Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File: CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier: 7RRJgKE50P7kVMRuCbW+OxGeBwtdvxmvviblyvHqy4A=
Subject key identifier: 91:09:0E:DC:29:A1:23:5E:91:66:71:40:77:32:E0:B1:E4:FA:93:A4
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 019937CB28FAD7BE1ED5D64252D1BCBB133A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number: 1681
Signing time: Thu 11 Sep 2025 08:01:24 +0000
Manifest this update: Thu 11 Sep 2025 08:01:24 +0000
Manifest next update: Fri 12 Sep 2025 08:01:24 +0000
Files and hashes: 1: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: tBaiISLg5gvulYJTF/780MC1kyB70Gy1ku7jVFE/iaI=)
2: GONoBaS0nACGnEjc-yHuqDoDlew.roa (hash: eVcWG363H9IPwj/aWLR4h7Mq2fdRg0ul16LrmgLPOaU=)
3: kSa4_sqr5-NiqBRmmF4fkyu-chg.roa (hash: nw6nn6yk21XAzxXJuVEoChD6KrMH42rDNZdSGxHsW0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:cb:28:fa:d7:be:1e:d5:d6:42:52:d1:bc:bb:13:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Sep 11 08:01:24 2025 GMT
Not After : Sep 12 08:01:24 2025 GMT
Subject: CN=91090edc29a1235e916671407732e0b1e4fa93a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:45:27:4b:61:ee:f8:55:cc:f5:57:5b:1a:
06:aa:41:19:24:15:31:58:58:90:1b:4f:65:e9:07:
10:35:2d:e8:ce:5e:15:98:cc:b9:b3:8a:47:37:05:
9a:92:9a:47:50:13:51:12:1e:c1:20:8b:10:b2:f6:
b7:30:2d:24:f6:22:b9:4b:9a:a4:86:fd:60:fc:bb:
b8:5d:20:5e:cd:9b:54:26:94:46:95:65:98:b9:49:
4f:01:1c:a2:fd:6f:09:bf:04:48:f4:67:b4:4b:96:
e4:07:29:75:2b:17:a6:8d:3d:d8:ee:f7:13:6a:90:
c3:7b:7e:5b:7b:3e:f9:77:3a:eb:1d:4a:71:67:ea:
0b:e4:31:70:be:ed:a7:10:63:75:59:5c:59:0e:fa:
56:69:7e:da:a1:be:e2:c4:63:49:7e:bb:8e:84:42:
70:2f:a0:cc:11:18:15:11:50:7e:57:03:69:90:d9:
8d:5e:03:1f:0d:e4:f8:97:5d:4b:3d:94:e5:6a:bb:
1e:a5:a1:c7:53:e1:80:86:1f:7d:af:df:23:d0:db:
12:4c:99:29:40:ac:68:28:f4:c1:81:35:93:0a:1a:
52:2e:ef:2f:88:26:40:4b:4a:c2:4b:4c:9a:2e:87:
fb:30:c1:1b:98:56:fc:6b:29:22:58:8e:60:b5:66:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:09:0E:DC:29:A1:23:5E:91:66:71:40:77:32:E0:B1:E4:FA:93:A4
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:86:7a:dd:5e:e5:50:7c:e4:74:8e:c5:89:6e:9e:f2:f3:af:
26:c9:15:08:cb:c9:1f:a4:bb:0d:d6:dd:e6:d8:ed:27:ec:dc:
23:8d:3e:e7:10:f9:b7:cd:65:61:d1:0c:7d:fe:3a:8f:c8:79:
ec:55:3c:c3:82:ac:0f:45:77:6a:9d:5c:27:7c:8b:5f:9a:f0:
6e:d4:3f:3e:93:85:32:80:5f:cf:f7:4c:68:82:5c:cc:f1:63:
f7:80:bd:28:70:e0:70:d9:02:fa:77:a1:c3:cc:fa:d7:e9:4f:
1d:2e:8a:45:7b:bb:17:09:05:43:e1:44:39:72:a4:5c:81:e3:
6d:0c:7a:6d:2b:6f:19:6d:d3:e5:1f:2a:9f:13:e5:ef:4a:20:
86:f5:0e:6f:26:ae:da:02:53:70:02:88:f9:b6:ac:6d:8b:85:
c1:30:56:c4:77:0d:1d:45:0d:e1:0c:00:b8:fa:28:a8:ea:72:
f2:31:0b:e0:13:e1:c3:48:1e:a6:37:c9:77:94:c9:93:29:62:
05:48:6d:bd:3f:e3:96:97:e8:3d:02:78:ac:34:7e:1f:9f:17:
4a:23:57:ba:31:8a:84:84:8c:39:1f:63:e1:01:71:7d:e6:62:
b6:47:13:be:5c:fd:6e:3f:4b:b9:1e:88:d7:a9:e8:4a:03:96:
ed:2f:51:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3yyj6174e1dZCUtG8uxM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzMyZjVhZGMwNDY5NTMzYmJkZGNmY2U4OTU3ZWFlZTU4
YmZkNjAwHhcNMjUwOTExMDgwMTI0WhcNMjUwOTEyMDgwMTI0WjAzMTEwLwYDVQQD
Eyg5MTA5MGVkYzI5YTEyMzVlOTE2NjcxNDA3NzMyZTBiMWU0ZmE5M2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh5FJ0th7vhVzPVXWxoGqkEZJBUx
WFiQG09l6QcQNS3ozl4VmMy5s4pHNwWakppHUBNREh7BIIsQsva3MC0k9iK5S5qk
hv1g/Lu4XSBezZtUJpRGlWWYuUlPARyi/W8JvwRI9Ge0S5bkByl1KxemjT3Y7vcT
apDDe35bez75dzrrHUpxZ+oL5DFwvu2nEGN1WVxZDvpWaX7aob7ixGNJfruOhEJw
L6DMERgVEVB+VwNpkNmNXgMfDeT4l11LPZTlarsepaHHU+GAhh99r98j0NsSTJkp
QKxoKPTBgTWTChpSLu8viCZAS0rCS0yaLof7MMEbmFb8aykiWI5gtWZcVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEJDtwpoSNekWZxQHcy4LHk+pOkMB8GA1UdIwQY
MBaAFAozL1rcBGlTO73c/OiVfq7li/1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pNdld0d0VhVk03dmR6ODZKVi1ydVdMX1dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNzhmNjgtYzE2Zi00YTJmLTgwZjct
NDEzMGZhNDhiNTU5LzEvQ2pNdld0d0VhVk03dmR6ODZKVi1ydVdMX1dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNzhmNjgtYzE2Zi00YTJmLTgwZjctNDEzMGZhNDhiNTU5
LzEvQ2pNdld0d0VhVk03dmR6ODZKVi1ydVdMX1dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4Z63V7l
UHzkdI7FiW6e8vOvJskVCMvJH6S7Ddbd5tjtJ+zcI40+5xD5t81lYdEMff46j8h5
7FU8w4KsD0V3ap1cJ3yLX5rwbtQ/PpOFMoBfz/dMaIJczPFj94C9KHDgcNkC+neh
w8z61+lPHS6KRXu7FwkFQ+FEOXKkXIHjbQx6bStvGW3T5R8qnxPl70oghvUObyau
2gJTcAKI+basbYuFwTBWxHcNHUUN4QwAuPooqOpy8jEL4BPhw0gepjfJd5TJkyli
BUhtvT/jlpfoPQJ4rDR+H58XSiNXujGKhISMOR9j4QFxfeZitkcTvlz9bj9LuR6I
16noSgOW7S9RNw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:22:23 2025 by rpki-client