Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: sB/l2PFtyo/I+alwMwbQruBntDiBpn8Ke/Vj8uh3+ks=
Subject key identifier: BA:99:B4:D3:8C:59:3A:2C:86:D2:E2:48:B9:38:56:A8:13:13:8C:1C
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 0199FBEB62D9F9582752A09240BFFCDDB432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 10:02:11 +0000
Manifest this update: Sun 19 Oct 2025 10:02:11 +0000
Manifest next update: Mon 20 Oct 2025 10:02:11 +0000
Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: zGQP4R4BAwqkogfqvLAfLs9QMOgrHVGK6cHXAGn1IC8=)
2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:62:d9:f9:58:27:52:a0:92:40:bf:fc:dd:b4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Oct 19 10:02:11 2025 GMT
Not After : Oct 20 10:02:11 2025 GMT
Subject: CN=ba99b4d38c593a2c86d2e248b93856a813138c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:63:e8:1a:ad:5a:56:5e:61:ea:5b:3e:fb:
7a:24:aa:d1:51:c3:4b:37:8a:58:a0:ee:a1:b8:5d:
95:26:97:90:64:e2:39:b6:43:fa:88:d8:aa:97:08:
75:5d:13:a5:f4:f5:32:b3:4c:80:3a:60:ed:79:a8:
89:24:0f:d1:2a:a2:51:a9:93:57:fc:cd:33:e4:2e:
b6:bc:1f:1e:ba:e1:b8:02:d1:1c:b6:46:26:a7:ce:
f2:2b:b3:af:34:21:a3:c5:85:ea:1a:c6:36:42:0d:
d0:08:98:e1:9e:aa:f9:0f:b3:ef:e7:f0:81:37:c5:
2b:e4:85:06:e1:f2:a7:8e:a1:17:7e:a1:f8:c1:bb:
fb:50:7f:c9:bb:44:29:85:45:0f:e2:8b:6f:ab:b1:
2b:9c:16:af:b2:49:cd:17:a1:e8:1c:7e:d6:53:1d:
eb:02:76:01:46:44:6b:58:11:c3:d1:28:d3:00:9a:
ea:60:9b:68:a6:fc:54:bc:69:d7:42:07:bc:9e:f1:
25:a3:c0:09:0b:8d:0e:46:2f:cd:a1:47:8e:c6:af:
b0:16:86:d7:b1:ad:dd:fe:a1:6c:1b:7a:d0:cc:9e:
4d:aa:aa:92:78:ac:a3:26:56:a7:d7:2d:e0:b1:36:
3e:13:ee:6f:aa:3a:60:02:d0:47:90:48:1d:d4:ee:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:B4:D3:8C:59:3A:2C:86:D2:E2:48:B9:38:56:A8:13:13:8C:1C
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f5:f2:67:f7:70:78:94:f9:ba:83:c2:ad:15:21:87:58:be:
c4:81:4b:46:a0:15:50:3d:a8:e8:30:70:f6:dd:57:a1:1c:a0:
dd:fd:50:b6:8f:86:8b:d2:8b:f8:ad:a8:1b:b0:4a:8a:c4:d3:
5d:af:71:fc:ca:a9:e9:2e:64:06:cb:8d:04:e6:1d:6d:23:54:
ea:a6:8c:6e:00:df:46:2d:5c:26:55:84:d3:93:0e:00:ea:2b:
2a:1a:15:83:21:42:21:f4:53:d1:61:0f:a2:04:2f:ba:50:d9:
63:3e:b4:23:e0:7b:6e:86:96:4c:f3:28:f1:60:90:24:a5:a2:
09:b5:9e:0a:6a:c7:8d:d2:10:d1:2d:66:c9:e6:ad:fe:59:f1:
32:90:31:f8:bf:f5:53:c2:3c:73:53:ea:00:3d:72:7a:10:5a:
9c:33:22:f1:1e:88:18:01:f4:df:9a:da:75:67:2a:09:45:07:
20:a3:b2:c4:09:ed:28:ca:8f:99:fb:20:5b:a4:94:c0:5e:06:
9d:68:44:13:9d:bb:e0:61:43:97:01:8c:23:80:84:b1:99:4a:
c7:7c:99:80:eb:4c:d2:6d:41:fc:46:9f:28:b0:87:8d:04:e2:
c1:4f:89:94:22:b3:34:17:21:32:a1:37:38:d5:73:20:3e:d3:
40:41:d6:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn762LZ+VgnUqCSQL/83bQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNmMGVkNWI1Njc3YzExNTVmMmI3ODRjNmQ3M2Q4MDkz
YWYxYWEwHhcNMjUxMDE5MTAwMjExWhcNMjUxMDIwMTAwMjExWjAzMTEwLwYDVQQD
EyhiYTk5YjRkMzhjNTkzYTJjODZkMmUyNDhiOTM4NTZhODEzMTM4YzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e1j6BqtWlZeYepbPvt6JKrRUcNL
N4pYoO6huF2VJpeQZOI5tkP6iNiqlwh1XROl9PUys0yAOmDteaiJJA/RKqJRqZNX
/M0z5C62vB8euuG4AtEctkYmp87yK7OvNCGjxYXqGsY2Qg3QCJjhnqr5D7Pv5/CB
N8Ur5IUG4fKnjqEXfqH4wbv7UH/Ju0QphUUP4otvq7ErnBavsknNF6HoHH7WUx3r
AnYBRkRrWBHD0SjTAJrqYJtopvxUvGnXQge8nvElo8AJC40ORi/NoUeOxq+wFobX
sa3d/qFsG3rQzJ5NqqqSeKyjJlan1y3gsTY+E+5vqjpgAtBHkEgd1O4KWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqZtNOMWToshtLiSLk4VqgTE4wcMB8GA1UdIwQY
MBaAFAj88O1bVnfBFV8reExtc9gJOvGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUt
MWU4ZGRhZmUzYTE0LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUtMWU4ZGRhZmUzYTE0
LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/XyZ/dw
eJT5uoPCrRUhh1i+xIFLRqAVUD2o6DBw9t1XoRyg3f1Qto+Gi9KL+K2oG7BKisTT
Xa9x/Mqp6S5kBsuNBOYdbSNU6qaMbgDfRi1cJlWE05MOAOorKhoVgyFCIfRT0WEP
ogQvulDZYz60I+B7boaWTPMo8WCQJKWiCbWeCmrHjdIQ0S1myeat/lnxMpAx+L/1
U8I8c1PqAD1yehBanDMi8R6IGAH035radWcqCUUHIKOyxAntKMqPmfsgW6SUwF4G
nWhEE5274GFDlwGMI4CEsZlKx3yZgOtM0m1B/EafKLCHjQTiwU+JlCKzNBchMqE3
ONVzID7TQEHWPA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:08 2025 by rpki-client