
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: wQBgm0lzSxMJRsSPbY8npPnzMtSiKxn3nrO8nw9Zkgg=
Subject key identifier: 05:FB:60:06:50:A8:69:E9:22:99:C9:73:29:25:DE:CE:13:B1:EE:18
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 0198D5F16F4CF5CBE9DE75F5B75C533F765A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 15B1
Signing time: Sat 23 Aug 2025 08:00:26 +0000
Manifest this update: Sat 23 Aug 2025 08:00:26 +0000
Manifest next update: Sun 24 Aug 2025 08:00:26 +0000
Files and hashes: 1: I_-FRfZa9GeQgym8xYKEVr-rfgA.roa (hash: AmRbI2XP8GOvp3frMOHSnlH48LSP6GLhPNS9PY26J8Y=)
2: Uex3x3CWB9WPAXdRNKBIFJzJsn0.roa (hash: 2qFFx/ZZv0i+OiRQdPCciM9T0PW45kAKmFf1AT14lvA=)
3: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: E1qPgHq+8/tDsIjx+05/7IRGl8PyxtcmYzW9qSMjA3w=)
4: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6f:4c:f5:cb:e9:de:75:f5:b7:5c:53:3f:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Aug 23 08:00:26 2025 GMT
Not After : Aug 24 08:00:26 2025 GMT
Subject: CN=05fb600650a869e92299c9732925dece13b1ee18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:0f:45:e2:7c:2f:87:e5:fb:ac:3e:e0:1c:
00:18:b9:3d:1b:58:6c:86:76:b4:34:82:eb:7c:38:
26:c4:2e:2b:ef:65:67:3b:8e:3d:e4:b8:ec:55:53:
88:2e:49:41:e6:06:97:d3:6d:62:32:2f:ce:4b:c7:
e7:38:92:f2:bc:af:86:37:78:42:6c:6d:ea:e8:93:
c5:5b:68:d3:bc:53:d7:20:f5:1d:60:df:e8:c6:fe:
84:14:9a:1f:b8:d5:c7:3e:5e:1a:7d:97:ea:a3:1c:
1f:7e:eb:48:83:88:a5:93:0f:57:da:96:01:08:ad:
e5:c5:65:d9:e1:17:04:72:06:66:56:32:8a:41:df:
46:43:39:74:c3:2f:34:0d:27:99:fe:9a:cc:93:b6:
d4:12:23:0e:32:d4:3c:ee:03:fc:60:ce:ab:b3:9e:
ee:69:ee:56:64:8c:34:37:27:da:42:99:db:f2:2c:
9d:b0:c7:d1:bf:b9:89:05:1b:fb:67:11:58:f7:d1:
dc:1c:df:39:79:51:12:a5:fb:d4:c1:3b:76:9f:9e:
89:18:b3:9b:05:8b:e1:9e:e7:10:c7:94:01:01:9b:
29:92:9a:b3:fc:93:22:a5:01:73:c7:99:7e:2d:16:
66:b9:59:8c:e9:66:6e:ca:40:6d:25:81:fd:92:58:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FB:60:06:50:A8:69:E9:22:99:C9:73:29:25:DE:CE:13:B1:EE:18
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:85:c4:52:1d:0d:fb:d7:18:a0:7f:56:29:52:47:09:e0:aa:
12:b6:ac:7d:f5:b5:e0:a7:dd:a2:30:c2:b2:ad:89:0f:a2:7f:
c7:31:97:31:64:0f:cb:22:b2:34:08:45:76:0b:d8:86:b3:33:
c6:d5:d5:8c:2f:9f:91:f9:ba:6e:50:6d:98:92:55:91:f5:e8:
43:0c:4a:6f:80:f5:10:94:e4:cb:8c:de:8a:3d:2e:45:9a:a6:
3a:96:f4:40:a8:7e:ba:a3:9e:6a:e3:45:b4:3b:f4:2a:34:dd:
84:9b:55:99:e9:22:10:1d:67:2b:cf:21:e5:a7:39:7c:2d:b6:
af:e3:f9:12:d5:67:c8:9e:8b:af:0a:39:a9:45:8c:42:eb:6b:
f1:22:ef:fc:5c:70:4f:63:f7:03:5c:12:13:11:fe:da:d3:64:
70:33:d8:68:46:42:40:ed:b2:9f:b0:3d:ec:7d:1a:df:90:b6:
c5:38:a4:49:2d:4b:77:97:07:ba:ec:8d:7d:a0:74:8b:de:60:
78:cb:68:e8:b6:6f:74:f9:62:b9:3f:79:9e:93:42:d4:fc:50:
de:4e:e8:e8:a9:09:1e:58:f4:1e:02:d3:d5:db:07:e5:6e:99:
3c:b7:e9:a5:8e:ef:ff:99:1f:1c:e5:92:b4:eb:12:55:f7:b8:
fc:55:e5:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8W9M9cvp3nX1t1xTP3ZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2ExYTVjZmY1MmViZTJmMjJiNjY5ZGNjMmM5MDI3Y2Vh
MGI4MWMwHhcNMjUwODIzMDgwMDI2WhcNMjUwODI0MDgwMDI2WjAzMTEwLwYDVQQD
EygwNWZiNjAwNjUwYTg2OWU5MjI5OWM5NzMyOTI1ZGVjZTEzYjFlZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7sPReJ8L4fl+6w+4BwAGLk9G1hs
hna0NILrfDgmxC4r72VnO4495LjsVVOILklB5gaX021iMi/OS8fnOJLyvK+GN3hC
bG3q6JPFW2jTvFPXIPUdYN/oxv6EFJofuNXHPl4afZfqoxwffutIg4ilkw9X2pYB
CK3lxWXZ4RcEcgZmVjKKQd9GQzl0wy80DSeZ/prMk7bUEiMOMtQ87gP8YM6rs57u
ae5WZIw0NyfaQpnb8iydsMfRv7mJBRv7ZxFY99HcHN85eVESpfvUwTt2n56JGLOb
BYvhnucQx5QBAZspkpqz/JMipQFzx5l+LRZmuVmM6WZuykBtJYH9klhTrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAX7YAZQqGnpIpnJcykl3s4Tse4YMB8GA1UdIwQY
MBaAFHLKGlz/Uuvi8itmncwskCfOoLgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xMmFjMGUtNTQ3NC00NWQ1LThkZWYt
NmE0MTRmMTg0NzA2LzEvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xMmFjMGUtNTQ3NC00NWQ1LThkZWYtNmE0MTRmMTg0NzA2
LzEvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIXEUh0N
+9cYoH9WKVJHCeCqErasffW14KfdojDCsq2JD6J/xzGXMWQPyyKyNAhFdgvYhrMz
xtXVjC+fkfm6blBtmJJVkfXoQwxKb4D1EJTky4zeij0uRZqmOpb0QKh+uqOeauNF
tDv0KjTdhJtVmekiEB1nK88h5ac5fC22r+P5EtVnyJ6Lrwo5qUWMQutr8SLv/Fxw
T2P3A1wSExH+2tNkcDPYaEZCQO2yn7A97H0a35C2xTikSS1Ld5cHuuyNfaB0i95g
eMto6LZvdPliuT95npNC1PxQ3k7o6KkJHlj0HgLT1dsH5W6ZPLfppY7v/5kfHOWS
tOsSVfe4/FXl0g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:26 2025 by rpki-client