Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: jDVgwj0veEHYslbhwE28VFdi7dJMLSFprqSkFYVkrJc=
Subject key identifier: 30:01:4F:87:BA:E1:D0:BB:B5:13:82:17:BA:51:61:8B:23:D2:5E:6F
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 0199FDD96F2E86E08E3BE336AB3B6BC2C077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0A26
Signing time: Sun 19 Oct 2025 19:01:49 +0000
Manifest this update: Sun 19 Oct 2025 19:01:49 +0000
Manifest next update: Mon 20 Oct 2025 19:01:49 +0000
Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=)
3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: DvtJpFH4cM3cwTof5JfkGHLSt5Ovk+Ylmm7YIhJkcZU=)
4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:6f:2e:86:e0:8e:3b:e3:36:ab:3b:6b:c2:c0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Oct 19 19:01:49 2025 GMT
Not After : Oct 20 19:01:49 2025 GMT
Subject: CN=30014f87bae1d0bbb5138217ba51618b23d25e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:9b:cb:13:fb:1a:d3:4c:d7:b5:07:c0:26:
53:a6:a3:0e:5c:9c:cb:56:12:e0:8b:47:78:5c:f3:
6a:48:29:dc:42:77:b3:f5:ff:2a:0d:a6:2d:9b:3c:
89:4a:22:cf:73:c5:17:96:3f:de:e3:14:0d:ab:5e:
c2:b0:d0:2f:12:11:55:6f:f8:d8:69:3c:75:79:25:
bf:7e:34:fc:e7:9a:ab:2f:36:24:56:51:98:dd:ae:
08:04:69:c2:8b:0b:4a:43:ae:d9:e8:26:26:cd:3e:
a3:d4:4f:46:7d:da:77:be:b7:2c:12:76:4f:1c:41:
61:59:f3:a2:f1:3f:f9:96:c6:6f:bc:3e:e2:1f:7f:
55:9f:14:60:40:02:66:44:da:8b:70:68:a3:79:75:
6b:2b:28:97:85:21:c4:95:c4:39:84:c6:2a:55:35:
72:7a:87:89:7c:cc:f3:40:af:55:63:95:2b:7f:8b:
9a:2e:6b:fa:ed:15:d7:04:7f:0f:43:6d:a9:dc:be:
b6:5c:f3:21:b3:f3:5c:8d:32:41:38:74:fa:72:1a:
4e:d3:d8:27:7e:e6:b9:3e:ad:e5:4e:f2:56:a6:43:
bf:e4:5a:d5:18:c0:50:b4:ad:08:2e:54:c2:09:5c:
66:b9:cf:57:28:8b:60:18:b6:f6:84:bd:5b:33:ca:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:4F:87:BA:E1:D0:BB:B5:13:82:17:BA:51:61:8B:23:D2:5E:6F
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:01:99:cf:5d:47:11:d2:c5:0b:01:18:76:37:40:8f:7c:c2:
aa:c0:e4:ca:40:50:5a:89:ba:96:25:70:a5:8c:f4:9b:d8:0d:
70:54:ce:f9:f0:aa:98:ed:f2:8b:1f:cf:39:c5:97:20:fd:30:
f6:99:b0:c3:a8:a4:79:ad:82:02:74:a3:d4:50:59:f5:64:0c:
6c:fc:97:ec:34:ae:88:55:b0:05:4f:81:04:74:20:64:5d:6d:
67:d5:2a:32:84:c7:87:bc:36:a1:08:d5:2f:e6:61:7a:04:a6:
41:24:16:0c:30:58:34:46:79:10:cd:38:ae:e0:bd:23:ac:a2:
26:d0:4a:4b:d4:2a:47:3c:cb:87:0a:91:64:4f:9a:f0:83:19:
05:77:bf:d8:c5:89:58:a1:b0:2f:92:a2:60:e1:ad:c7:35:48:
49:c7:73:3a:a6:1b:98:0f:1d:ca:fe:7b:24:34:d1:ed:06:8e:
7f:5c:97:19:a9:2e:90:10:15:fe:26:cb:c9:bf:82:10:ba:9a:
32:f0:94:f2:ea:3d:29:81:38:96:5e:4b:6e:0f:52:f7:9b:e8:
0c:f7:88:60:cf:86:60:c7:ea:60:f1:43:fb:2e:f8:89:4e:31:
20:b9:07:02:2b:a3:2f:e0:dd:69:e1:2a:99:8b:fd:d9:bd:74:
52:c9:d9:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92W8uhuCOO+M2qztrwsB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTgwYjYwZTBkMzBlNDk4ZGUxYmFhNjQ1YTFiZTU3YTk1
MjA0OWQwHhcNMjUxMDE5MTkwMTQ5WhcNMjUxMDIwMTkwMTQ5WjAzMTEwLwYDVQQD
EygzMDAxNGY4N2JhZTFkMGJiYjUxMzgyMTdiYTUxNjE4YjIzZDI1ZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqabyxP7GtNM17UHwCZTpqMOXJzL
VhLgi0d4XPNqSCncQnez9f8qDaYtmzyJSiLPc8UXlj/e4xQNq17CsNAvEhFVb/jY
aTx1eSW/fjT855qrLzYkVlGY3a4IBGnCiwtKQ67Z6CYmzT6j1E9Gfdp3vrcsEnZP
HEFhWfOi8T/5lsZvvD7iH39VnxRgQAJmRNqLcGijeXVrKyiXhSHElcQ5hMYqVTVy
eoeJfMzzQK9VY5Urf4uaLmv67RXXBH8PQ22p3L62XPMhs/NcjTJBOHT6chpO09gn
fua5Pq3lTvJWpkO/5FrVGMBQtK0ILlTCCVxmuc9XKItgGLb2hL1bM8q1BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDABT4e64dC7tROCF7pRYYsj0l5vMB8GA1UdIwQY
MBaAFHCYC2Dg0w5JjeG6pkWhvlepUgSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMt
N2YzN2I3NzhjMDExLzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMtN2YzN2I3NzhjMDEx
LzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAGZz11H
EdLFCwEYdjdAj3zCqsDkykBQWom6liVwpYz0m9gNcFTO+fCqmO3yix/POcWXIP0w
9pmww6ikea2CAnSj1FBZ9WQMbPyX7DSuiFWwBU+BBHQgZF1tZ9UqMoTHh7w2oQjV
L+ZhegSmQSQWDDBYNEZ5EM04ruC9I6yiJtBKS9QqRzzLhwqRZE+a8IMZBXe/2MWJ
WKGwL5KiYOGtxzVIScdzOqYbmA8dyv57JDTR7QaOf1yXGakukBAV/ibLyb+CELqa
MvCU8uo9KYE4ll5Lbg9S95voDPeIYM+GYMfqYPFD+y74iU4xILkHAiujL+DdaeEq
mYv92b10UsnZHw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:28 2025 by rpki-client