Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: lcecGso6mp+NLyDNfW/kelVJHDyMXuLpqxvQ7dv4wmw=
Subject key identifier: CB:75:7C:47:B1:C9:3C:E9:B6:5C:7B:73:9C:C6:57:89:16:06:84:0A
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 0199FE105572C44A8B8DBC44EE71C13F09C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 20:01:47 +0000
Manifest this update: Sun 19 Oct 2025 20:01:47 +0000
Manifest next update: Mon 20 Oct 2025 20:01:47 +0000
Files and hashes: 1: VxhJQDKCdmlccpU7wsiJAEzzTtc.roa (hash: b9Rf82tWGBx56csRc2DtObsZNSgJoQBwhj0rE/YxDoo=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: Jh6nlK+hEnA2vjQeYBoR6bKVMWjH7lHaAUDSnUT8vJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:55:72:c4:4a:8b:8d:bc:44:ee:71:c1:3f:09:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Oct 19 20:01:47 2025 GMT
Not After : Oct 20 20:01:47 2025 GMT
Subject: CN=cb757c47b1c93ce9b65c7b739cc657891606840a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:9c:f4:14:1c:32:6c:61:f3:92:4e:53:1a:
cb:ae:fb:4d:db:61:bb:e9:85:58:ec:ae:a3:20:a7:
9c:9b:f4:f3:75:31:3e:82:9f:b0:b0:01:64:a3:a8:
70:4d:28:01:27:de:cc:02:f0:49:a6:16:00:88:8d:
99:61:06:da:6d:02:f8:26:a4:d9:33:61:7b:26:7e:
a1:99:52:28:f2:43:e4:55:c4:c6:12:4c:87:6a:a3:
15:6d:63:19:89:63:e9:89:7b:25:50:4b:5e:b8:72:
05:08:7e:9b:94:d8:5d:c8:0a:be:5b:cd:3a:7d:31:
93:f3:41:72:a9:28:44:fe:a0:8e:33:5d:6e:db:d2:
9e:9e:69:c4:a9:1b:ab:b3:9d:77:16:43:5a:6f:84:
db:0f:cf:c5:8c:de:01:2e:3d:3c:34:93:c6:ee:68:
ae:a2:c8:bd:ae:e1:9f:d1:7a:37:8e:be:b6:c2:3d:
94:3b:61:ae:88:e6:67:fb:e1:b1:cf:ed:d1:be:d4:
c1:a4:bb:68:82:1e:af:47:bb:0e:03:b3:35:ad:8f:
0d:41:3f:11:03:8c:a0:39:74:e8:c9:3d:1c:88:64:
a3:8b:10:79:8b:57:12:4e:12:07:ab:35:df:ba:81:
23:db:72:db:98:11:41:fe:70:52:ff:97:55:c0:a0:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:7C:47:B1:C9:3C:E9:B6:5C:7B:73:9C:C6:57:89:16:06:84:0A
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ff:6e:57:d0:07:7b:c0:e1:ed:75:29:26:6a:58:31:68:cd:
f9:2b:8f:a4:68:34:e3:bf:b4:b2:8c:64:59:78:43:8c:97:82:
fe:ca:cb:7b:24:9a:06:08:f0:61:26:18:e6:2e:48:8c:98:71:
28:71:b1:ff:2e:59:02:5d:3a:7c:ad:b5:06:a2:6f:25:5a:36:
7d:98:0a:51:a1:5c:c9:43:30:eb:a8:c7:d9:0b:93:e2:a3:d3:
ba:e5:88:1f:c5:48:15:35:3e:06:91:4d:00:ae:e1:b8:00:9c:
1f:d7:20:9b:eb:67:4c:40:01:03:2f:5f:9c:c0:15:4d:a9:d0:
c9:07:77:09:6c:70:7d:88:06:01:19:0c:ed:63:c9:a7:4f:12:
41:76:90:c0:f8:45:4c:da:9b:bc:31:48:86:67:f6:64:49:d6:
da:20:7d:9d:1f:74:c2:52:3f:0b:2f:c4:8f:d2:c9:42:cd:59:
d7:f6:a1:d5:81:1f:7c:a1:62:74:2c:52:36:bd:fe:ff:8a:a0:
fc:04:d3:35:6a:05:58:f8:2c:61:65:d2:ad:8a:e0:56:f1:2c:
27:32:71:d3:9e:d4:cb:e5:2c:dd:43:55:15:da:c0:13:91:23:
a9:8c:6f:10:a2:a7:82:8c:44:d6:0f:07:ab:f1:9a:3f:6b:fc:
ec:37:fd:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EFVyxEqLjbxE7nHBPwnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2
ZjA4YzIwHhcNMjUxMDE5MjAwMTQ3WhcNMjUxMDIwMjAwMTQ3WjAzMTEwLwYDVQQD
EyhjYjc1N2M0N2IxYzkzY2U5YjY1YzdiNzM5Y2M2NTc4OTE2MDY4NDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zqc9BQcMmxh85JOUxrLrvtN22G7
6YVY7K6jIKecm/TzdTE+gp+wsAFko6hwTSgBJ97MAvBJphYAiI2ZYQbabQL4JqTZ
M2F7Jn6hmVIo8kPkVcTGEkyHaqMVbWMZiWPpiXslUEteuHIFCH6blNhdyAq+W806
fTGT80FyqShE/qCOM11u29KenmnEqRurs513FkNab4TbD8/FjN4BLj08NJPG7miu
osi9ruGf0Xo3jr62wj2UO2GuiOZn++Gxz+3RvtTBpLtogh6vR7sOA7M1rY8NQT8R
A4ygOXToyT0ciGSjixB5i1cSThIHqzXfuoEj23LbmBFB/nBS/5dVwKDJLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt1fEexyTzptlx7c5zGV4kWBoQKMB8GA1UdIwQY
MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt
YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3
LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArv9uV9AH
e8Dh7XUpJmpYMWjN+SuPpGg047+0soxkWXhDjJeC/srLeySaBgjwYSYY5i5IjJhx
KHGx/y5ZAl06fK21BqJvJVo2fZgKUaFcyUMw66jH2QuT4qPTuuWIH8VIFTU+BpFN
AK7huACcH9cgm+tnTEABAy9fnMAVTanQyQd3CWxwfYgGARkM7WPJp08SQXaQwPhF
TNqbvDFIhmf2ZEnW2iB9nR90wlI/Cy/Ej9LJQs1Z1/ah1YEffKFidCxSNr3+/4qg
/ATTNWoFWPgsYWXSrYrgVvEsJzJx057Uy+Us3UNVFdrAE5EjqYxvEKKngoxE1g8H
q/GaP2v87Df9iQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:07 2025 by rpki-client