 +0000
Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: s9pjmsHVNp8NyRKwAi05GT8uGBwl2QWWEEOqvtsdPdY=)
3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2d:b9:87:b9:74:47:a4:c2:b6:1f:d5:45:ad:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Oct 19 20:01:37 2025 GMT
Not After : Oct 20 20:01:37 2025 GMT
Subject: CN=b8da2a45ba2e8515324a9407295d1eafd5ee3fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:ad:a2:78:c2:54:ff:0f:e8:13:61:c0:21:
20:67:0f:f6:80:eb:ce:bf:f8:06:6f:ee:1b:bf:d0:
aa:dc:63:20:3f:6d:7a:38:bb:3b:50:0e:33:0a:cd:
be:4b:5d:9f:c7:66:e1:39:dc:2a:db:46:6c:2c:ed:
20:cc:3e:67:31:39:9c:64:c4:8b:47:e3:99:11:50:
0f:ed:55:ed:16:29:bb:f9:6a:25:3d:b1:b6:6e:4c:
8f:ab:ac:80:77:92:92:de:f6:87:63:84:fc:e9:7c:
ed:e5:58:51:cf:cb:f1:9b:fd:cc:63:82:ca:42:08:
05:4b:52:e6:82:d4:e9:2f:07:94:98:a9:e5:97:0a:
54:90:f7:52:e9:05:9e:d9:9d:58:fb:6a:05:62:aa:
33:90:8a:dd:e2:0e:43:79:1a:08:e3:ea:88:d4:76:
1c:2f:8f:e4:91:cf:ef:47:c4:4a:07:5e:86:35:57:
7f:66:23:e0:7a:52:b4:bc:b0:a8:6a:19:59:c6:1e:
83:00:70:7d:7d:ea:7c:94:e4:87:6e:cb:d2:46:7a:
aa:40:90:4a:e3:3e:eb:6c:0b:47:82:11:51:9c:ec:
40:c9:a1:b2:0a:26:36:3e:e4:d1:a4:9a:54:63:79:
3b:fb:72:11:e4:ee:9a:65:19:7f:27:34:c1:ad:21:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DA:2A:45:BA:2E:85:15:32:4A:94:07:29:5D:1E:AF:D5:EE:3F:B0
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:63:47:0c:45:2a:2e:9b:30:ab:a0:0c:c6:1b:f1:8f:9b:4a:
cd:f2:c6:fd:c0:03:21:af:28:d7:31:2d:86:53:18:f5:2e:a5:
99:f0:b6:f3:dd:55:4c:00:9c:6e:5a:cd:c0:92:b4:e6:30:8e:
5b:02:a9:1e:c9:ac:c8:ad:88:32:b8:35:b8:23:09:99:ad:26:
5c:5d:38:ae:69:33:09:a4:1e:19:19:9a:22:af:03:60:30:4b:
97:b4:db:b6:a7:c6:f9:eb:cc:d5:d9:7f:b6:cf:f8:46:ca:93:
ed:15:5e:a6:fb:ba:18:b5:2a:df:83:55:fe:53:87:16:f9:5a:
e4:68:c7:88:e6:12:b5:0d:29:9a:4e:7c:a9:aa:91:65:be:aa:
f1:1a:6c:9e:61:cf:0f:40:03:2b:1e:04:ee:a8:a6:42:3a:41:
01:35:c0:8f:2a:dd:ad:e6:b7:3c:00:a7:b6:8f:3c:92:a1:ec:
e7:c1:18:8b:c9:ee:d4:c0:b8:90:16:52:bb:b2:87:30:2a:6a:
a7:8e:3a:18:a8:30:70:c7:f4:4c:70:9a:43:a1:48:4d:a0:5e:
32:5f:31:9e:73:ba:ea:d1:10:d4:f5:fc:87:e2:18:89:6f:0b:
bf:33:e1:d3:cd:9e:93:55:ff:b6:c3:67:d1:39:6a:6f:b5:cb:
e8:4f:18:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:56 2025 by rpki-client