Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier: 3/L7naWkaEN/EKUT8WAWV3yFBQGktfqPFl7vASNCg5A=
Subject key identifier: A8:70:9E:33:05:B2:C9:66:13:C3:36:E2:99:DA:F4:2A:CF:FB:2A:EC
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial: 0199FBEAED923D36562B2C90AF3C76563FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=)
2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: 36tGydMxxR8W5JiH8IgBZ/RBqo5+yLk6bCbNw90yCM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ed:92:3d:36:56:2b:2c:90:af:3c:76:56:3f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=a8709e3305b2c96613c336e299daf42acffb2aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:27:1d:6b:77:6a:2b:0b:7c:7d:3b:87:94:
c3:a2:ee:72:b7:a6:2c:c2:eb:3e:bb:8a:98:55:ef:
b2:f6:58:e6:b9:b1:60:8b:a7:82:20:29:88:b0:f2:
df:5b:7c:e8:39:93:f0:5c:8d:e6:70:b3:b0:50:44:
ab:a7:42:b6:35:5b:55:1c:1d:ea:44:0f:58:cf:66:
5f:29:a0:32:b0:94:de:69:6c:a4:03:58:be:d1:8a:
d3:13:f7:d7:f6:2c:a4:2e:92:c0:64:d4:f1:0e:a1:
77:7d:bf:c8:08:2d:56:19:9c:74:a5:89:fb:4e:9a:
03:f8:5d:c0:c1:ea:08:8b:5c:fd:11:cc:38:03:71:
ee:69:e0:86:8d:f8:f9:ba:8b:7e:18:98:c2:60:88:
51:20:ba:d3:38:59:ba:53:8c:29:47:a7:a9:71:3e:
8f:c0:3a:49:39:cc:c9:e4:a6:db:a8:6c:64:14:83:
a8:b5:00:1f:5a:c5:ff:fd:30:20:f0:1c:76:4c:7f:
13:49:61:4b:04:95:06:dc:3f:e4:97:03:44:72:2b:
df:83:f0:a7:08:32:f0:28:41:c0:86:93:95:f8:41:
5c:fc:8d:9b:90:6e:02:c1:a8:6b:29:9f:0c:70:5a:
4e:cc:2b:97:82:a7:1f:a9:76:31:2b:c2:6c:c8:02:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:70:9E:33:05:B2:C9:66:13:C3:36:E2:99:DA:F4:2A:CF:FB:2A:EC
X509v3 Authority Key Identifier:
keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a5:db:a9:79:8a:fb:e8:ed:6c:f8:7b:0f:e9:99:d1:87:20:
25:f9:1d:1c:40:4a:5a:df:5b:0f:53:ff:03:83:ed:9c:e4:06:
27:b1:48:fa:e2:72:1a:fb:21:2b:91:0d:1a:e4:2a:ae:c2:79:
7a:35:e9:ce:a4:96:f1:5f:c6:ac:47:0e:38:82:d5:85:d5:96:
6d:c0:a1:9a:2c:d4:13:26:05:e7:63:3f:21:2d:8b:ae:b6:0a:
06:8c:6e:26:b3:ac:74:23:70:56:9a:71:28:3b:43:0c:64:83:
b9:69:02:9b:ed:8d:5e:ac:06:9f:2c:32:34:ce:de:a3:a2:ef:
69:76:1a:5e:a8:05:6d:c9:b0:b7:50:2e:6b:cd:9e:95:45:4a:
5e:2c:3c:04:0e:6f:3e:16:75:19:2a:e9:c2:d8:fa:cb:af:cb:
2b:5e:8d:de:e5:2d:88:c3:cf:71:26:fd:4f:ad:35:0b:ad:2c:
9e:8d:4d:94:63:fb:e8:e8:5f:38:05:eb:bb:f9:5a:1b:42:22:
08:10:34:fe:3c:3c:ac:6e:60:70:90:24:4e:3f:3d:75:35:9b:
57:37:2c:e8:de:e5:4e:7e:a7:b6:e6:eb:ac:88:e0:89:26:fa:
36:72:f0:c5:7a:36:f6:b3:2b:2e:6c:03:0d:00:b5:5b:63:40:
cf:b4:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:47 2025 by rpki-client