Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: QGf8E/Cvv5dMlyIbZLlx0Ain5e/3H59ALvYSSaXmOT8=
Subject key identifier: F8:32:F9:90:2B:83:CE:3F:EF:B4:40:E6:5F:FE:A5:2C:22:45:EF:67
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019A194F5AE19AE876335751474967BF427F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 09EA
Signing time: Sat 25 Oct 2025 03:00:22 +0000
Manifest this update: Sat 25 Oct 2025 03:00:22 +0000
Manifest next update: Sun 26 Oct 2025 03:00:22 +0000
Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=)
2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=)
3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: oVXHxinbWTzqB21n8f4s+nm9SjKsbuCGpfJY2nI2unM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:4f:5a:e1:9a:e8:76:33:57:51:47:49:67:bf:42:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Oct 25 03:00:22 2025 GMT
Not After : Oct 26 03:00:22 2025 GMT
Subject: CN=f832f9902b83ce3fefb440e65ffea52c2245ef67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:39:ef:41:6b:29:31:93:e6:3a:cd:71:14:
f7:bf:23:90:92:86:ea:6c:26:06:30:62:f6:5e:b4:
57:9b:b7:c8:27:39:36:e1:f0:a8:77:fa:32:27:d3:
54:70:dd:a8:16:a6:30:09:f8:87:73:46:cb:3d:cc:
01:2c:26:b7:2d:4f:48:10:f8:b9:e0:68:96:9e:3d:
e8:54:e5:07:67:c7:19:86:10:3d:71:4d:23:91:79:
3b:33:08:1d:2e:cb:8e:c1:04:13:94:a6:2a:97:2e:
4b:e1:98:fd:b5:0e:da:fc:93:c3:e9:b1:fc:8b:2d:
29:52:dd:55:b1:78:4d:04:6b:65:f0:8a:50:9c:e7:
fc:96:85:0d:8d:08:cb:3d:6c:eb:39:66:0c:10:39:
0d:e5:e2:44:0c:e7:67:f0:ec:db:11:2d:1f:78:4d:
6b:6b:25:d3:e0:4b:ba:b8:a1:02:e3:69:ac:31:b6:
b7:94:c8:10:9a:04:1c:84:ac:ed:2e:f5:4d:94:b2:
6f:31:3c:03:9f:e1:e8:ba:f1:e2:ea:5a:f8:d3:04:
b3:ae:e4:cc:1d:80:17:3b:eb:b2:80:a1:45:4f:e4:
1a:8b:d7:b0:51:ee:cd:f7:6a:d7:25:83:94:f0:6e:
38:10:19:9e:51:5b:2e:fc:94:fb:5b:19:d0:f1:6a:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:32:F9:90:2B:83:CE:3F:EF:B4:40:E6:5F:FE:A5:2C:22:45:EF:67
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9c:0c:13:5a:37:57:e3:3c:ba:15:26:8e:b0:24:97:79:19:
15:85:79:39:30:b4:bd:4f:4c:8c:38:73:ac:15:63:cf:d3:15:
89:b1:fe:de:58:26:63:3e:bf:38:9b:f1:e0:4a:07:2d:a5:fc:
43:c3:63:9b:a1:48:61:50:8c:3e:db:35:59:87:dd:e6:1a:2d:
a4:e6:4c:9b:9e:39:56:c3:04:cb:6d:00:05:a7:cc:78:1b:84:
9f:af:2c:b2:64:6e:5a:06:e2:a6:b5:ce:6f:51:08:20:3c:64:
db:78:f3:80:ff:5f:d1:81:a6:62:7e:19:7f:9a:fa:56:16:8a:
64:49:51:93:02:e8:06:92:9d:1f:99:43:ee:58:cb:52:5a:d2:
59:eb:d1:c9:52:0e:4f:39:c4:7b:3c:eb:2a:0a:1e:3e:90:a2:
6c:8b:3a:98:c8:f9:54:3f:0f:1e:1c:4e:9d:9c:88:36:32:a9:
83:7d:c0:16:7d:f3:e5:dc:e7:df:5e:98:9a:8f:49:c9:0c:33:
7d:bb:d4:20:f8:c7:ce:0f:47:ab:b5:8a:4e:de:37:e5:d3:a4:
a9:25:0a:82:7d:39:cc:17:fc:4c:86:42:4d:1c:b2:09:40:07:
19:c5:32:13:dc:a2:38:d5:6e:1d:19:96:d3:60:25:65:3d:20:
f1:ac:91:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoZT1rhmuh2M1dRR0lnv0J/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmIzNTBlOWY0ZjEyNTllMmY5YzYwOWIyMmU2NWZiZDE4
NjIwNmIwHhcNMjUxMDI1MDMwMDIyWhcNMjUxMDI2MDMwMDIyWjAzMTEwLwYDVQQD
EyhmODMyZjk5MDJiODNjZTNmZWZiNDQwZTY1ZmZlYTUyYzIyNDVlZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQA570FrKTGT5jrNcRT3vyOQkobq
bCYGMGL2XrRXm7fIJzk24fCod/oyJ9NUcN2oFqYwCfiHc0bLPcwBLCa3LU9IEPi5
4GiWnj3oVOUHZ8cZhhA9cU0jkXk7MwgdLsuOwQQTlKYqly5L4Zj9tQ7a/JPD6bH8
iy0pUt1VsXhNBGtl8IpQnOf8loUNjQjLPWzrOWYMEDkN5eJEDOdn8OzbES0feE1r
ayXT4Eu6uKEC42msMba3lMgQmgQchKztLvVNlLJvMTwDn+HouvHi6lr40wSzruTM
HYAXO+uygKFFT+Qai9ewUe7N92rXJYOU8G44EBmeUVsu/JT7WxnQ8Wqd6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgy+ZArg84/77RA5l/+pSwiRe9nMB8GA1UdIwQY
MBaAFHJrNQ6fTxJZ4vnGCbIuZfvRhiBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYt
YTAwNzJiYWM5ZjQ4LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYtYTAwNzJiYWM5ZjQ4
LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZwME1o3
V+M8uhUmjrAkl3kZFYV5OTC0vU9MjDhzrBVjz9MVibH+3lgmYz6/OJvx4EoHLaX8
Q8Njm6FIYVCMPts1WYfd5hotpOZMm545VsMEy20ABafMeBuEn68ssmRuWgbiprXO
b1EIIDxk23jzgP9f0YGmYn4Zf5r6VhaKZElRkwLoBpKdH5lD7ljLUlrSWevRyVIO
TznEezzrKgoePpCibIs6mMj5VD8PHhxOnZyINjKpg33AFn3z5dzn316Ymo9JyQwz
fbvUIPjHzg9Hq7WKTt435dOkqSUKgn05zBf8TIZCTRyyCUAHGcUyE9yiONVuHRmW
02AlZT0g8ayRLQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 09:01:09 2025 by rpki-client