Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier: CW8RVpopCfj9uzr1i0+9RKE5Uqw/lArqUjddBUhBkxw=
Subject key identifier: 97:91:9D:E3:0C:97:81:E5:FF:52:CF:89:44:07:77:28:5A:3E:6A:20
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 019A511987215559F4360DBF450F63DCDF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number: 0162
Signing time: Tue 04 Nov 2025 23:00:18 +0000
Manifest this update: Tue 04 Nov 2025 23:00:18 +0000
Manifest next update: Wed 05 Nov 2025 23:00:18 +0000
Files and hashes: 1: Oplxdwrz2tj49hUWFKVUBYlZ3BU.roa (hash: GxmLkOEt5gK3qfSa1llVLKux6EH+FwaJgU6VGKajc/A=)
2: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: KfgpTjonZJmyn6ar8YNNKcVkr82ssJLPj1Ckwx8+T8k=)
3: ghNDZNJhpYP_Htc1Wek-L5R4BeI.roa (hash: R8J6wlPRCV7dUDvscKB1CZV2169wkfxGRLHSAdA+H2w=)
4: l3EQEBZnleFof5yb88UhTSSdRTM.roa (hash: UQRjHQuRnFXbfdwyx6MJct5Sj+7na+HTqU/QptK8INI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:87:21:55:59:f4:36:0d:bf:45:0f:63:dc:df:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Nov 4 23:00:18 2025 GMT
Not After : Nov 5 23:00:18 2025 GMT
Subject: CN=97919de30c9781e5ff52cf89440777285a3e6a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:c5:c0:0f:a3:6d:7c:f0:6a:41:b0:c2:5a:
9b:b4:99:c3:d0:51:ae:4c:71:4c:19:96:eb:5e:88:
07:01:1a:84:70:49:06:31:73:5e:8e:9d:19:4c:78:
22:d9:11:b8:74:36:ba:f0:13:4d:1b:57:a9:69:43:
98:25:d8:55:0e:10:69:b6:ed:aa:54:48:8c:9b:01:
6f:b4:11:c1:83:ab:ba:26:39:de:e2:44:af:bd:45:
d7:5f:0f:0f:2c:d5:5e:5b:e2:94:72:a1:7a:87:18:
96:be:7c:70:ae:f3:24:94:f1:a9:78:94:9f:85:8e:
89:55:46:ed:a9:01:bb:b2:27:c5:70:9e:5e:5b:41:
ef:13:0b:91:93:05:d3:71:97:08:f0:e1:25:74:9d:
1e:b3:f8:4b:3d:7f:e2:f9:04:a3:ed:ec:54:70:24:
c7:b6:a7:78:8a:f0:ef:ea:24:77:c3:14:65:c1:2b:
30:08:62:2d:60:a2:90:d6:7d:c7:a2:e8:7a:7a:cb:
5d:4f:2f:26:61:d2:f0:a6:ca:f0:82:a8:e8:9c:a8:
ab:8d:79:54:f2:5e:4b:92:a6:06:e5:25:ef:34:80:
a9:67:f1:74:79:61:82:00:97:33:34:c6:25:f4:e9:
88:b1:79:d3:2f:09:d7:d2:63:84:5d:6c:45:0d:c0:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:91:9D:E3:0C:97:81:E5:FF:52:CF:89:44:07:77:28:5A:3E:6A:20
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5c:9d:3e:ab:5a:34:6c:a5:30:ab:c1:d9:27:12:ad:46:8f:
b2:0d:4b:f4:2e:28:0e:94:5e:9b:dd:eb:b5:21:5d:32:71:b3:
e4:b6:a6:0e:80:b5:bb:d0:8d:15:d3:d5:29:58:8d:96:c2:1b:
cc:2e:42:d9:ce:a0:0f:32:6b:be:7d:71:9b:f1:45:a6:1c:63:
59:bc:52:75:58:1c:3a:4e:5c:f1:f5:c3:9c:40:bd:21:61:17:
f6:86:2b:4f:5b:31:fa:ae:87:c3:81:58:18:b4:0b:1e:9c:29:
6c:40:2c:a1:fc:a0:7f:db:74:a0:15:be:7d:c3:c5:5d:4a:03:
13:16:5d:0f:ed:68:3b:7c:6e:e1:50:ce:6e:a9:ab:a0:33:65:
4f:3f:18:9d:90:1f:a1:b6:04:71:dd:33:5d:3b:59:fb:08:c0:
a6:ed:37:2e:f0:55:8e:10:bc:1b:27:56:f9:a3:36:04:18:1b:
9f:f2:ce:ec:a3:5f:17:c1:52:ae:2a:4c:d9:d0:91:04:f9:38:
6a:73:15:b4:ee:5f:b5:a4:14:87:84:25:a6:6c:7f:ce:14:8a:
08:51:16:0d:1a:6b:00:87:1c:e5:94:c2:38:81:db:6d:58:44:
ec:80:57:ab:64:b1:b9:af:dd:d4:dc:5e:02:ec:47:5a:35:b8:
ef:4f:fe:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGYchVVn0Ng2/RQ9j3N+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm
NTNkYjIwHhcNMjUxMTA0MjMwMDE4WhcNMjUxMTA1MjMwMDE4WjAzMTEwLwYDVQQD
Eyg5NzkxOWRlMzBjOTc4MWU1ZmY1MmNmODk0NDA3NzcyODVhM2U2YTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrfFwA+jbXzwakGwwlqbtJnD0FGu
THFMGZbrXogHARqEcEkGMXNejp0ZTHgi2RG4dDa68BNNG1epaUOYJdhVDhBptu2q
VEiMmwFvtBHBg6u6Jjne4kSvvUXXXw8PLNVeW+KUcqF6hxiWvnxwrvMklPGpeJSf
hY6JVUbtqQG7sifFcJ5eW0HvEwuRkwXTcZcI8OEldJ0es/hLPX/i+QSj7exUcCTH
tqd4ivDv6iR3wxRlwSswCGItYKKQ1n3Houh6estdTy8mYdLwpsrwgqjonKirjXlU
8l5LkqYG5SXvNICpZ/F0eWGCAJczNMYl9OmIsXnTLwnX0mOEXWxFDcBJ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeRneMMl4Hl/1LPiUQHdyhaPmogMB8GA1UdIwQY
MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt
ZTIxNzYzYzY3MmZhLzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh
LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplydPqta
NGylMKvB2ScSrUaPsg1L9C4oDpRem93rtSFdMnGz5LamDoC1u9CNFdPVKViNlsIb
zC5C2c6gDzJrvn1xm/FFphxjWbxSdVgcOk5c8fXDnEC9IWEX9oYrT1sx+q6Hw4FY
GLQLHpwpbEAsofygf9t0oBW+fcPFXUoDExZdD+1oO3xu4VDObqmroDNlTz8YnZAf
obYEcd0zXTtZ+wjApu03LvBVjhC8GydW+aM2BBgbn/LO7KNfF8FSripM2dCRBPk4
anMVtO5ftaQUh4Qlpmx/zhSKCFEWDRprAIcc5ZTCOIHbbVhE7IBXq2Sxua/d1Nxe
AuxHWjW470/+LA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:11:11 2025 by rpki-client