Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
File: cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json)
Hash identifier: lfoju9gDnERvquYyHwKCa29XDxWrYLWayuPY9BJWwkk=
Subject key identifier: 76:37:4C:00:72:CD:0D:02:4D:1C:F0:70:34:5F:2E:57:DD:6A:9D:D6
Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba
Certificate serial: 0199FC8FC3DAC595FDA9DB758E2510AAD272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
Manifest number: 0817
Signing time: Sun 19 Oct 2025 13:01:44 +0000
Manifest this update: Sun 19 Oct 2025 13:01:44 +0000
Manifest next update: Mon 20 Oct 2025 13:01:44 +0000
Files and hashes: 1: R-wXA-kWQa5PdCJfUeOG1Bar_7E.roa (hash: eg3vfMOt4/2VviBbur6gIcbu+ezOh6ft9BbXqbZkqec=)
2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: Pg667VbVzTqUMjZ2YnE0YHlBHwJMW2+yZ/X+NL44ybQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c3:da:c5:95:fd:a9:db:75:8e:25:10:aa:d2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba
Validity
Not Before: Oct 19 13:01:44 2025 GMT
Not After : Oct 20 13:01:44 2025 GMT
Subject: CN=76374c0072cd0d024d1cf070345f2e57dd6a9dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:83:6e:07:87:3a:56:13:9c:da:5b:81:03:
06:04:f2:2e:16:3e:da:39:c1:1d:15:97:81:e6:c8:
6d:43:73:40:53:11:49:1c:50:ea:23:0f:d2:3e:ae:
31:46:c3:84:89:c0:90:cc:ab:29:16:88:5b:dc:8e:
e0:a8:3f:27:9e:e1:0c:e2:27:1f:ba:ca:fe:58:c6:
3e:eb:96:3b:b3:9f:69:4e:5b:91:6b:28:11:ce:9c:
25:13:9b:fc:ce:eb:15:95:39:9c:9a:83:25:0e:6d:
0c:1f:03:ba:66:e8:34:22:f4:a9:4f:26:16:54:13:
eb:61:b8:75:75:0a:da:17:db:02:da:db:56:db:da:
09:9d:0d:13:07:50:db:81:d0:ff:8f:48:cc:63:9b:
27:74:74:28:34:10:27:bc:c7:6f:07:58:6c:bc:b2:
30:96:d1:02:40:95:6b:5f:ea:40:7c:a5:94:ee:a2:
59:5b:87:88:9e:13:b8:85:42:b0:1c:2f:d5:0a:e4:
82:b4:2a:58:f8:13:ad:ab:2c:c3:7d:9f:a0:d3:f5:
17:5a:92:62:7a:7f:9e:bd:b7:af:51:2a:6d:2b:79:
56:32:34:81:c3:f9:1b:2b:2d:b5:00:21:79:94:89:
41:8e:e3:a2:22:05:bc:08:2f:e6:98:6a:cd:1f:28:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:37:4C:00:72:CD:0D:02:4D:1C:F0:70:34:5F:2E:57:DD:6A:9D:D6
X509v3 Authority Key Identifier:
keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8d:ec:aa:40:80:9b:67:0c:77:62:9f:94:52:24:c1:a2:ab:
b7:df:b2:57:a9:98:9e:40:bf:64:fb:80:6b:3b:bb:7e:53:65:
ee:68:88:33:11:95:a0:11:7f:17:e4:47:3b:87:10:39:87:ad:
cb:b0:8b:af:65:f7:39:d4:e8:e9:46:8e:74:13:f5:d2:d6:b6:
fb:58:52:54:ca:60:39:00:44:e3:fc:8d:45:64:04:27:36:69:
7b:26:8f:2f:5b:3f:29:3c:fc:b2:bb:b7:3d:2d:fa:d8:7a:d2:
7b:9d:a4:37:52:9d:28:ca:b9:10:3a:0b:06:5e:2a:a6:b7:34:
ed:cf:75:03:81:1f:9e:3e:a3:20:f4:09:63:cc:22:fe:50:7a:
55:a4:11:f4:e7:a2:86:ae:55:66:5f:fe:df:a3:93:fd:e7:4d:
71:5b:9c:f7:b1:10:10:5a:8c:f7:da:ad:0a:90:da:9d:36:f0:
30:41:bb:ab:e5:80:6d:91:72:64:59:c1:6c:f8:6e:3e:09:bf:
dd:90:22:53:9d:75:cc:db:c0:a6:4b:db:9a:71:63:ed:69:53:
af:40:33:ef:f0:2b:84:20:8c:15:f2:ee:5b:c6:2b:77:a2:4f:
67:71:f9:62:65:76:3d:86:fc:9f:ef:0a:88:5f:9e:d2:5c:3a:
6c:ab:7e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j8PaxZX9qdt1jiUQqtJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmYwYTE2MWIyMTdiOWNlZmQzNzgxY2UyNjExOTUxYmU0
MTlkYmEwHhcNMjUxMDE5MTMwMTQ0WhcNMjUxMDIwMTMwMTQ0WjAzMTEwLwYDVQQD
Eyg3NjM3NGMwMDcyY2QwZDAyNGQxY2YwNzAzNDVmMmU1N2RkNmE5ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokyDbgeHOlYTnNpbgQMGBPIuFj7a
OcEdFZeB5shtQ3NAUxFJHFDqIw/SPq4xRsOEicCQzKspFohb3I7gqD8nnuEM4icf
usr+WMY+65Y7s59pTluRaygRzpwlE5v8zusVlTmcmoMlDm0MHwO6Zug0IvSpTyYW
VBPrYbh1dQraF9sC2ttW29oJnQ0TB1DbgdD/j0jMY5sndHQoNBAnvMdvB1hsvLIw
ltECQJVrX+pAfKWU7qJZW4eInhO4hUKwHC/VCuSCtCpY+BOtqyzDfZ+g0/UXWpJi
en+evbevUSptK3lWMjSBw/kbKy21ACF5lIlBjuOiIgW8CC/mmGrNHyhrYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY3TAByzQ0CTRzwcDRfLlfdap3WMB8GA1UdIwQY
MBaAFHBvChYbIXuc79N4HOJhGVG+QZ26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2It
MTA0OWM5OTdiYzdhLzEvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2ItMTA0OWM5OTdiYzdh
LzEvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYo3sqkCA
m2cMd2KflFIkwaKrt9+yV6mYnkC/ZPuAazu7flNl7miIMxGVoBF/F+RHO4cQOYet
y7CLr2X3OdTo6UaOdBP10ta2+1hSVMpgOQBE4/yNRWQEJzZpeyaPL1s/KTz8sru3
PS362HrSe52kN1KdKMq5EDoLBl4qprc07c91A4Efnj6jIPQJY8wi/lB6VaQR9Oei
hq5VZl/+36OT/edNcVuc97EQEFqM99qtCpDanTbwMEG7q+WAbZFyZFnBbPhuPgm/
3ZAiU511zNvApkvbmnFj7WlTr0Az7/ArhCCMFfLuW8Yrd6JPZ3H5YmV2PYb8n+8K
iF+e0lw6bKt+tg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:36 2025 by rpki-client