Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: C4GCfze12DYixeIHmYbmvTGozRYEusK8qVLN2JMFoXA=
Subject key identifier: 6A:E6:59:33:86:FE:96:6D:F3:AB:9E:0C:15:13:3A:63:D5:57:0C:D1
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 0199FBEC4A6034DD815C8E36CEECFE00BD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:03:10 +0000
Manifest this update: Sun 19 Oct 2025 10:03:10 +0000
Manifest next update: Mon 20 Oct 2025 10:03:10 +0000
Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: QGowOMt+y5duCMxLUej9gcPhHAyi6KPKQEaLVaykL/g=)
3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:4a:60:34:dd:81:5c:8e:36:ce:ec:fe:00:bd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Oct 19 10:03:10 2025 GMT
Not After : Oct 20 10:03:10 2025 GMT
Subject: CN=6ae6593386fe966df3ab9e0c15133a63d5570cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:dc:c6:b5:02:f2:63:89:65:07:7c:81:53:
62:47:d2:fb:54:67:06:6d:35:40:51:da:42:12:96:
80:ca:fa:2f:38:f3:a0:53:af:e2:5c:92:6e:05:9b:
80:ba:7b:53:a3:4b:ea:66:28:0c:37:64:e5:36:f4:
df:d9:86:08:86:60:2b:a7:2f:70:ae:ee:6f:16:09:
ba:c0:2a:26:5e:55:b2:c0:34:ee:69:04:9d:eb:3d:
54:8c:be:fa:da:93:59:82:26:7f:fe:07:36:69:4c:
ec:31:06:81:ff:b5:2f:d0:b7:08:42:3d:00:3c:a9:
9b:df:69:e5:ee:a7:2e:42:fb:b6:76:54:8b:3f:43:
16:fc:86:13:8e:b1:94:4f:ca:84:c9:55:1f:5c:73:
e3:7b:bc:cf:ca:cf:c5:cf:b0:5a:6a:50:38:58:d3:
a1:00:a1:d0:04:e5:e0:59:06:16:71:c5:54:b1:46:
65:a5:02:91:18:34:f1:43:0f:54:8c:af:f9:61:47:
01:3c:e0:2a:db:c1:cc:88:38:90:1e:95:a9:0c:5b:
15:67:8a:b7:ab:c9:cb:c6:0c:dd:8e:76:52:c3:23:
45:34:74:65:9c:d3:cd:a0:b2:a2:29:50:53:d0:d8:
4e:56:4b:08:7f:13:92:b9:e3:da:f3:56:f8:b9:a2:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E6:59:33:86:FE:96:6D:F3:AB:9E:0C:15:13:3A:63:D5:57:0C:D1
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:05:3e:57:21:6d:a8:73:d0:53:21:16:4b:01:c9:e9:3f:d9:
78:83:7b:4c:8b:89:eb:7e:65:9d:53:d3:5f:47:01:c7:95:ed:
6a:aa:8c:39:16:00:d8:2e:27:51:f1:b4:01:d6:d6:e2:c6:40:
a0:56:f9:fb:ba:b9:40:e3:61:59:65:ac:7f:bb:41:02:d4:f4:
37:b6:6d:b3:b1:6e:24:00:b3:13:53:1e:de:0d:72:a8:79:2c:
89:50:79:9f:72:16:29:6e:d0:6b:45:dd:a1:49:ec:49:be:a9:
2a:b0:40:56:5c:ce:6e:fd:36:2b:da:ff:90:09:b9:f6:77:a5:
85:44:99:8a:76:2d:2a:22:33:c7:64:2c:ed:91:60:74:5e:05:
9c:38:25:6d:7c:7f:e5:18:a2:c6:e3:14:34:30:e7:d6:6c:66:
10:c7:60:dd:98:cc:3f:c5:a1:60:2e:5d:c1:cc:ca:e2:43:89:
33:27:a9:8b:3e:01:8a:4b:19:da:bf:67:41:7c:25:44:46:a5:
d8:cb:a9:cb:46:68:67:e8:cb:2f:d4:d7:7a:5c:56:c6:4c:3b:
3f:8c:3a:79:48:87:62:2c:35:f4:36:48:1f:b7:1c:88:d4:67:
4c:f7:19:50:70:86:e4:5a:12:46:c4:f9:06:c7:5f:70:f3:15:
de:16:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:50 2025 by rpki-client