Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: CjmgbtG7rPEObq72+G/MJ+pHLsEw6rvSeYiuN4gAQZo=
Subject key identifier: 70:20:51:74:06:5B:95:34:56:B0:96:2C:0C:FB:E2:27:44:E5:9D:53
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019A5006F1E0DFDFDD66BB752BD3B9F3258A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 18:00:23 +0000
Manifest this update: Tue 04 Nov 2025 18:00:23 +0000
Manifest next update: Wed 05 Nov 2025 18:00:23 +0000
Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=)
2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: uN82qzHpdWDMMdFcjb6zeo6CEJXP247kuCWqHc2RZ10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:f1:e0:df:df:dd:66:bb:75:2b:d3:b9:f3:25:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Nov 4 18:00:23 2025 GMT
Not After : Nov 5 18:00:23 2025 GMT
Subject: CN=70205174065b953456b0962c0cfbe22744e59d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:2b:da:02:db:7a:bb:c8:82:55:66:b9:39:
86:d4:12:75:0a:ec:64:ae:3e:56:06:50:07:5f:e2:
eb:28:ea:2f:5a:1e:0d:6e:8c:99:03:38:16:76:6b:
47:58:5e:f3:1d:df:da:7a:c2:fb:fd:39:46:7a:c9:
c4:b3:9d:e8:98:e4:90:52:45:ce:54:40:39:14:5b:
4e:2c:ed:2d:88:fb:55:5d:0d:50:8b:a8:23:63:bf:
25:81:4e:8a:e3:fa:e4:2c:df:f7:8d:ff:02:52:a5:
c2:53:5e:b4:c6:32:9d:4d:0e:fc:f9:03:b1:bf:53:
7d:cd:dd:9c:7f:6c:1e:3b:0f:34:f2:ad:9e:84:f3:
00:c2:16:ec:cb:2e:9d:19:96:3d:5c:7d:27:bc:41:
74:03:5d:ef:f4:7f:34:f7:56:a4:87:60:b3:5d:31:
19:1a:bb:ad:df:4c:3b:3b:ab:8c:67:58:72:b7:72:
cb:33:eb:33:45:82:f3:c3:eb:59:89:6e:88:7c:83:
a9:6b:9d:ef:08:72:29:97:aa:f9:92:a6:ca:27:14:
a3:3d:44:2b:fa:de:3f:91:d0:12:c4:53:24:e2:19:
fc:14:7f:17:5d:07:c1:f6:a2:fb:a4:e3:56:bc:76:
d3:41:02:b0:8c:4b:ff:f9:06:a6:1f:81:65:ce:c3:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:20:51:74:06:5B:95:34:56:B0:96:2C:0C:FB:E2:27:44:E5:9D:53
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8a:37:c7:c4:28:37:25:a6:bc:12:a2:ca:6e:e7:d1:36:2d:
9b:46:d8:31:7f:67:e8:cb:f5:da:82:9d:75:73:3c:1f:16:a3:
ba:83:e6:10:e3:52:b6:18:25:87:7f:fb:b0:52:22:cb:49:ed:
e5:d0:ad:b6:68:9c:17:68:30:01:5c:be:ff:88:c9:3c:6a:99:
4b:fe:14:7d:99:5a:75:84:43:12:35:3b:28:a8:22:5b:35:41:
63:50:9c:3b:56:a2:56:86:ae:82:f2:4e:97:ae:16:12:3e:4e:
cf:87:a4:24:29:35:00:e4:ba:91:d3:06:7e:92:72:c7:b2:1d:
e6:dd:8b:78:42:90:94:bc:8e:36:9c:71:9f:e6:9d:19:d4:c5:
23:f4:52:06:99:04:03:69:cc:bf:6b:12:17:39:5f:9f:b8:58:
5d:2e:35:14:df:39:6c:8f:9a:c9:74:57:8f:c4:f1:69:d0:be:
13:cc:40:f6:aa:91:b9:5a:67:0c:33:47:f6:62:9f:5a:15:36:
e0:ac:22:90:6b:79:28:3e:5e:1f:45:a4:36:ce:9c:a6:87:78:
aa:84:ff:14:98:c3:c8:ed:9b:9d:94:6c:e4:d1:df:be:f1:80:
fa:92:14:97:be:f5:f9:87:5c:99:19:33:6b:75:ae:28:05:8e:
d1:89:f2:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBvHg39/dZrt1K9O58yWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTkwZWVmOWUxZDFhZjhiNzJlNTE4ZWM2Y2NmNTljZDdm
NzUxZjUwHhcNMjUxMTA0MTgwMDIzWhcNMjUxMTA1MTgwMDIzWjAzMTEwLwYDVQQD
Eyg3MDIwNTE3NDA2NWI5NTM0NTZiMDk2MmMwY2ZiZTIyNzQ0ZTU5ZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5Yr2gLbervIglVmuTmG1BJ1Cuxk
rj5WBlAHX+LrKOovWh4NboyZAzgWdmtHWF7zHd/aesL7/TlGesnEs53omOSQUkXO
VEA5FFtOLO0tiPtVXQ1Qi6gjY78lgU6K4/rkLN/3jf8CUqXCU160xjKdTQ78+QOx
v1N9zd2cf2weOw808q2ehPMAwhbsyy6dGZY9XH0nvEF0A13v9H8091akh2CzXTEZ
Grut30w7O6uMZ1hyt3LLM+szRYLzw+tZiW6IfIOpa53vCHIpl6r5kqbKJxSjPUQr
+t4/kdASxFMk4hn8FH8XXQfB9qL7pONWvHbTQQKwjEv/+QamH4FlzsPh1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAgUXQGW5U0VrCWLAz74idE5Z1TMB8GA1UdIwQY
MBaAFAlZDu+eHRr4ty5RjsbM9ZzX91H1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYt
ZTRkOGNmNzMzZWM5LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYtZTRkOGNmNzMzZWM5
LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoo3x8Qo
NyWmvBKiym7n0TYtm0bYMX9n6Mv12oKddXM8HxajuoPmEONSthglh3/7sFIiy0nt
5dCttmicF2gwAVy+/4jJPGqZS/4UfZladYRDEjU7KKgiWzVBY1CcO1aiVoaugvJO
l64WEj5Oz4ekJCk1AOS6kdMGfpJyx7Id5t2LeEKQlLyONpxxn+adGdTFI/RSBpkE
A2nMv2sSFzlfn7hYXS41FN85bI+ayXRXj8TxadC+E8xA9qqRuVpnDDNH9mKfWhU2
4KwikGt5KD5eH0WkNs6cpod4qoT/FJjDyO2bnZRs5NHfvvGA+pIUl771+YdcmRkz
a3WuKAWO0Ynydg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:48:43 2025 by rpki-client