Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: m2gisZPf30AuO8hfUjpDU+8nz1QHJrMvu37NDsKIndQ=
Subject key identifier: CB:07:86:71:6F:A2:19:D2:E8:C7:23:BB:E4:6D:E7:62:91:F2:9F:98
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019A50070104A7DCF7693ADC4322BAAE3E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 18:00:27 +0000
Manifest this update: Tue 04 Nov 2025 18:00:27 +0000
Manifest next update: Wed 05 Nov 2025 18:00:27 +0000
Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=)
2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=)
3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=)
4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=)
5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=)
6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: B/7Q00rtKq9cCcMsDWIdHaGxeOWaRSs/3hUy8NbJNgw=)
8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=)
9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:01:04:a7:dc:f7:69:3a:dc:43:22:ba:ae:3e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Nov 4 18:00:27 2025 GMT
Not After : Nov 5 18:00:27 2025 GMT
Subject: CN=cb0786716fa219d2e8c723bbe46de76291f29f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:27:f5:6f:04:5d:34:93:ec:d0:2e:ba:40:
a6:68:12:1d:99:20:df:66:35:9d:8f:c9:07:af:73:
b8:e9:40:8c:a7:82:b8:c2:9a:65:6f:77:c0:44:bf:
6b:00:1e:13:43:4d:55:1c:61:4b:37:d9:3c:3a:93:
3a:25:86:34:a5:18:ef:f3:2e:2b:5d:63:d2:d6:64:
55:97:4b:f4:65:fe:f1:27:e2:3d:8d:7e:a9:25:70:
0f:84:09:6f:d7:0e:04:e9:01:2f:3d:0a:12:0c:25:
fe:74:7f:80:c5:b9:f9:c1:c8:a3:73:7f:32:63:2e:
a5:83:b4:eb:16:14:f9:f5:f3:9b:ee:e4:2b:47:dc:
15:7c:c0:a2:c5:7e:c2:ec:05:7a:1c:dc:23:0f:67:
2d:8a:ab:3d:5b:6d:e5:fd:d3:10:8c:1b:6c:83:7c:
ed:05:4d:cf:38:0c:48:80:c8:eb:30:da:df:3b:71:
4a:56:a2:3c:9f:33:ee:ea:73:25:71:f8:f1:64:fa:
ff:f2:71:10:e4:79:5f:24:b9:08:c9:e9:41:08:c1:
55:7b:39:5b:51:f0:f9:43:5d:fe:34:bb:e9:a2:eb:
67:76:c7:18:90:f9:0a:67:44:7f:31:06:d5:83:cf:
c9:55:e8:e5:0d:02:0e:b8:0d:23:d1:67:8e:3f:bd:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:07:86:71:6F:A2:19:D2:E8:C7:23:BB:E4:6D:E7:62:91:F2:9F:98
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d3:58:25:f3:6e:62:52:0f:e7:21:e0:7f:4d:87:62:29:c1:
46:7e:74:03:d9:9a:5f:ac:c1:29:e6:3c:62:96:e7:94:71:c9:
7f:80:ed:80:ae:dc:7f:22:bf:ff:0b:34:06:5e:aa:00:8b:23:
b6:a2:41:0f:fd:3d:0d:04:de:88:4e:08:7d:26:02:fb:17:98:
07:5c:f8:2f:58:df:c5:39:0f:ea:5f:2f:5f:5e:ca:11:f1:86:
8c:9b:27:24:81:90:bc:52:ab:c8:cc:4f:82:0c:13:15:07:6b:
11:86:af:2e:65:28:f2:bb:f3:ee:a5:0d:6b:a8:d7:1a:b3:86:
b7:3d:1c:3f:5f:48:60:01:ff:6c:88:53:e8:44:82:06:79:28:
52:0d:d0:5a:6d:aa:32:86:39:90:ef:75:4d:8e:c6:18:ec:92:
19:b2:b2:f7:a9:06:45:62:0f:40:00:f5:df:b9:d9:d2:fd:80:
f1:46:44:44:c4:77:fd:56:d8:d7:b7:06:0d:12:27:b4:c1:2e:
0b:5d:c7:1a:61:95:26:8c:d5:95:16:54:4a:48:2b:8c:b7:f6:
dd:6d:45:a0:80:c1:59:c1:de:5b:82:f2:a6:5c:fa:e7:c5:6e:
c1:d8:0e:a9:47:73:0b:a8:82:b4:31:fe:3d:3d:ad:62:57:52:
d7:04:80:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBwEEp9z3aTrcQyK6rj44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk
ZDVjNGIwHhcNMjUxMTA0MTgwMDI3WhcNMjUxMTA1MTgwMDI3WjAzMTEwLwYDVQQD
EyhjYjA3ODY3MTZmYTIxOWQyZThjNzIzYmJlNDZkZTc2MjkxZjI5Zjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDQn9W8EXTST7NAuukCmaBIdmSDf
ZjWdj8kHr3O46UCMp4K4wpplb3fARL9rAB4TQ01VHGFLN9k8OpM6JYY0pRjv8y4r
XWPS1mRVl0v0Zf7xJ+I9jX6pJXAPhAlv1w4E6QEvPQoSDCX+dH+Axbn5wcijc38y
Yy6lg7TrFhT59fOb7uQrR9wVfMCixX7C7AV6HNwjD2ctiqs9W23l/dMQjBtsg3zt
BU3POAxIgMjrMNrfO3FKVqI8nzPu6nMlcfjxZPr/8nEQ5HlfJLkIyelBCMFVezlb
UfD5Q13+NLvpoutndscYkPkKZ0R/MQbVg8/JVejlDQIOuA0j0WeOP72PFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsHhnFvohnS6Mcju+Rt52KR8p+YMB8GA1UdIwQY
MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt
NzYxMGFhYmFhMjc0LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0
LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNNYJfNu
YlIP5yHgf02HYinBRn50A9maX6zBKeY8YpbnlHHJf4DtgK7cfyK//ws0Bl6qAIsj
tqJBD/09DQTeiE4IfSYC+xeYB1z4L1jfxTkP6l8vX17KEfGGjJsnJIGQvFKryMxP
ggwTFQdrEYavLmUo8rvz7qUNa6jXGrOGtz0cP19IYAH/bIhT6ESCBnkoUg3QWm2q
MoY5kO91TY7GGOySGbKy96kGRWIPQAD137nZ0v2A8UZERMR3/VbY17cGDRIntMEu
C13HGmGVJozVlRZUSkgrjLf23W1FoIDBWcHeW4Lyplz658VuwdgOqUdzC6iCtDH+
PT2tYldS1wSAgw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:06 2025 by rpki-client