Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: VsPlF6sycJKf3YCTRK+LnMK7ABaURqNZdxvRtRIKxuE=
Subject key identifier: 50:7D:62:21:F3:59:21:F3:D2:05:F1:0D:48:F2:AC:8E:73:A3:4E:B6
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 0199FCFD86CEF22A6AB8E8508578655524AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 13E9
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=)
2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=)
3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=)
4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=)
5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=)
6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: dg8L+Pm7kIA3IJTUUoqqd8SfeQHPrSj+5CnSOdRFwMc=)
7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=)
8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=)
9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:86:ce:f2:2a:6a:b8:e8:50:85:78:65:55:24:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=507d6221f35921f3d205f10d48f2ac8e73a34eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d1:cc:da:3d:75:54:58:aa:38:b6:e4:c5:c1:
52:81:a5:c3:24:53:08:aa:14:1c:7b:ef:f3:3d:dc:
f9:e1:5f:ec:81:a7:dc:b1:c7:ee:54:91:74:bf:8d:
89:7d:cb:48:26:f2:d9:e7:12:be:6f:0b:dd:f6:53:
9c:8f:93:ac:cf:3a:a7:f1:21:a4:be:af:4f:61:9c:
e5:cc:4d:7b:eb:44:ae:db:32:dc:6a:b0:9d:ad:99:
38:83:6f:59:78:25:2f:df:c9:1b:e3:ae:bd:5a:dc:
84:f2:57:81:1d:76:d0:f4:4b:01:ee:02:d6:f5:85:
24:ff:05:98:3d:da:4b:a7:06:1d:a9:e0:6d:9d:aa:
77:14:81:1a:f2:bf:f7:d1:7f:f4:0a:14:21:13:6d:
54:ae:61:87:9f:b1:e9:bf:33:fd:0c:e7:d7:c0:49:
56:8a:8e:cb:a3:95:98:9a:1a:c0:45:24:0c:65:d7:
df:15:3f:69:e0:bc:ff:92:bb:cf:d9:8a:e8:63:68:
d5:06:62:f6:d7:21:42:18:94:73:9e:8e:6c:bc:18:
27:e9:ba:d5:3f:43:01:5e:38:c2:e0:ea:43:be:cf:
5e:25:77:3c:b5:8d:cd:ac:0e:98:fc:2a:09:27:2e:
04:dd:a6:23:83:72:02:90:b3:82:59:00:3b:6e:9a:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:62:21:F3:59:21:F3:D2:05:F1:0D:48:F2:AC:8E:73:A3:4E:B6
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:11:c5:4a:38:eb:a0:ac:f3:24:69:7c:fd:f9:d0:9f:10:d5:
c6:2e:fc:46:7d:be:0f:33:a8:26:87:be:6d:ce:77:b1:13:94:
a9:cf:c5:e0:fd:74:31:11:67:15:0f:41:f1:43:e6:71:4c:af:
b8:26:ae:68:b3:e2:3f:fd:fa:df:a7:68:51:47:c0:37:3e:6d:
8b:c1:95:e7:ce:06:10:39:cd:1b:53:61:11:3e:ae:2e:f0:16:
bc:b5:06:50:7c:1e:1b:87:cb:c8:25:7d:4b:47:84:c7:cb:e7:
0e:e7:8c:6d:ac:4d:19:5a:b5:9f:32:48:07:e6:94:d3:66:87:
ae:57:ed:51:72:00:68:a9:68:dc:7c:73:59:90:28:84:c6:da:
c8:2c:4a:8d:b3:32:21:5a:55:fc:37:f8:12:31:0b:85:da:03:
5b:95:71:20:c7:ab:93:24:8d:0e:1e:a3:01:1d:ec:26:23:98:
1e:92:d6:b7:57:3b:a7:99:9f:61:32:d2:60:f8:eb:86:30:e4:
a3:b1:84:9b:9e:18:cb:2a:75:b9:e0:07:e6:82:19:ec:2f:ae:
46:2d:84:45:5e:2e:9a:c6:1c:16:60:1c:d9:7a:58:60:3a:41:
a1:04:e9:95:b5:e9:ab:fe:52:6f:da:56:79:c3:b3:d1:d9:6f:
bd:42:e5:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/YbO8ipquOhQhXhlVSSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1
ZDBmNTUwHhcNMjUxMDE5MTUwMTM3WhcNMjUxMDIwMTUwMTM3WjAzMTEwLwYDVQQD
Eyg1MDdkNjIyMWYzNTkyMWYzZDIwNWYxMGQ0OGYyYWM4ZTczYTM0ZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NHM2j11VFiqOLbkxcFSgaXDJFMI
qhQce+/zPdz54V/sgafcscfuVJF0v42JfctIJvLZ5xK+bwvd9lOcj5Oszzqn8SGk
vq9PYZzlzE1760Su2zLcarCdrZk4g29ZeCUv38kb4669WtyE8leBHXbQ9EsB7gLW
9YUk/wWYPdpLpwYdqeBtnap3FIEa8r/30X/0ChQhE21UrmGHn7HpvzP9DOfXwElW
io7Lo5WYmhrARSQMZdffFT9p4Lz/krvP2YroY2jVBmL21yFCGJRzno5svBgn6brV
P0MBXjjC4OpDvs9eJXc8tY3NrA6Y/CoJJy4E3aYjg3ICkLOCWQA7bpo4kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB9YiHzWSHz0gXxDUjyrI5zo062MB8GA1UdIwQY
MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt
YWI3OWEzNzg5ZjhmLzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm
LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRHFSjjr
oKzzJGl8/fnQnxDVxi78Rn2+DzOoJoe+bc53sROUqc/F4P10MRFnFQ9B8UPmcUyv
uCauaLPiP/3636doUUfANz5ti8GV584GEDnNG1NhET6uLvAWvLUGUHweG4fLyCV9
S0eEx8vnDueMbaxNGVq1nzJIB+aU02aHrlftUXIAaKlo3HxzWZAohMbayCxKjbMy
IVpV/Df4EjELhdoDW5VxIMerkySNDh6jAR3sJiOYHpLWt1c7p5mfYTLSYPjrhjDk
o7GEm54Yyyp1ueAH5oIZ7C+uRi2ERV4umsYcFmAc2XpYYDpBoQTplbXpq/5Sb9pW
ecOz0dlvvULl9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:05 2025 by rpki-client