Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: zXARQAV28hfI6eqmh3q9TcMV+yXe6es5k0IZ1cA4/9A=
Subject key identifier: D6:EA:A6:5D:CE:65:19:40:F2:24:C0:4F:18:1C:E1:90:B9:48:F3:EF
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 0199FBEAFB1DBCE3B762A5A3B058D59F9E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 04DC
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: mU3K9vteQR/vKTK0DlSRPg9Hluq1+XsYkrul+8napl4=)
2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fb:1d:bc:e3:b7:62:a5:a3:b0:58:d5:9f:9e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=d6eaa65dce651940f224c04f181ce190b948f3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5e:d8:a5:0f:7e:29:42:bf:13:82:ec:45:4b:
85:d8:6d:d3:19:9d:93:3b:02:a6:d2:58:e1:c4:c9:
7c:ed:2f:c5:3a:41:da:75:fe:75:0b:23:d2:ba:0d:
51:db:c1:6d:71:7c:f1:4c:f5:2f:34:1f:96:a2:65:
ee:5d:55:68:a9:5b:d7:6c:9b:51:81:48:75:bc:4f:
24:3a:c7:71:a1:77:6b:30:cf:fd:92:47:94:14:e9:
1d:4c:04:c9:d4:8e:7c:1f:ab:01:08:08:de:12:8f:
66:06:61:ca:ca:5b:9c:40:1f:bd:2b:5e:e4:74:35:
1a:0e:d3:54:37:a0:50:16:f8:da:f3:c9:9a:db:a4:
dd:b1:32:c3:d1:93:0b:28:4c:fe:53:37:c6:bb:1c:
8e:c1:ac:d1:55:e1:4b:1a:b8:b8:b7:ca:bc:b4:b0:
c5:2b:47:aa:38:ed:b0:ae:c6:9b:7a:97:61:34:6b:
56:16:fe:6a:ff:9b:08:3e:0b:e1:fb:43:21:9b:84:
ff:31:50:93:3a:c5:4c:39:7b:76:c1:15:fd:96:2a:
51:30:f9:e7:e4:fd:f4:cc:0d:8f:97:dd:1d:63:e3:
45:a9:19:8b:02:d6:04:74:fb:a2:93:a4:f7:1a:8f:
a6:4c:71:24:13:97:c0:86:39:dd:d9:1c:04:5c:f6:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EA:A6:5D:CE:65:19:40:F2:24:C0:4F:18:1C:E1:90:B9:48:F3:EF
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e2:b9:16:c6:52:bf:0c:28:55:7e:b2:62:93:ca:58:e7:55:
b5:bc:9e:71:0f:59:c2:58:ab:cc:82:05:c0:39:1c:5f:16:10:
f7:c0:a0:06:e2:1f:fd:70:70:d0:2d:06:60:26:61:b0:d3:f2:
34:06:f5:6f:bb:25:7d:21:d8:4c:aa:41:cd:fb:7a:d4:0d:c2:
de:72:50:df:0c:f4:d6:72:3a:7b:8c:b3:72:4c:48:b7:c6:d6:
16:38:89:35:0d:9d:d0:8d:5c:57:88:6f:aa:22:ab:e7:f0:53:
81:6e:ed:09:14:7f:be:64:75:10:57:20:e8:a0:b0:35:db:72:
e6:bd:46:43:77:1e:84:16:bd:f9:f1:64:ef:cb:f8:52:60:c0:
0f:61:c8:ed:59:65:f0:36:a7:35:5e:58:9c:76:e9:00:32:3c:
da:1b:54:db:4f:64:df:55:d4:52:60:8d:91:21:ce:0f:55:24:
5d:ce:80:99:30:40:aa:09:56:6c:70:bb:25:5b:3f:76:d4:b4:
a0:be:49:b0:a0:05:a4:9e:d4:38:d9:31:cd:a7:c8:2a:d8:3f:
5f:66:2d:11:43:3c:34:83:4b:4a:5e:74:39:e9:45:39:2a:8d:
c6:38:6a:e5:76:7a:f8:18:bd:5b:c6:3f:94:e9:d5:80:11:21:
1e:4e:2d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76vsdvOO3YqWjsFjVn55uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNjliMzliMDhmM2Y2MmNlM2UwODNiYmM4YWVlY2VhZGM0
OThiNjkwHhcNMjUxMDE5MTAwMTQ0WhcNMjUxMDIwMTAwMTQ0WjAzMTEwLwYDVQQD
EyhkNmVhYTY1ZGNlNjUxOTQwZjIyNGMwNGYxODFjZTE5MGI5NDhmM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV7YpQ9+KUK/E4LsRUuF2G3TGZ2T
OwKm0ljhxMl87S/FOkHadf51CyPSug1R28FtcXzxTPUvNB+WomXuXVVoqVvXbJtR
gUh1vE8kOsdxoXdrMM/9kkeUFOkdTATJ1I58H6sBCAjeEo9mBmHKylucQB+9K17k
dDUaDtNUN6BQFvja88ma26TdsTLD0ZMLKEz+UzfGuxyOwazRVeFLGri4t8q8tLDF
K0eqOO2wrsabepdhNGtWFv5q/5sIPgvh+0Mhm4T/MVCTOsVMOXt2wRX9lipRMPnn
5P30zA2Pl90dY+NFqRmLAtYEdPuik6T3Go+mTHEkE5fAhjnd2RwEXPauQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbqpl3OZRlA8iTATxgc4ZC5SPPvMB8GA1UdIwQY
MBaAFApps5sI8/Ys4+CDu8iu7OrcSYtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAt
YzA5YWZhMDBjYjg0LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAtYzA5YWZhMDBjYjg0
LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluK5FsZS
vwwoVX6yYpPKWOdVtbyecQ9ZwlirzIIFwDkcXxYQ98CgBuIf/XBw0C0GYCZhsNPy
NAb1b7slfSHYTKpBzft61A3C3nJQ3wz01nI6e4yzckxIt8bWFjiJNQ2d0I1cV4hv
qiKr5/BTgW7tCRR/vmR1EFcg6KCwNdty5r1GQ3cehBa9+fFk78v4UmDAD2HI7Vll
8DanNV5YnHbpADI82htU209k31XUUmCNkSHOD1UkXc6AmTBAqglWbHC7JVs/dtS0
oL5JsKAFpJ7UONkxzafIKtg/X2YtEUM8NINLSl50OelFOSqNxjhq5XZ6+Bi9W8Y/
lOnVgBEhHk4tyw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:53 2025 by rpki-client