Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: Dt28HCFaKZPTEhPQDW5MR3+EKhJb3XL7GRwdaqPphp0=
Subject key identifier: 7A:9C:8E:55:FA:5E:7C:30:8D:55:80:6C:73:D6:92:68:7A:E8:FE:BE
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 0199FB0EC6929A8F7316AC29315048359B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 06:01:13 +0000
Manifest this update: Sun 19 Oct 2025 06:01:13 +0000
Manifest next update: Mon 20 Oct 2025 06:01:13 +0000
Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=)
2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=)
3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=)
4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=)
5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=)
6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: 9KdF1BVHszTh1siLfCWgI1Qsvyt5y9O+f7kkHg9IESY=)
8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=)
9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c6:92:9a:8f:73:16:ac:29:31:50:48:35:9b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Oct 19 06:01:13 2025 GMT
Not After : Oct 20 06:01:13 2025 GMT
Subject: CN=7a9c8e55fa5e7c308d55806c73d692687ae8febe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:35:b6:d7:36:ac:22:53:1d:57:64:6d:7e:
45:ee:3d:fd:07:4e:44:0d:b8:98:df:cd:81:98:63:
dc:3c:c8:0a:48:fd:33:f6:8c:ba:2c:f7:1f:4e:21:
23:96:f9:ba:9c:f8:fd:f5:69:9f:35:5f:ef:ab:61:
b5:13:ee:dc:3a:85:7b:d7:71:50:c2:27:63:ac:a1:
ba:f3:bc:0b:dd:40:b8:7f:67:52:22:b2:fe:eb:e1:
fe:92:1e:54:67:fb:c2:9f:d7:aa:87:6f:4b:9b:fa:
96:8e:76:4b:3d:82:3e:b8:f1:c4:a0:2f:24:a9:1d:
2d:e9:6a:b2:34:24:88:7e:8f:dc:24:a8:21:a5:e7:
bd:d6:39:85:b8:f5:6f:2d:c2:21:e3:f6:1d:66:1e:
63:0a:c6:86:56:a5:b8:33:25:01:8b:1a:f8:69:2b:
d0:d3:f4:62:4a:55:58:c1:f0:c6:47:8c:03:9d:ed:
b9:40:2b:ca:25:8c:63:59:88:34:d8:73:92:cf:a2:
75:2e:72:74:9e:45:82:bb:57:2e:67:82:1e:dc:4c:
5a:33:35:57:51:ed:b7:7c:4e:85:84:44:2b:ff:15:
7b:d4:c1:b2:91:8f:a5:76:a0:f3:5f:2e:f9:eb:46:
12:64:8f:d4:f4:95:5e:b4:59:37:e5:8c:b7:cb:9c:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9C:8E:55:FA:5E:7C:30:8D:55:80:6C:73:D6:92:68:7A:E8:FE:BE
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:59:09:81:01:44:1f:93:4f:e0:12:df:f0:8c:2c:ae:3a:ad:
9c:13:f6:a9:de:61:8b:f8:25:78:b7:94:63:2c:c2:c6:16:70:
f2:92:d3:88:73:a3:21:76:10:c9:49:a3:b0:1f:10:c8:77:80:
38:4f:bf:58:7f:bc:55:73:81:5d:26:61:43:57:68:56:cb:c5:
cb:de:f1:fc:7e:73:e4:ae:d4:97:e0:6f:62:11:16:79:01:37:
44:10:e1:dd:8f:5b:45:40:9c:7e:2c:32:96:ad:54:bd:46:bc:
86:ee:7f:2f:ea:e7:8c:5d:5d:9b:64:c4:ba:b7:3a:31:90:b5:
5c:31:eb:12:6f:83:c0:21:23:74:49:71:6f:97:2d:a4:91:3c:
cb:9b:fb:64:01:be:67:2f:52:97:98:06:d8:70:b8:e2:4b:f3:
37:13:f9:0c:b7:6a:d0:47:b1:89:0c:96:1b:63:f8:63:9a:1c:
49:ea:8e:22:a6:cb:7f:14:aa:d7:94:b4:49:f7:67:f1:3c:c1:
0b:72:79:11:0d:48:b8:f7:4d:37:79:58:7a:28:a9:3d:45:96:
20:f9:02:c8:ad:e5:24:4b:d3:46:6e:75:33:c0:51:75:65:d2:
40:56:91:1a:6c:8d:9c:18:9c:15:71:a0:d1:1e:9c:fc:62:67:
68:35:68:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:09 2025 by rpki-client