Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: p1cvDqssSD1mu6TK7uImv7TEcp++rTRV+n1PGOVSJW4=
Subject key identifier: 80:CC:2C:92:E2:1D:75:95:CB:17:A4:78:68:53:2E:EC:47:D3:0D:77
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 019A022317FEB093C6A93B1F58546FFADC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 15:00:45 +0000
Manifest this update: Mon 20 Oct 2025 15:00:45 +0000
Manifest next update: Tue 21 Oct 2025 15:00:45 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: PPA94ZwdIy0ntKsqOGdLcJ4L+QJ/qgjdAGNoH2pgBTg=)
2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:17:fe:b0:93:c6:a9:3b:1f:58:54:6f:fa:dc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Oct 20 15:00:45 2025 GMT
Not After : Oct 21 15:00:45 2025 GMT
Subject: CN=80cc2c92e21d7595cb17a47868532eec47d30d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:ae:12:7a:a9:8a:73:6d:69:46:df:0f:00:
e1:41:53:4a:ac:80:03:1c:be:e3:54:c6:c0:7a:5c:
12:c8:3c:95:b2:a4:31:36:aa:29:0e:df:8d:5b:e9:
2c:6c:b6:ee:63:4f:e8:d6:97:d8:25:f8:54:bf:14:
86:37:1f:3f:66:cf:d1:12:5e:57:33:1a:7e:44:a5:
b7:1c:f2:78:30:2a:6f:09:54:7c:c2:79:ce:96:bc:
c6:92:d0:1b:f2:f4:4b:fa:70:d7:54:3f:be:d6:32:
53:8d:26:ec:90:07:5c:79:5a:2d:e9:74:0a:a5:93:
14:7d:bd:f6:65:c6:1e:92:40:9b:15:17:09:3f:15:
d3:7a:d3:1d:90:9e:e2:b2:ed:fa:69:0c:81:1d:6c:
e4:b7:bf:f8:52:f4:cc:06:54:2a:2b:68:d8:dd:71:
d6:0d:22:f4:e2:d4:2c:8c:d2:f3:c3:3b:70:af:dc:
00:3e:92:74:70:33:d8:97:6d:a6:33:f8:59:4a:de:
a2:0a:49:c8:2a:5d:01:d7:5d:00:28:ce:f2:15:9b:
04:af:c0:19:ee:4e:32:32:35:66:8c:91:d0:73:58:
2e:fc:9d:d7:31:36:43:f9:7a:b2:07:02:d6:5e:21:
5e:37:65:be:b2:a7:5b:af:4c:c7:56:3d:6f:09:f1:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CC:2C:92:E2:1D:75:95:CB:17:A4:78:68:53:2E:EC:47:D3:0D:77
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b7:87:85:12:43:d6:1f:34:fe:9a:7f:19:81:30:a6:3b:f2:
28:fe:e4:61:ef:0a:79:4e:3b:6b:17:c6:ad:22:c8:e8:8d:59:
64:58:00:1e:f5:a7:b9:b3:97:71:97:22:b7:0a:fa:33:33:43:
99:33:4b:4d:77:3e:9c:9f:ca:9f:9b:0a:ac:ed:b3:6d:37:95:
0e:5c:71:15:6d:28:bd:60:f3:0d:f3:54:73:90:91:fd:df:9d:
5f:76:f0:b9:74:68:78:7b:ab:16:ca:96:1e:8e:8b:cb:60:5a:
83:6d:8e:60:0c:89:a2:a2:6a:b0:20:b0:0a:6e:73:82:98:db:
ba:21:f1:43:8f:04:e4:0f:44:df:96:20:02:e0:58:96:a7:87:
69:d6:cc:2a:13:66:c3:da:eb:bd:1b:2a:c1:9c:1f:11:4b:7e:
5e:7a:80:6f:3e:d5:df:49:10:27:3f:66:9e:1d:02:cc:a9:29:
c4:78:c6:0f:1b:fd:90:f9:42:a8:87:3a:ff:fb:e5:a4:94:88:
64:46:08:1e:49:04:20:f4:bd:9a:31:8d:49:c1:2b:51:19:3f:
9d:c8:46:8a:c5:9f:dd:fe:65:c8:71:13:25:3b:e4:b9:95:3a:
e9:7a:44:23:52:7d:73:8e:63:91:4a:e1:d6:09:c3:1b:12:72:
d7:54:ae:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCIxf+sJPGqTsfWFRv+txOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYzE1NjVhNWY2YzRlNTRjYTJmMTlkMzY0NzU5YjZhMGVk
NjE4NDAwHhcNMjUxMDIwMTUwMDQ1WhcNMjUxMDIxMTUwMDQ1WjAzMTEwLwYDVQQD
Eyg4MGNjMmM5MmUyMWQ3NTk1Y2IxN2E0Nzg2ODUzMmVlYzQ3ZDMwZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/uuEnqpinNtaUbfDwDhQVNKrIAD
HL7jVMbAelwSyDyVsqQxNqopDt+NW+ksbLbuY0/o1pfYJfhUvxSGNx8/Zs/REl5X
Mxp+RKW3HPJ4MCpvCVR8wnnOlrzGktAb8vRL+nDXVD++1jJTjSbskAdceVot6XQK
pZMUfb32ZcYekkCbFRcJPxXTetMdkJ7isu36aQyBHWzkt7/4UvTMBlQqK2jY3XHW
DSL04tQsjNLzwztwr9wAPpJ0cDPYl22mM/hZSt6iCknIKl0B110AKM7yFZsEr8AZ
7k4yMjVmjJHQc1gu/J3XMTZD+XqyBwLWXiFeN2W+sqdbr0zHVj1vCfHHBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDMLJLiHXWVyxekeGhTLuxH0w13MB8GA1UdIwQY
MBaAFArBVlpfbE5Uyi8Z02R1m2oO1hhAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZWRiMjItZmY0Ny00NjVmLTkwNjgt
NWM0YTBlYjIwMTdmLzEvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZWRiMjItZmY0Ny00NjVmLTkwNjgtNWM0YTBlYjIwMTdm
LzEvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbeHhRJD
1h80/pp/GYEwpjvyKP7kYe8KeU47axfGrSLI6I1ZZFgAHvWnubOXcZcitwr6MzND
mTNLTXc+nJ/Kn5sKrO2zbTeVDlxxFW0ovWDzDfNUc5CR/d+dX3bwuXRoeHurFsqW
Ho6Ly2Bag22OYAyJoqJqsCCwCm5zgpjbuiHxQ48E5A9E35YgAuBYlqeHadbMKhNm
w9rrvRsqwZwfEUt+XnqAbz7V30kQJz9mnh0CzKkpxHjGDxv9kPlCqIc6//vlpJSI
ZEYIHkkEIPS9mjGNScErURk/nchGisWf3f5lyHETJTvkuZU66XpEI1J9c45jkUrh
1gnDGxJy11SutA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:32 2025 by rpki-client