Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: r82XTBjYbcO53GgbGV0+X8auj83qgjyW3VBDRSxvZeE=
Subject key identifier: 08:4F:96:94:28:21:A7:FD:1A:7D:2D:3E:B1:03:84:A7:EB:35:12:36
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019A51505F55702B3E1F8D4FB8A942D0F140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0A07
Signing time: Wed 05 Nov 2025 00:00:12 +0000
Manifest this update: Wed 05 Nov 2025 00:00:12 +0000
Manifest next update: Thu 06 Nov 2025 00:00:12 +0000
Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=)
2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=)
3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: QnqY38oK+rQy3vgqDKlXCdz6z87I8OAR6BNw22QsZCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:5f:55:70:2b:3e:1f:8d:4f:b8:a9:42:d0:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Nov 5 00:00:12 2025 GMT
Not After : Nov 6 00:00:12 2025 GMT
Subject: CN=084f96942821a7fd1a7d2d3eb10384a7eb351236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:34:1a:9e:35:3c:f7:9d:86:89:f2:17:a1:
c0:bc:e0:3d:80:f8:d0:09:6a:09:1e:fe:1d:6c:7d:
c9:df:7c:4e:47:04:a0:5e:2b:54:24:ce:6e:ac:19:
dd:52:1b:10:66:11:df:dc:64:ed:a6:c2:0d:e4:b9:
a2:87:f2:88:49:5e:c9:5d:6e:37:9f:e4:12:ce:e8:
9f:15:ea:ce:94:2b:52:1f:5f:ee:55:c9:42:52:55:
f4:d9:f8:2b:23:57:f6:11:29:42:37:38:e8:81:65:
12:e9:7e:9a:6d:e2:90:7e:1b:98:b7:20:5a:39:af:
0e:16:3a:8f:93:08:7b:4f:ed:ed:17:e6:70:2d:c7:
f0:c8:7d:76:ea:72:f6:ec:7c:cc:ca:4d:0a:0d:40:
5c:c5:b0:45:fa:7b:ad:28:e0:ba:69:e2:68:6b:d7:
c4:27:14:78:72:9b:b5:8c:59:44:f4:12:81:ea:5b:
cf:58:47:98:8c:f2:5a:64:a5:16:81:89:04:a4:84:
72:c1:e1:19:58:f3:34:36:31:f5:a0:d9:c7:97:57:
24:8b:37:9f:d4:4a:4b:97:9d:43:08:9b:ea:20:7e:
24:73:75:0d:79:53:79:1f:f0:8b:de:c7:fd:98:f3:
c2:9c:e8:53:dd:2e:1e:11:5c:4b:e7:4e:22:b5:fb:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4F:96:94:28:21:A7:FD:1A:7D:2D:3E:B1:03:84:A7:EB:35:12:36
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d7:90:37:ae:7d:60:89:54:77:b1:78:0f:a7:c6:7c:51:fb:
b9:5c:76:81:7f:5d:30:21:27:b0:b1:c2:05:a8:e1:18:e6:24:
af:e9:5c:9a:f8:25:bb:47:d5:11:f7:b1:10:7d:f5:0e:fb:76:
1c:b9:de:ce:44:81:f0:0d:51:3c:dd:7a:bd:33:6d:9b:c6:35:
90:d2:50:11:6b:ed:50:7b:17:b8:9d:00:8e:fc:92:3d:74:1e:
3b:ab:02:09:0d:90:88:f2:b9:0e:2a:49:3e:c3:a5:2e:31:66:
d7:26:73:5a:30:a5:9c:dd:80:d4:d0:0e:91:c1:56:d6:0a:52:
e6:cc:0c:17:05:32:65:5b:d7:db:3e:9e:a0:af:bd:f2:ce:21:
e5:5c:57:5f:64:9a:77:1d:98:25:d8:55:f9:3f:6c:f7:b6:a5:
77:52:d8:1b:01:b0:57:01:4f:39:66:fa:de:d8:98:96:bc:16:
da:69:40:03:73:71:08:76:b1:6a:01:eb:bf:69:39:d9:bd:f6:
59:a0:47:26:71:34:1a:dd:76:87:53:17:80:1c:fe:9c:57:b8:
a4:12:4d:3b:b1:4f:86:8a:d0:30:2b:02:df:13:7b:2d:a2:fa:
13:a6:a7:f4:f4:3f:08:62:1c:e3:a8:a9:8f:6f:01:da:72:79:
2a:8d:2a:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUF9VcCs+H41PuKlC0PFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmIzNTBlOWY0ZjEyNTllMmY5YzYwOWIyMmU2NWZiZDE4
NjIwNmIwHhcNMjUxMTA1MDAwMDEyWhcNMjUxMTA2MDAwMDEyWjAzMTEwLwYDVQQD
EygwODRmOTY5NDI4MjFhN2ZkMWE3ZDJkM2ViMTAzODRhN2ViMzUxMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxo0Gp41PPedhonyF6HAvOA9gPjQ
CWoJHv4dbH3J33xORwSgXitUJM5urBndUhsQZhHf3GTtpsIN5Lmih/KISV7JXW43
n+QSzuifFerOlCtSH1/uVclCUlX02fgrI1f2ESlCNzjogWUS6X6abeKQfhuYtyBa
Oa8OFjqPkwh7T+3tF+ZwLcfwyH126nL27HzMyk0KDUBcxbBF+nutKOC6aeJoa9fE
JxR4cpu1jFlE9BKB6lvPWEeYjPJaZKUWgYkEpIRyweEZWPM0NjH1oNnHl1ckizef
1EpLl51DCJvqIH4kc3UNeVN5H/CL3sf9mPPCnOhT3S4eEVxL504itfu0iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhPlpQoIaf9Gn0tPrEDhKfrNRI2MB8GA1UdIwQY
MBaAFHJrNQ6fTxJZ4vnGCbIuZfvRhiBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYt
YTAwNzJiYWM5ZjQ4LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYtYTAwNzJiYWM5ZjQ4
LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9eQN659
YIlUd7F4D6fGfFH7uVx2gX9dMCEnsLHCBajhGOYkr+lcmvglu0fVEfexEH31Dvt2
HLnezkSB8A1RPN16vTNtm8Y1kNJQEWvtUHsXuJ0AjvySPXQeO6sCCQ2QiPK5DipJ
PsOlLjFm1yZzWjClnN2A1NAOkcFW1gpS5swMFwUyZVvX2z6eoK+98s4h5VxXX2Sa
dx2YJdhV+T9s97ald1LYGwGwVwFPOWb63tiYlrwW2mlAA3NxCHaxagHrv2k52b32
WaBHJnE0Gt12h1MXgBz+nFe4pBJNO7FPhorQMCsC3xN7LaL6E6an9PQ/CGIc46ip
j28B2nJ5Ko0q8w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:13:49 2025 by rpki-client