Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: ttYg9yS+m1kQXc5BMRko0X8HjNq8szSwkoaFOz5xyyo=
Subject key identifier: 13:A5:3A:0A:D6:B4:BC:78:A6:B0:BF:2E:FD:8A:70:BF:23:FD:BB:D8
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 019A2D0D3004BFE1655B71304AB1BD650564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 04AA
Signing time: Tue 28 Oct 2025 23:00:30 +0000
Manifest this update: Tue 28 Oct 2025 23:00:30 +0000
Manifest next update: Wed 29 Oct 2025 23:00:30 +0000
Files and hashes: 1: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: WWWUl2oK4IEPSo/PNtQUEGot405CHbUtWkzSt1DTCmU=)
2: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (hash: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:0d:30:04:bf:e1:65:5b:71:30:4a:b1:bd:65:05:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Oct 28 23:00:30 2025 GMT
Not After : Oct 29 23:00:30 2025 GMT
Subject: CN=13a53a0ad6b4bc78a6b0bf2efd8a70bf23fdbbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c6:4b:ab:0f:be:74:98:f1:87:a5:62:d1:f7:
ba:cc:fc:c7:0c:80:76:05:28:07:ba:43:38:1b:90:
3c:77:d8:1d:15:64:3c:4d:d1:ce:c3:fa:4e:5d:0e:
fb:9e:95:19:d1:71:fc:ab:04:6e:5c:ee:7f:7e:76:
30:6d:43:39:77:1f:2a:bf:47:63:ce:2e:4d:c1:2c:
f1:06:c1:63:98:b4:33:7a:8b:eb:e8:4e:a2:dc:f9:
30:92:c8:34:4c:c4:6b:87:4e:22:2e:25:9f:09:c7:
61:66:cc:be:0d:37:fa:c5:a7:67:b5:9f:14:aa:57:
e1:cc:99:f0:c6:4c:42:47:82:d5:a4:64:2e:1d:6d:
a9:36:ce:82:6d:56:b7:cf:3c:a0:48:56:52:ea:20:
fb:36:db:40:1d:5a:31:63:16:38:75:9e:81:eb:9f:
34:61:4b:fe:8b:15:58:d4:7d:67:89:61:5a:c1:ab:
78:d1:5f:7a:bc:b0:db:71:80:d3:89:42:70:39:bb:
09:6a:66:f1:4b:68:33:f3:ba:5f:ad:ca:d9:32:9e:
7a:53:63:79:22:c8:0d:50:b0:41:8e:42:9d:e0:e9:
8c:9a:77:b1:33:7f:83:dd:9a:ee:08:56:df:f6:ea:
48:ec:75:9f:de:8d:fe:c2:e0:a7:fe:98:d2:3a:1b:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A5:3A:0A:D6:B4:BC:78:A6:B0:BF:2E:FD:8A:70:BF:23:FD:BB:D8
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:07:68:0f:25:4e:21:55:1f:73:89:3d:93:64:8f:bb:d9:b3:
53:69:f7:0d:ef:f9:61:3e:90:33:15:6f:16:cd:18:ba:32:bd:
55:82:ef:64:af:44:5b:6e:25:c3:1f:fc:bc:16:9b:8c:26:e3:
24:cb:d2:af:3d:7a:2c:53:4c:e4:79:96:b8:48:60:81:a7:4c:
0f:ad:45:d2:ba:37:2b:bf:47:e8:31:89:59:20:67:4d:98:78:
89:04:30:6c:bc:1e:82:51:43:2b:2e:ad:7e:67:20:7b:39:c7:
df:7e:b7:c2:f5:72:41:fe:13:05:95:ad:7f:85:d9:11:69:b2:
b3:be:45:66:1f:1b:b1:c2:a6:55:03:eb:3f:4b:6c:5b:fc:3b:
85:15:cc:02:3e:8c:ee:34:2f:ba:88:d0:b2:8e:a1:0c:8f:4b:
35:58:c1:15:d4:04:e2:bd:ae:26:22:30:31:71:cf:ae:d3:2f:
a9:f6:41:cc:43:41:02:3e:d7:32:9e:d1:04:e6:0e:ad:a5:5b:
cb:47:91:3f:1b:ac:d8:dd:fc:4a:f8:07:58:d3:7f:5a:53:26:
d7:df:3d:6b:ec:ca:dc:46:43:ad:81:37:4c:c1:d8:d1:e0:ce:
d7:c3:78:87:2b:11:92:89:fb:2c:da:28:48:2e:0c:32:e0:9b:
27:c5:73:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotDTAEv+FlW3EwSrG9ZQVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NWFmODFiOTllYmY0ODJmM2M2YjUzNTFlMjllMjhhMmUy
MGIzOTgwHhcNMjUxMDI4MjMwMDMwWhcNMjUxMDI5MjMwMDMwWjAzMTEwLwYDVQQD
EygxM2E1M2EwYWQ2YjRiYzc4YTZiMGJmMmVmZDhhNzBiZjIzZmRiYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsZLqw++dJjxh6Vi0fe6zPzHDIB2
BSgHukM4G5A8d9gdFWQ8TdHOw/pOXQ77npUZ0XH8qwRuXO5/fnYwbUM5dx8qv0dj
zi5NwSzxBsFjmLQzeovr6E6i3Pkwksg0TMRrh04iLiWfCcdhZsy+DTf6xadntZ8U
qlfhzJnwxkxCR4LVpGQuHW2pNs6CbVa3zzygSFZS6iD7NttAHVoxYxY4dZ6B6580
YUv+ixVY1H1niWFawat40V96vLDbcYDTiUJwObsJambxS2gz87pfrcrZMp56U2N5
IsgNULBBjkKd4OmMmnexM3+D3ZruCFbf9upI7HWf3o3+wuCn/pjSOhtXRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOlOgrWtLx4prC/Lv2KcL8j/bvYMB8GA1UdIwQY
MBaAFAha+BuZ6/SC88a1NR4p4oouILOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQt
YzI4ZDE0YzdiNzMxLzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQtYzI4ZDE0YzdiNzMx
LzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgdoDyVO
IVUfc4k9k2SPu9mzU2n3De/5YT6QMxVvFs0YujK9VYLvZK9EW24lwx/8vBabjCbj
JMvSrz16LFNM5HmWuEhggadMD61F0ro3K79H6DGJWSBnTZh4iQQwbLweglFDKy6t
fmcgeznH3363wvVyQf4TBZWtf4XZEWmys75FZh8bscKmVQPrP0tsW/w7hRXMAj6M
7jQvuojQso6hDI9LNVjBFdQE4r2uJiIwMXHPrtMvqfZBzENBAj7XMp7RBOYOraVb
y0eRPxus2N38SvgHWNN/WlMm1989a+zK3EZDrYE3TMHY0eDO18N4hysRkon7LNoo
SC4MMuCbJ8VzPw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 05:33:53 2025 by rpki-client