Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: KQ6rLXQX/c/ldjgnpKo8ZN03jERK+IRMP5Ab43UNT0w=
Subject key identifier: 56:5C:C2:A0:DC:D3:3F:52:01:97:E5:7D:AF:94:B3:2B:8F:B2:FF:0D
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 019A2AB13373376B9D006FEB711BF1A97C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0C5D
Signing time: Tue 28 Oct 2025 12:00:47 +0000
Manifest this update: Tue 28 Oct 2025 12:00:47 +0000
Manifest next update: Wed 29 Oct 2025 12:00:47 +0000
Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: W8bN4u6BbNk3MRXFJHjxNXMDeh8i2kQwnawba+nywgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:33:73:37:6b:9d:00:6f:eb:71:1b:f1:a9:7c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Oct 28 12:00:47 2025 GMT
Not After : Oct 29 12:00:47 2025 GMT
Subject: CN=565cc2a0dcd33f520197e57daf94b32b8fb2ff0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:ef:f9:cc:a9:34:15:4e:b7:6a:30:a7:68:
3d:08:a8:23:af:f9:bc:af:5c:64:0a:79:9d:e8:3f:
1a:c8:05:09:f0:a4:a0:f4:b9:7e:1e:ef:2e:69:bd:
4e:0e:5b:60:60:17:2c:58:a6:97:8f:f9:93:06:6d:
f9:c7:c6:44:c7:28:f3:82:4e:fc:07:c7:18:39:61:
70:6d:39:c0:f2:27:b3:ca:ec:6f:19:34:9a:b9:d6:
55:4c:b2:84:21:2c:de:b1:eb:cd:b0:55:70:2d:16:
9b:74:0b:68:95:96:0f:bc:1e:9c:e3:15:ef:1e:61:
58:2e:3c:e5:35:79:ea:9b:ab:b9:73:9e:3d:d8:50:
6d:94:fc:23:04:9c:67:48:ee:44:fd:d1:16:73:05:
09:f6:41:0d:c1:34:eb:7b:81:e2:4d:95:ac:c3:bf:
ac:df:a1:f6:cf:e3:7d:d1:17:92:06:02:4f:cd:56:
7b:71:1c:c0:36:c5:37:ee:0e:83:0a:2c:84:28:70:
28:77:ae:f1:ec:71:00:ef:13:c9:49:ed:e5:ea:96:
ec:c2:b2:9a:77:4b:3c:4a:f8:cf:b3:0c:bd:e9:e6:
48:ef:03:7e:61:85:0e:94:b4:6e:34:e2:07:85:54:
71:33:32:8c:53:5d:71:c6:fe:0f:52:eb:57:30:73:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5C:C2:A0:DC:D3:3F:52:01:97:E5:7D:AF:94:B3:2B:8F:B2:FF:0D
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ff:cb:42:6b:b1:96:3b:92:fa:98:6e:bb:60:95:f2:2d:7b:
f4:3f:3a:55:f5:bc:8c:09:24:14:89:43:cd:95:20:3d:0c:41:
b0:59:52:b0:63:0f:3a:c7:cd:b5:4c:60:e5:77:ee:69:72:b7:
69:17:7c:90:2b:cc:a4:4e:86:06:bb:a2:47:0a:90:c6:e5:ed:
50:12:18:cb:46:0d:ba:bc:b2:ac:24:00:ae:51:e9:eb:b0:01:
f3:de:e9:fc:e8:f4:05:32:6d:35:2b:c1:b9:0c:87:80:a9:36:
21:58:1c:7a:3a:95:54:2c:af:1a:08:78:c5:89:7c:21:3a:f1:
71:e5:29:b7:0c:16:c9:55:b2:9e:b7:6e:b6:fb:e9:bd:37:2a:
3a:77:e2:14:64:19:32:5d:f9:a2:9d:0c:63:7d:a0:4b:30:2e:
e1:43:b1:48:0c:dc:f0:c5:40:32:f3:2f:ae:40:b7:9d:ce:d9:
59:74:8f:75:2a:b4:65:be:3e:03:bc:93:7c:5a:e5:02:8b:15:
ac:e7:9c:2c:d9:58:c0:63:26:a1:77:2a:01:4c:02:3a:f2:f0:
8a:5e:1d:c1:fd:c2:6a:de:52:14:57:16:5b:3d:c6:4c:9c:2e:
b4:e1:ab:45:16:39:70:78:4e:ed:2f:b7:d2:8a:bf:67:b8:03:
6a:f1:e5:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqsTNzN2udAG/rcRvxqXwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDFhNjM0YmJiN2FlZmFkODdkMTIxYTVmZTU0NTY0ODcz
OGM4YzUwHhcNMjUxMDI4MTIwMDQ3WhcNMjUxMDI5MTIwMDQ3WjAzMTEwLwYDVQQD
Eyg1NjVjYzJhMGRjZDMzZjUyMDE5N2U1N2RhZjk0YjMyYjhmYjJmZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKnv+cypNBVOt2owp2g9CKgjr/m8
r1xkCnmd6D8ayAUJ8KSg9Ll+Hu8uab1ODltgYBcsWKaXj/mTBm35x8ZExyjzgk78
B8cYOWFwbTnA8iezyuxvGTSaudZVTLKEISzesevNsFVwLRabdAtolZYPvB6c4xXv
HmFYLjzlNXnqm6u5c5492FBtlPwjBJxnSO5E/dEWcwUJ9kENwTTre4HiTZWsw7+s
36H2z+N90ReSBgJPzVZ7cRzANsU37g6DCiyEKHAod67x7HEA7xPJSe3l6pbswrKa
d0s8SvjPswy96eZI7wN+YYUOlLRuNOIHhVRxMzKMU11xxv4PUutXMHPBYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZcwqDc0z9SAZflfa+UsyuPsv8NMB8GA1UdIwQY
MBaAFAnRpjS7t6762H0SGl/lRWSHOMjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjIt
NWU1YjhiMjgwNTlhLzEvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjItNWU1YjhiMjgwNTlh
LzEvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPP/LQmux
ljuS+phuu2CV8i179D86VfW8jAkkFIlDzZUgPQxBsFlSsGMPOsfNtUxg5XfuaXK3
aRd8kCvMpE6GBruiRwqQxuXtUBIYy0YNuryyrCQArlHp67AB897p/Oj0BTJtNSvB
uQyHgKk2IVgcejqVVCyvGgh4xYl8ITrxceUptwwWyVWynrdutvvpvTcqOnfiFGQZ
Ml35op0MY32gSzAu4UOxSAzc8MVAMvMvrkC3nc7ZWXSPdSq0Zb4+A7yTfFrlAosV
rOecLNlYwGMmoXcqAUwCOvLwil4dwf3Cat5SFFcWWz3GTJwutOGrRRY5cHhO7S+3
0oq/Z7gDavHljQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:15:19 2025 by rpki-client