Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier: AkH7rnWMwEuntE0bVJUUs2BcJ+LnXXkQvUiEcnVvtZQ=
Subject key identifier: 50:F9:57:22:B5:5B:8A:28:45:07:84:89:9D:C2:FD:A4:97:07:4D:5E
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019A4C614B6FF18E3726EE5B0D0C7749187D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 01:00:35 +0000
Manifest this update: Tue 04 Nov 2025 01:00:35 +0000
Manifest next update: Wed 05 Nov 2025 01:00:35 +0000
Files and hashes: 1: BE6iIPIX8zFmJc8BbYvpzoakrXE.roa (hash: zyf1exZFAT4j17OLfHltxLPlTiiX5aqGBHkZByoGZDo=)
2: TJJQIxFkBPcclxKSiBSE29OWp44.roa (hash: o//SaNRJoAMIebEbxmORe+ZFOyk3uvF1gz9qkdqBZAw=)
3: VNCm6_FzOH2wvD6zP5chPBaMMwY.roa (hash: Y0Swh/SNbMijU4wn94W5cEpLxOM8OyzH9BGZ9D0MVqQ=)
4: W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa (hash: IRDGgxnAqqWapeedP2vWmhEF4xJ1dwTUzVZaEKAfNbA=)
5: btlTysPNtSD16VvTDGwPRcFNQTA.roa (hash: 4GOMdcwUufKF7whyj8s9iAkFjKwaMeqK7FyHtxPB+Hs=)
6: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: XFQqaxA9xWe6sMRMGO+RLoIoFd7ESR9/6KM8TcGJID8=)
7: fxey-d2NI5gsqRXb0UikDcRQ4Hk.roa (hash: mnGLtOe1Pde5CCQx8NNLqfN+Rs/Jpu9t/4yCNDHWIJo=)
8: qOUhVI1G4SW4_rAdHVZjiGEJEhc.roa (hash: mLpbGQvUh3BNlZYktMPLqJ4KDfxwOCyR9t25dQjnDY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:4b:6f:f1:8e:37:26:ee:5b:0d:0c:77:49:18:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Nov 4 01:00:35 2025 GMT
Not After : Nov 5 01:00:35 2025 GMT
Subject: CN=50f95722b55b8a28450784899dc2fda497074d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:26:9f:27:a9:53:dc:f9:75:99:61:dc:bf:
2a:a2:89:9f:ca:82:1c:53:cd:d0:5f:27:64:83:91:
bb:b9:da:2a:9b:28:14:49:3e:85:bc:0c:cd:24:0a:
91:0e:c6:d8:92:7d:df:8c:bf:1e:7c:a7:a6:bc:2b:
3c:30:fc:49:55:2a:c3:6d:b1:c2:37:0d:3a:b0:0f:
bc:7f:bc:53:cb:fa:c7:c8:9c:fa:3e:51:fb:d5:a6:
83:c5:2d:fd:e3:80:01:35:a3:4b:82:e4:7b:2f:5c:
c5:b6:40:04:ca:10:da:2f:f2:39:27:e3:cb:c0:31:
87:17:df:35:a0:51:9b:84:bc:7d:f8:83:6f:b3:91:
a3:9b:b4:e9:99:db:0c:63:47:f0:30:fc:ae:eb:de:
de:c7:2a:26:27:88:3b:1f:f2:f2:f1:9e:ec:1d:d3:
7c:e9:d1:14:8f:73:79:d7:2f:7a:d1:8a:ef:6e:4f:
f0:2a:e4:56:81:38:7c:14:38:25:4f:50:c3:7c:71:
ae:14:01:54:e1:9b:14:cc:9c:27:7d:74:9f:a7:75:
3d:19:b0:de:be:0f:0e:7d:d8:9f:70:dc:da:ce:92:
3d:17:36:0b:78:1b:42:8c:38:56:2d:7e:06:cc:4b:
72:2a:b0:1b:3d:af:c2:55:af:0f:46:16:fe:db:06:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F9:57:22:B5:5B:8A:28:45:07:84:89:9D:C2:FD:A4:97:07:4D:5E
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f8:99:8c:b0:1b:c9:70:37:c9:dd:11:5b:9b:e7:9d:a0:26:
93:87:00:d4:e7:3d:c9:43:d0:8d:07:6b:ba:60:1e:c6:4b:fb:
e3:ea:cd:df:1e:52:10:9c:2b:a2:6d:f9:77:7a:d6:af:a7:c4:
42:46:59:ae:10:86:57:05:bc:fe:4f:a8:2c:a1:3e:7a:5a:34:
16:a8:ea:8d:7d:7c:09:72:b8:ae:13:98:86:3f:7e:c9:ab:5d:
d7:3c:61:80:c1:21:67:d9:69:8f:46:8b:b3:5e:1c:49:4b:52:
9c:78:2d:c6:18:86:90:05:52:eb:53:ed:31:f0:20:4e:b3:20:
c6:89:8d:75:ac:b3:7f:97:c2:40:18:b6:ad:bd:53:a6:d1:9a:
57:d3:3d:40:42:6e:ae:26:c1:fb:11:6a:1b:69:73:bd:43:2b:
b7:01:60:94:7a:ba:a7:30:cf:2b:d6:fc:45:78:b4:27:2d:8f:
6f:b5:b8:52:a1:4d:ef:85:d7:e2:9d:a8:3f:57:00:f9:26:1e:
2a:6a:5b:d1:61:cb:c8:31:00:b1:fb:8c:9d:6b:b3:48:10:dd:
50:cc:71:59:4f:3d:63:bf:7e:82:f6:a0:2d:95:92:f6:97:67:
92:ec:a2:4a:53:6e:71:08:fd:ec:82:07:89:b7:08:bc:a1:18:
40:cc:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:30 2025 by rpki-client