Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: Dn6egmLXNsW4SHnaLppt+psQOE8E1OFUFwGCo1oL0rg=
Subject key identifier: 6E:F2:8B:83:7D:4B:BF:72:38:DC:47:F5:19:3D:12:09:5C:38:C3:DB
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 019A24AEC03C7ABC80EDC892668F1BC40F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 08:00:23 +0000
Manifest this update: Mon 27 Oct 2025 08:00:23 +0000
Manifest next update: Tue 28 Oct 2025 08:00:23 +0000
Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: mUVOmlSv75v9FICi5GWlN+d7ZscHydoXr+/57nChk5w=)
3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:c0:3c:7a:bc:80:ed:c8:92:66:8f:1b:c4:0f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Oct 27 08:00:23 2025 GMT
Not After : Oct 28 08:00:23 2025 GMT
Subject: CN=6ef28b837d4bbf7238dc47f5193d12095c38c3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:80:d5:96:46:1e:4e:33:86:2e:37:24:f4:
54:64:fb:b3:85:57:05:82:f2:cd:04:75:fe:4b:21:
65:d3:b3:46:56:51:df:9b:47:7f:3c:d6:7a:1e:97:
9e:22:14:6e:68:7f:10:c3:ef:17:6d:d4:77:b3:2f:
3b:30:8f:53:fb:ca:3a:b0:42:52:28:40:ff:dd:e4:
d6:17:e2:03:9d:de:75:30:4a:7b:34:f3:04:ad:d3:
06:26:58:63:59:24:8f:d7:12:3d:d3:b1:a3:19:9f:
95:b5:00:b3:71:61:41:43:bb:83:39:f3:be:dc:bb:
ce:88:51:a3:96:05:1d:6c:56:6c:3d:0f:cf:63:c1:
65:c8:b4:55:97:1e:2f:22:e4:64:d8:a1:ba:cb:11:
e4:25:8e:83:be:34:b0:b0:03:55:7f:1e:3a:52:0c:
36:5b:72:7a:e5:62:40:7c:0a:7c:59:1e:e1:ed:70:
2e:03:d8:52:6f:68:24:46:f1:64:dc:37:ab:ea:7b:
38:38:ce:e1:8f:5b:29:54:84:10:77:b9:dd:3e:fd:
c1:f5:8d:79:83:fe:30:ac:58:f4:52:16:6a:05:a6:
fa:1d:40:e3:a9:2b:16:89:de:28:0a:04:5a:f2:bb:
0c:c5:34:77:ad:e0:f2:f6:f0:bf:16:d2:62:09:a6:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F2:8B:83:7D:4B:BF:72:38:DC:47:F5:19:3D:12:09:5C:38:C3:DB
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ed:03:33:a4:88:74:02:83:77:6e:f8:e8:62:22:cf:d0:56:
c4:a1:bf:d9:a1:eb:c4:1c:e4:29:fe:0d:c1:c4:91:ff:68:a0:
3b:96:25:5e:bb:42:3e:ec:eb:5c:61:c8:7b:57:95:b6:6f:4b:
64:cd:67:c4:7e:eb:21:53:a7:26:4e:cc:30:2a:8e:41:71:17:
d9:a9:11:0d:d1:72:9b:92:6a:aa:10:de:06:dd:f9:67:c7:e9:
68:89:8b:11:3a:03:d7:05:ab:8e:47:b9:5e:ba:5c:05:85:73:
c4:6b:ab:45:da:53:09:ba:0f:f6:a3:16:17:4d:a9:39:83:59:
65:97:4e:6d:14:dd:0f:af:c2:49:b5:55:5c:0f:78:d7:df:9d:
ed:68:b2:fe:f2:13:f1:87:00:f8:86:cf:6b:96:c7:91:d3:ab:
8b:ab:60:69:46:19:60:9c:7b:e1:2a:0d:da:59:24:15:61:a0:
f1:67:76:f5:ea:44:42:93:0b:78:67:dd:50:a9:7f:57:b0:86:
48:3c:b2:d1:d8:a2:11:76:46:ab:7d:f3:ce:12:51:d7:49:2b:
a1:b9:36:23:03:18:da:ea:6b:a1:4d:81:4c:9e:e8:fa:cf:33:
d2:aa:56:d4:a4:bb:2f:77:88:9a:77:3a:68:a0:60:ca:0b:bc:
43:04:81:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:58 2025 by rpki-client