Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: S+lPCGIYRBt8a7talBQEj3/kZ3E6lVmb0ueOOjF6XsY=
Subject key identifier: A1:97:53:1C:72:2D:0F:B9:36:A8:BD:92:16:20:C5:DD:10:2D:D2:1F
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 019A4D061B754ED86D00D070B3171BC5A2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 114D
Signing time: Tue 04 Nov 2025 04:00:37 +0000
Manifest this update: Tue 04 Nov 2025 04:00:37 +0000
Manifest next update: Wed 05 Nov 2025 04:00:37 +0000
Files and hashes: 1: F6TRgo1Qxqb0z2HOICITaJq6vVA.roa (hash: HB4jpWzWtSDjiUJivZqFCyvc7yAlpLdjecgjjSvTmVc=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: zVCjBN7q9FHirLP/1x6FdtOd8G7kKRZ0xVQSVyVbvEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:1b:75:4e:d8:6d:00:d0:70:b3:17:1b:c5:a2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Nov 4 04:00:37 2025 GMT
Not After : Nov 5 04:00:37 2025 GMT
Subject: CN=a197531c722d0fb936a8bd921620c5dd102dd21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:e9:a1:e0:25:64:5f:e9:06:7c:c2:d2:62:
61:d2:f1:d3:01:fe:f0:7e:05:89:e2:5d:f2:6d:98:
29:37:5f:c2:4f:a9:1a:0a:93:df:69:b8:82:b0:2b:
b0:9c:06:42:aa:a4:e6:23:a9:42:0c:9c:6f:b9:96:
13:46:ac:87:ef:bb:66:6a:24:ed:33:c2:bf:2d:3d:
9a:cc:dd:7e:a3:15:f4:45:2d:44:5c:12:73:2e:27:
8f:7d:7a:f1:7c:b5:a5:72:df:6f:cd:5a:10:43:17:
a1:73:30:4b:81:ac:d2:42:bc:d5:1c:6f:d8:9c:13:
75:a6:a5:fe:a7:f9:93:90:f1:28:d4:22:2d:2b:7b:
58:65:87:06:86:a9:c8:1f:e2:1e:59:9c:53:c6:15:
c3:17:e7:ce:54:89:2e:73:85:b5:3e:51:f6:63:f2:
8e:dd:8c:55:65:a7:96:3c:89:f9:b3:26:71:00:08:
c8:5e:06:ba:b8:9c:1a:72:d0:40:f6:5b:7c:1f:e7:
45:96:f2:77:82:03:9f:8e:24:01:84:36:ae:94:ec:
08:c8:8d:a1:47:ba:08:ad:ad:78:ce:31:b3:8b:66:
b0:0c:13:b3:4a:3c:ac:24:e7:1c:92:b6:e9:6f:9b:
fd:56:d6:81:cb:f7:e0:79:79:b5:64:50:ce:41:4d:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:97:53:1C:72:2D:0F:B9:36:A8:BD:92:16:20:C5:DD:10:2D:D2:1F
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e9:6a:a1:4a:98:d5:30:91:43:0e:b4:b8:cb:cf:a6:14:cb:
ee:62:25:dc:39:28:8a:6f:b6:6c:a4:bf:40:7e:b7:b1:9a:60:
3f:27:da:b0:cf:19:62:8b:b8:d8:5d:6e:1f:d0:3a:01:d4:36:
86:6c:10:be:c2:a9:fe:93:a4:9c:09:3c:f0:71:0d:a8:94:34:
04:ae:f4:46:ab:f9:f4:43:72:ce:ca:45:4c:52:ee:ea:a4:d9:
5a:9e:bf:3a:e8:b3:a7:80:74:ee:19:f2:08:46:b4:58:7a:67:
f6:9e:29:dd:5d:84:0b:4f:45:46:a8:62:99:9d:3b:af:1e:6f:
3a:59:38:13:f9:43:e9:c0:c7:03:07:4f:e1:61:ea:24:c4:5a:
b9:df:d0:3a:75:e4:89:bd:50:cd:de:57:61:4a:6a:27:aa:5f:
eb:5b:ca:de:ae:22:58:0d:66:23:c2:b6:84:9c:c2:21:28:0c:
c3:8a:a3:4c:b1:fe:87:9b:55:2b:d9:7e:ad:a9:18:3b:a9:f4:
95:8e:95:9e:9c:8f:04:c8:96:8d:26:44:31:bf:e8:11:f9:c5:
3c:a9:7d:3a:b0:ec:d7:7d:bc:e2:2e:4c:07:82:1e:d3:58:48:
2c:e0:27:2b:85:fc:24:f8:f9:15:c0:2b:09:fe:8d:b5:83:24:
38:e9:15:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBht1TthtANBwsxcbxaKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxY2VjMjY5Zjg0ZDU2NDFmZjYzYTYzZDFmMzk5N2M4Y2Zk
NGZlMjgwHhcNMjUxMTA0MDQwMDM3WhcNMjUxMTA1MDQwMDM3WjAzMTEwLwYDVQQD
EyhhMTk3NTMxYzcyMmQwZmI5MzZhOGJkOTIxNjIwYzVkZDEwMmRkMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4bpoeAlZF/pBnzC0mJh0vHTAf7w
fgWJ4l3ybZgpN1/CT6kaCpPfabiCsCuwnAZCqqTmI6lCDJxvuZYTRqyH77tmaiTt
M8K/LT2azN1+oxX0RS1EXBJzLiePfXrxfLWlct9vzVoQQxehczBLgazSQrzVHG/Y
nBN1pqX+p/mTkPEo1CItK3tYZYcGhqnIH+IeWZxTxhXDF+fOVIkuc4W1PlH2Y/KO
3YxVZaeWPIn5syZxAAjIXga6uJwactBA9lt8H+dFlvJ3ggOfjiQBhDaulOwIyI2h
R7oIra14zjGzi2awDBOzSjysJOcckrbpb5v9VtaBy/fgeXm1ZFDOQU2ArwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGXUxxyLQ+5Nqi9khYgxd0QLdIfMB8GA1UdIwQY
MBaAFHHOwmn4TVZB/2OmPR85l8jP1P4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUt
YTc2MmU5YzBkZDMyLzEvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUtYTc2MmU5YzBkZDMy
LzEvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+lqoUqY
1TCRQw60uMvPphTL7mIl3Dkoim+2bKS/QH63sZpgPyfasM8ZYou42F1uH9A6AdQ2
hmwQvsKp/pOknAk88HENqJQ0BK70Rqv59ENyzspFTFLu6qTZWp6/Ouizp4B07hny
CEa0WHpn9p4p3V2EC09FRqhimZ07rx5vOlk4E/lD6cDHAwdP4WHqJMRaud/QOnXk
ib1Qzd5XYUpqJ6pf61vK3q4iWA1mI8K2hJzCISgMw4qjTLH+h5tVK9l+rakYO6n0
lY6VnpyPBMiWjSZEMb/oEfnFPKl9OrDs13284i5MB4Ie01hILOAnK4X8JPj5FcAr
Cf6NtYMkOOkVNQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:06 2025 by rpki-client