Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: GVMso0kWXcaIPBDX6QiAPbumRzcKxp5BT7SrJwwexzE=
Subject key identifier: B7:8A:0F:A2:79:4E:0A:73:F2:71:51:02:74:BE:0F:19:57:0A:0A:93
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 019A52D2A6FD4F159562D59884A263C56C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 0509
Signing time: Wed 05 Nov 2025 07:02:08 +0000
Manifest this update: Wed 05 Nov 2025 07:02:08 +0000
Manifest next update: Thu 06 Nov 2025 07:02:08 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: AQ/uequYPElXxxMzMInV3jJ6LcJWGKF8aXun1pguJOY=)
2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:a6:fd:4f:15:95:62:d5:98:84:a2:63:c5:6c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Nov 5 07:02:08 2025 GMT
Not After : Nov 6 07:02:08 2025 GMT
Subject: CN=b78a0fa2794e0a73f271510274be0f19570a0a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:23:96:4b:2a:26:9e:d0:46:e4:0d:1b:79:
cc:e1:62:15:23:dc:6f:c1:eb:a8:59:ad:e1:d7:56:
c4:4e:8b:8f:98:a4:f6:3f:5b:d7:33:c5:14:e9:f7:
5b:f8:98:3c:42:ad:97:8f:73:fd:15:e0:5c:dc:9a:
ea:4a:5a:a8:60:ef:84:02:6f:91:47:b9:19:bd:32:
04:a9:b7:ec:5a:e5:bb:b6:1c:b8:fb:9c:fd:6c:a5:
bb:56:fe:5f:cd:da:7f:2f:b5:4f:d3:bc:b1:a9:a4:
b5:e5:d3:9b:09:59:b2:0a:e6:1a:08:0d:9a:21:cc:
e1:71:66:c1:ec:22:1a:11:8a:f7:dc:c0:e2:22:cc:
7b:8d:d9:76:33:6a:02:a8:12:0a:19:89:3d:58:5d:
7f:f2:43:86:bd:d7:9d:81:41:3a:d5:f1:e2:64:f0:
76:de:ff:78:23:6a:39:a6:6a:88:4c:29:36:3e:62:
a9:20:9c:d3:1f:35:fc:ce:e8:c7:79:8d:37:62:10:
43:c0:90:10:5f:7e:0d:ec:cc:fa:2b:62:62:21:f9:
76:98:ef:10:e0:34:0b:d7:7e:aa:91:95:d6:11:0f:
17:10:f8:d2:d1:ca:b3:a0:4c:42:3c:c2:74:3b:6e:
39:ad:63:ac:1a:0e:9b:8b:ac:ad:40:04:89:28:19:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8A:0F:A2:79:4E:0A:73:F2:71:51:02:74:BE:0F:19:57:0A:0A:93
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:24:17:87:67:ac:13:e6:b7:3f:56:39:be:86:d8:82:2d:cc:
7a:1b:f2:f5:04:aa:27:eb:3a:22:c5:c1:2c:5c:f0:17:58:0b:
79:c7:68:24:1f:11:64:dc:48:07:dc:97:26:2f:d1:27:5d:36:
58:76:86:b6:cf:6f:2d:89:55:84:bc:be:cc:0b:9f:1c:61:e7:
31:20:5f:f7:02:b5:86:6c:98:b0:7e:39:4d:6d:9a:77:a0:b4:
d7:b4:1f:41:86:3c:b8:9f:13:e3:69:82:f5:cc:6d:b5:7f:52:
52:c1:32:42:cc:2e:63:6e:46:d9:f1:ce:a9:07:d3:2f:dc:cd:
6c:1f:ef:a5:e5:7f:ad:b3:65:e3:db:24:e7:3d:ff:5a:fe:80:
06:99:67:2b:cd:33:be:a0:f3:cd:f7:31:ae:07:5b:d0:40:30:
61:09:b7:9e:35:a0:92:76:1e:94:88:34:76:4f:68:f5:aa:f4:
39:7a:38:8f:77:d9:9b:be:55:83:6e:56:d2:6d:90:90:f3:45:
c1:6e:5f:6e:66:1d:4f:2d:4f:00:2c:39:0b:a1:86:ce:61:5d:
cf:39:fd:1d:08:44:8d:24:41:68:f3:aa:a2:44:96:f3:91:05:
3a:36:c4:47:6f:d4:94:a1:c8:90:e1:17:44:8c:6d:f6:1d:68:
49:90:7e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0qb9TxWVYtWYhKJjxWxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNjliMzliMDhmM2Y2MmNlM2UwODNiYmM4YWVlY2VhZGM0
OThiNjkwHhcNMjUxMTA1MDcwMjA4WhcNMjUxMTA2MDcwMjA4WjAzMTEwLwYDVQQD
EyhiNzhhMGZhMjc5NGUwYTczZjI3MTUxMDI3NGJlMGYxOTU3MGEwYTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqykjlksqJp7QRuQNG3nM4WIVI9xv
weuoWa3h11bETouPmKT2P1vXM8UU6fdb+Jg8Qq2Xj3P9FeBc3JrqSlqoYO+EAm+R
R7kZvTIEqbfsWuW7thy4+5z9bKW7Vv5fzdp/L7VP07yxqaS15dObCVmyCuYaCA2a
IczhcWbB7CIaEYr33MDiIsx7jdl2M2oCqBIKGYk9WF1/8kOGvdedgUE61fHiZPB2
3v94I2o5pmqITCk2PmKpIJzTHzX8zujHeY03YhBDwJAQX34N7Mz6K2JiIfl2mO8Q
4DQL136qkZXWEQ8XEPjS0cqzoExCPMJ0O245rWOsGg6bi6ytQASJKBkiSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeKD6J5Tgpz8nFRAnS+DxlXCgqTMB8GA1UdIwQY
MBaAFApps5sI8/Ys4+CDu8iu7OrcSYtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAt
YzA5YWZhMDBjYjg0LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAtYzA5YWZhMDBjYjg0
LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtiQXh2es
E+a3P1Y5vobYgi3Mehvy9QSqJ+s6IsXBLFzwF1gLecdoJB8RZNxIB9yXJi/RJ102
WHaGts9vLYlVhLy+zAufHGHnMSBf9wK1hmyYsH45TW2ad6C017QfQYY8uJ8T42mC
9cxttX9SUsEyQswuY25G2fHOqQfTL9zNbB/vpeV/rbNl49sk5z3/Wv6ABplnK80z
vqDzzfcxrgdb0EAwYQm3njWgknYelIg0dk9o9ar0OXo4j3fZm75Vg25W0m2QkPNF
wW5fbmYdTy1PACw5C6GGzmFdzzn9HQhEjSRBaPOqokSW85EFOjbER2/UlKHIkOEX
RIxt9h1oSZB+3Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:34:46 2025 by rpki-client