
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier: 9PW+8b9Mbw6kFKNw+Xtp0JIHRx8zozTxTXkx1VqnQbQ=
Subject key identifier: 53:6B:1E:2A:DB:25:3D:EB:FC:AD:B2:15:32:5A:15:0B:A0:9A:34:76
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 0199FC21BC9AB0534CFF4552897F31484C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: BE6iIPIX8zFmJc8BbYvpzoakrXE.roa (hash: zyf1exZFAT4j17OLfHltxLPlTiiX5aqGBHkZByoGZDo=)
2: TJJQIxFkBPcclxKSiBSE29OWp44.roa (hash: o//SaNRJoAMIebEbxmORe+ZFOyk3uvF1gz9qkdqBZAw=)
3: W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa (hash: IRDGgxnAqqWapeedP2vWmhEF4xJ1dwTUzVZaEKAfNbA=)
4: btlTysPNtSD16VvTDGwPRcFNQTA.roa (hash: 4GOMdcwUufKF7whyj8s9iAkFjKwaMeqK7FyHtxPB+Hs=)
5: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: HMLzYvAznpBmyMibLh2h1pH59RTtmPqSu0R8T8/RRN4=)
6: dRVNIEivbcvCfy8ob6dWGU0J1O4.roa (hash: ts72C0/LCxBdmdNjvI5bOvMgVAWjg8chP/9czsk1hCI=)
7: fxey-d2NI5gsqRXb0UikDcRQ4Hk.roa (hash: mnGLtOe1Pde5CCQx8NNLqfN+Rs/Jpu9t/4yCNDHWIJo=)
8: qOUhVI1G4SW4_rAdHVZjiGEJEhc.roa (hash: mLpbGQvUh3BNlZYktMPLqJ4KDfxwOCyR9t25dQjnDY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bc:9a:b0:53:4c:ff:45:52:89:7f:31:48:4c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=536b1e2adb253debfcadb215325a150ba09a3476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:15:97:88:93:a1:0d:2d:cd:8b:7f:aa:53:a0:
1e:9e:91:fa:2c:b9:f2:ae:6f:b6:0a:fc:39:3a:7f:
97:29:e0:f9:24:22:6d:ad:71:7f:c9:ae:03:34:db:
e1:79:03:95:56:0a:0a:33:44:22:ee:46:d3:43:c6:
dc:05:0b:7e:cc:55:e6:c2:dc:de:0a:61:85:3d:e9:
a7:a4:95:5c:72:cb:b1:1e:0d:b5:9e:be:1b:72:d9:
f0:43:12:b4:e6:c5:4c:e1:61:a7:e3:46:48:f8:6f:
ab:d2:9f:1b:25:b6:59:51:2e:19:a6:18:53:f9:88:
8d:12:a3:f1:a9:2d:1e:62:4d:8b:99:39:0b:a8:03:
88:64:d4:51:35:c2:63:3a:fc:85:0a:32:e7:59:af:
f9:84:23:d9:d5:c6:6c:b5:ec:c6:0b:7c:16:3f:d0:
19:23:b8:1a:1e:92:de:a5:cd:39:04:3a:cd:96:f4:
df:ec:a6:bc:b4:f9:49:35:7d:e5:f8:34:41:b1:9c:
fa:c9:83:da:01:d1:33:54:99:ae:bc:40:49:9a:b0:
94:c0:9d:c5:68:9b:27:da:ba:ac:91:c5:47:a1:6c:
8e:8b:b0:1f:1a:f3:9c:16:3b:1b:48:f2:cb:0b:b9:
72:11:eb:fc:1c:ef:fe:22:0e:f8:41:26:27:11:4d:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6B:1E:2A:DB:25:3D:EB:FC:AD:B2:15:32:5A:15:0B:A0:9A:34:76
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:59:9f:5e:34:5e:c5:73:2c:e8:11:49:2d:15:46:65:55:b2:
06:b0:d9:98:dd:05:f0:03:f9:94:66:b0:41:c1:2a:8f:87:06:
e6:9a:00:38:37:57:15:f7:b3:07:f6:62:d6:86:a7:47:5c:cc:
9a:3d:62:02:3f:11:8d:a5:06:72:ef:54:cc:a3:f2:9a:b8:63:
39:a2:45:fd:9a:d1:e4:09:cb:8e:e3:6d:1a:a6:5d:58:bb:2c:
76:0b:9f:c1:d5:5c:80:28:84:b4:20:34:d0:dc:75:c6:a7:71:
fb:d7:89:36:0f:07:57:6a:45:e1:96:c5:13:0c:1e:bf:3b:5e:
b9:92:44:63:5b:df:63:4f:c0:ba:34:92:bc:b1:92:57:00:e3:
fa:71:7c:f8:58:47:c8:b0:2a:73:f1:88:46:f2:82:58:58:65:
eb:d9:c0:e7:7a:10:1b:ad:61:be:1a:70:80:21:16:26:65:00:
ca:a3:c7:a3:f8:02:e1:36:df:67:d9:ca:25:90:a3:b6:bc:f2:
1a:2b:c7:65:00:91:94:6e:56:0d:33:4d:fb:fa:f6:64:ff:ab:
18:bb:26:1a:d9:16:23:0e:2e:24:af:a4:55:b4:f9:1f:c7:28:
c6:1c:ca:8b:6c:be:cc:47:29:74:eb:31:0c:8b:13:f4:98:8f:
79:f7:dd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:04 2025 by rpki-client