Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: Ph255DsJSeeRYSBG8Zhnh3djdP/AaGsNj+sS2CGVmLE=
Subject key identifier: 6C:22:AE:B7:07:AD:D9:73:D5:E4:6A:8F:E1:26:67:83:E4:B1:8F:59
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 019A25C1550C9F2286574C37947B1E7AC94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 13:00:18 +0000
Manifest this update: Mon 27 Oct 2025 13:00:18 +0000
Manifest next update: Tue 28 Oct 2025 13:00:18 +0000
Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: cVoxLh7+m7uD1DwE2Mhg0pdSsJwuTQZCx+GXjJatxgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:55:0c:9f:22:86:57:4c:37:94:7b:1e:7a:c9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Oct 27 13:00:18 2025 GMT
Not After : Oct 28 13:00:18 2025 GMT
Subject: CN=6c22aeb707add973d5e46a8fe1266783e4b18f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0b:ea:1c:56:4e:fe:e1:96:d7:39:8b:ef:c6:
d8:38:79:8c:02:7b:9d:d5:22:47:6b:c2:30:d5:71:
4c:e4:b7:f6:c9:2e:24:23:5c:87:55:d9:d4:20:c1:
9c:b1:83:d3:2e:6a:bc:a5:23:7d:9e:e5:31:91:4f:
fc:d9:c4:58:55:fd:ef:70:30:4c:5e:30:73:4c:32:
29:93:1a:32:04:2d:b6:54:da:21:1a:1e:71:4c:2e:
4e:56:81:fe:11:21:d8:85:9d:95:bd:54:03:0f:5a:
da:dd:db:6e:d3:b5:8a:b8:49:fb:b4:a7:89:aa:2e:
38:75:b9:7b:93:25:e4:da:71:3d:88:a2:14:3f:0f:
dc:6d:a3:96:ed:fb:37:4f:57:6c:28:55:96:ef:90:
b4:60:b5:fb:ab:83:60:5b:35:1b:59:39:de:70:5f:
56:1e:7f:52:ae:99:1c:19:ca:4a:92:97:dc:20:9a:
3e:1b:07:11:2d:f6:3b:a7:d7:f3:d6:be:2d:aa:fa:
fb:ce:7c:b7:af:cf:a6:8e:7d:43:08:55:91:8f:ca:
f7:bd:12:85:ab:57:8d:38:e3:f8:b8:fc:5d:93:06:
c9:11:dd:d5:29:14:dc:30:25:9b:79:9b:8d:1d:28:
48:39:73:8e:a5:fb:4c:73:01:33:92:35:dc:45:ec:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:22:AE:B7:07:AD:D9:73:D5:E4:6A:8F:E1:26:67:83:E4:B1:8F:59
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7f:e7:20:38:da:97:56:99:03:ae:d3:7a:0c:cd:30:9f:0b:
68:1e:f3:ba:eb:0c:ec:de:21:f7:0c:4c:e9:64:ef:8d:d5:80:
0b:b0:0a:f8:dc:72:69:a1:e6:f6:e4:fb:fe:91:30:00:1b:cd:
e1:e5:5d:84:58:d2:fa:3d:06:96:c9:65:c2:59:ba:47:de:25:
3d:68:47:95:1d:b7:2e:53:e3:5e:fe:00:f6:5d:cc:d6:91:fd:
5b:98:1e:42:86:0c:74:d8:7a:a6:63:1c:ef:bf:ae:75:91:5b:
68:09:ee:02:e0:3b:ef:a0:af:0e:5e:c7:7b:7c:bd:30:5f:14:
21:59:c7:35:56:8d:10:26:4b:4a:30:10:d7:6b:70:a9:a7:48:
ab:b0:3d:46:39:22:77:25:8d:78:f1:7f:c3:a5:87:a0:1c:3e:
75:86:69:63:2e:17:5e:2d:e4:60:a8:af:4a:f6:dc:79:ac:a3:
ba:73:0d:dd:8f:6c:f7:99:28:a5:33:fb:d4:9f:2d:2e:cb:e9:
33:0c:3e:4f:b1:e6:33:3a:c5:e5:6d:a1:ef:c7:00:a2:56:7a:
d3:cb:58:37:4d:50:51:9d:8c:3d:48:05:3a:40:60:88:5f:d8:
71:cb:aa:78:2e:8d:55:be:30:37:9f:bb:3e:21:ad:be:38:ef:
77:af:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:28:10 2025 by rpki-client