Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: dEqxZ/tdKagfAaQZVdix9s4tjfROC6FADT8tkDFr5nM=
Subject key identifier: 9B:F7:09:36:D6:0A:78:B5:E8:4B:7C:E0:5D:A2:8B:3F:DB:56:2C:A7
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 019A1EAD77E850160CE659DFFBD5C437FE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 12A0
Signing time: Sun 26 Oct 2025 04:01:16 +0000
Manifest this update: Sun 26 Oct 2025 04:01:16 +0000
Manifest next update: Mon 27 Oct 2025 04:01:16 +0000
Files and hashes: 1: ZGrcpUqsEOsf7o6fu8OWpNq4gNY.roa (hash: wpQNPwvek3Rp2M6cV1DD/Iu66bw6RcokC6IaW3yHq/w=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: CvfzY21Aowqb7cKziUZcXou2lRAYeOCxd0sTGGcSS2o=)
3: gdtLNhs1JQCPzai-VNs9JYZHoWI.roa (hash: ZjSEtnU3HKrgHwmUc/jOdFVfQULcq2id5Yk1K05ZWWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:77:e8:50:16:0c:e6:59:df:fb:d5:c4:37:fe:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Oct 26 04:01:16 2025 GMT
Not After : Oct 27 04:01:16 2025 GMT
Subject: CN=9bf70936d60a78b5e84b7ce05da28b3fdb562ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:e7:5a:26:3f:74:ed:1f:f4:a4:55:53:d5:
8a:57:9e:a3:cf:5c:f6:a4:3b:f9:2f:80:86:20:67:
8b:6f:73:72:da:01:6c:bb:a7:80:c2:c0:8e:f5:77:
c4:bf:a7:45:5d:6f:7f:f5:4a:b9:9b:8a:ba:93:44:
ed:52:62:52:e4:d7:67:f4:6e:6d:16:d6:68:dd:0f:
f9:0d:94:d6:d2:9b:7a:cf:80:80:62:b5:40:61:58:
3c:4c:ea:f2:8d:2e:fd:44:ff:9b:24:57:51:9e:69:
b5:b1:77:29:3a:4b:2d:05:36:94:cf:35:a3:7f:c9:
f0:eb:d2:a3:07:a2:64:9a:97:c3:1c:cd:16:f4:96:
11:73:fe:8c:1c:3a:65:a7:d4:ec:5e:3a:d5:f3:79:
85:f9:6a:d8:e5:57:1f:e4:ea:76:d1:c7:f6:2a:22:
ef:ff:d8:5a:bb:09:a0:0b:b4:64:9f:34:67:b0:88:
4a:a9:1d:4f:71:03:05:3d:12:2a:3b:d7:e6:8f:8a:
36:59:df:2e:6b:71:fb:de:fc:a2:c4:89:88:bf:f0:
43:7c:31:83:b3:64:b8:b9:24:fe:8f:81:19:9b:a9:
ee:ec:2c:a7:3d:93:35:28:ef:59:fa:f1:0a:99:35:
c0:fa:63:e6:91:9b:a6:f6:54:e2:10:f4:fc:1b:d2:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F7:09:36:D6:0A:78:B5:E8:4B:7C:E0:5D:A2:8B:3F:DB:56:2C:A7
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b2:1e:98:8f:ad:b1:fb:46:bc:d1:09:fb:93:73:ed:c0:b1:
f4:e0:6a:ac:88:a0:51:f0:28:5e:cf:ac:4b:b3:43:44:a4:a9:
6f:28:b6:a0:e8:5d:a7:fa:5c:5a:62:27:c6:d5:26:78:75:ae:
94:c9:4d:d4:22:e3:f7:8c:8f:a3:e1:eb:79:e6:d2:9a:cb:d0:
b1:c0:dd:65:40:89:2e:d8:62:65:8c:c3:ff:53:1b:28:91:be:
28:7e:e0:2b:e2:c4:3f:21:37:13:ff:f6:4e:a8:c6:fd:6c:2c:
5d:88:22:a7:44:6b:f0:81:d2:19:fc:30:01:d2:e4:e5:77:12:
b6:59:38:2f:22:37:6e:7f:52:90:d2:86:ae:13:e7:6a:67:7d:
7d:dc:83:17:a7:90:f9:ec:79:af:36:ef:75:65:89:e1:ec:17:
67:b2:01:6d:67:c8:96:4e:99:e7:6f:7d:dc:f6:a8:da:70:e7:
b0:64:8b:27:f6:0d:40:2a:06:7f:83:a1:5f:b5:80:4b:c5:1d:
9a:da:4c:6a:d7:d0:9c:16:58:fa:4f:c7:33:ba:c1:3c:1f:e7:
dd:71:1d:95:c9:d3:0e:a2:ca:03:fb:2c:21:9b:2f:8e:ba:5d:
af:79:2e:8f:82:ea:7b:ca:62:da:02:09:cd:ec:a3:b9:3a:22:
4c:84:36:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoerXfoUBYM5lnf+9XEN/5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNjMzMzg4YTdhNWNmZTlhN2NhMTlmZDc0YzkyMmRjYjEy
NTY5ZDMwHhcNMjUxMDI2MDQwMTE2WhcNMjUxMDI3MDQwMTE2WjAzMTEwLwYDVQQD
Eyg5YmY3MDkzNmQ2MGE3OGI1ZTg0YjdjZTA1ZGEyOGIzZmRiNTYyY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j7nWiY/dO0f9KRVU9WKV56jz1z2
pDv5L4CGIGeLb3Ny2gFsu6eAwsCO9XfEv6dFXW9/9Uq5m4q6k0TtUmJS5Ndn9G5t
FtZo3Q/5DZTW0pt6z4CAYrVAYVg8TOryjS79RP+bJFdRnmm1sXcpOkstBTaUzzWj
f8nw69KjB6JkmpfDHM0W9JYRc/6MHDplp9TsXjrV83mF+WrY5Vcf5Op20cf2KiLv
/9hauwmgC7RknzRnsIhKqR1PcQMFPRIqO9fmj4o2Wd8ua3H73vyixImIv/BDfDGD
s2S4uST+j4EZm6nu7CynPZM1KO9Z+vEKmTXA+mPmkZum9lTiEPT8G9I9WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv3CTbWCni16Et84F2iiz/bViynMB8GA1UdIwQY
MBaAFHJjM4inpc/pp8oZ/XTJItyxJWnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5Yzct
MTM4Yzg0MTdhZTkzLzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5YzctMTM4Yzg0MTdhZTkz
LzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarIemI+t
sftGvNEJ+5Nz7cCx9OBqrIigUfAoXs+sS7NDRKSpbyi2oOhdp/pcWmInxtUmeHWu
lMlN1CLj94yPo+HreebSmsvQscDdZUCJLthiZYzD/1MbKJG+KH7gK+LEPyE3E//2
TqjG/WwsXYgip0Rr8IHSGfwwAdLk5XcStlk4LyI3bn9SkNKGrhPnamd9fdyDF6eQ
+ex5rzbvdWWJ4ewXZ7IBbWfIlk6Z52993Pao2nDnsGSLJ/YNQCoGf4OhX7WAS8Ud
mtpMatfQnBZY+k/HM7rBPB/n3XEdlcnTDqLKA/ssIZsvjrpdr3kuj4Lqe8pi2gIJ
zeyjuToiTIQ22A==
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:52:35 2025 by rpki-client