Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: ZIZdUUfaXzoZ018KgOYa9bCw5/x8CRxCY6mMs6jp52s=
Subject key identifier: 67:8C:9D:F8:D2:46:00:E3:85:94:C8:6C:40:35:9F:88:18:EC:DF:00
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 0199FB45ECBF147C0E8FFA3350894E76A051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0B20
Signing time: Sun 19 Oct 2025 07:01:27 +0000
Manifest this update: Sun 19 Oct 2025 07:01:27 +0000
Manifest next update: Mon 20 Oct 2025 07:01:27 +0000
Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: Id5enGtWhMzhjaYOKpYkCE/eKubOFf2ciDJGI5G18yY=)
2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ec:bf:14:7c:0e:8f:fa:33:50:89:4e:76:a0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Oct 19 07:01:27 2025 GMT
Not After : Oct 20 07:01:27 2025 GMT
Subject: CN=678c9df8d24600e38594c86c40359f8818ecdf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:ff:79:68:55:04:58:96:25:31:bd:09:db:
fe:d9:64:96:07:a1:2c:32:40:0f:fd:33:22:25:9f:
07:e2:4a:50:d2:c2:ab:44:ca:f8:b2:f5:e5:97:a8:
6a:b1:29:07:7c:5f:bd:c6:78:ce:78:56:cc:f2:f6:
ea:8b:e1:d5:62:aa:d7:8b:75:d0:5f:c1:4a:cb:2d:
8d:0e:4b:28:a5:ea:06:25:f2:2c:c0:0f:12:bd:f4:
63:b0:73:f0:b9:1a:a0:2b:8d:7e:39:ef:e6:56:fb:
d2:d6:25:1c:aa:90:fb:43:3b:25:17:55:1e:26:39:
76:35:44:ef:8d:09:51:1a:66:c5:6b:d6:1f:2a:2a:
7f:d4:29:e4:05:99:ed:bf:e5:36:33:db:b6:c2:c5:
67:b6:a7:59:8b:93:33:8b:c4:f4:11:cd:93:ce:6f:
ef:53:6c:0c:fe:1d:03:ad:5e:60:88:b1:d4:21:9c:
94:eb:4c:6d:2d:f7:ef:f6:4d:eb:d7:7d:90:b5:94:
37:b1:29:4c:22:90:40:a6:c7:0a:d7:55:a6:7d:10:
28:bc:a1:7f:eb:d1:e8:e8:41:b2:fe:36:e3:25:97:
a1:e3:f2:99:d6:bf:81:09:fb:8b:46:b4:22:4b:41:
08:62:2a:6c:dd:8b:dd:3d:59:7b:74:fe:24:3a:87:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8C:9D:F8:D2:46:00:E3:85:94:C8:6C:40:35:9F:88:18:EC:DF:00
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7d:44:22:4a:aa:74:61:a3:63:3d:30:4a:51:54:49:e1:98:
2a:0e:30:18:4a:88:ef:4a:dd:e3:e9:92:70:82:ae:e2:94:40:
75:3f:85:00:9e:40:3c:4e:c2:b5:2d:a6:25:74:d3:7a:02:51:
9b:e4:99:a1:f3:dd:7a:d6:1f:27:a1:e0:4f:4f:60:05:48:61:
c4:79:4a:27:66:4d:36:ea:99:00:17:20:60:82:6a:4b:9e:48:
58:23:9c:2b:e4:2e:a1:99:e2:08:55:f5:ef:5a:7e:5b:43:64:
45:7a:3d:42:f3:10:00:ea:de:de:7d:dc:b2:00:be:69:91:c9:
89:47:27:d1:9b:26:af:70:1b:ad:09:ba:82:d4:6f:90:b3:ae:
90:00:f3:1a:a0:ac:55:9a:10:a9:96:ff:be:99:ce:ea:15:99:
85:49:01:a7:54:ab:91:d7:6e:b1:69:5b:51:1b:66:95:c8:6b:
9f:23:de:b9:50:04:f5:09:ef:43:50:b9:fc:d5:7a:25:10:9f:
3a:b8:9f:69:8a:b3:2c:9f:ec:28:fa:5c:86:9e:e5:a2:a9:46:
4d:d5:c8:f6:73:b7:53:fe:11:42:42:81:b6:9d:15:8d:1b:ad:
13:3b:ad:1c:13:71:b4:2e:38:f5:37:ea:1b:89:52:45:6c:54:
2b:91:aa:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rey/FHwOj/ozUIlOdqBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzhlNzU2MzVhMDlkY2MwM2Y2MjVhODBiZmE1NTJiMjJl
MzY2MmMwHhcNMjUxMDE5MDcwMTI3WhcNMjUxMDIwMDcwMTI3WjAzMTEwLwYDVQQD
Eyg2NzhjOWRmOGQyNDYwMGUzODU5NGM4NmM0MDM1OWY4ODE4ZWNkZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr3/eWhVBFiWJTG9Cdv+2WSWB6Es
MkAP/TMiJZ8H4kpQ0sKrRMr4svXll6hqsSkHfF+9xnjOeFbM8vbqi+HVYqrXi3XQ
X8FKyy2NDksopeoGJfIswA8SvfRjsHPwuRqgK41+Oe/mVvvS1iUcqpD7QzslF1Ue
Jjl2NUTvjQlRGmbFa9YfKip/1CnkBZntv+U2M9u2wsVntqdZi5Mzi8T0Ec2Tzm/v
U2wM/h0DrV5giLHUIZyU60xtLffv9k3r132QtZQ3sSlMIpBApscK11WmfRAovKF/
69Ho6EGy/jbjJZeh4/KZ1r+BCfuLRrQiS0EIYips3YvdPVl7dP4kOocjfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeMnfjSRgDjhZTIbEA1n4gY7N8AMB8GA1UdIwQY
MBaAFHB451Y1oJ3MA/YlqAv6VSsi42YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAt
NTM4YjQ3NzA5OTU2LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAtNTM4YjQ3NzA5OTU2
LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw31EIkqq
dGGjYz0wSlFUSeGYKg4wGEqI70rd4+mScIKu4pRAdT+FAJ5APE7CtS2mJXTTegJR
m+SZofPdetYfJ6HgT09gBUhhxHlKJ2ZNNuqZABcgYIJqS55IWCOcK+QuoZniCFX1
71p+W0NkRXo9QvMQAOre3n3csgC+aZHJiUcn0Zsmr3AbrQm6gtRvkLOukADzGqCs
VZoQqZb/vpnO6hWZhUkBp1SrkddusWlbURtmlchrnyPeuVAE9QnvQ1C5/NV6JRCf
OrifaYqzLJ/sKPpchp7loqlGTdXI9nO3U/4RQkKBtp0VjRutEzutHBNxtC449Tfq
G4lSRWxUK5GqnQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:00 2025 by rpki-client