Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: Fe4PeqA4qwlIDdbVcwxTXF+n1NlN7iIBVzMCLJIi7mA=
Subject key identifier: 31:35:20:D3:00:E4:06:EF:A5:76:24:F2:CE:79:AC:74:65:4F:40:6A
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 01993537C67773D85C1F4A3A710FA13E67BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 20:01:11 +0000
Manifest this update: Wed 10 Sep 2025 20:01:11 +0000
Manifest next update: Thu 11 Sep 2025 20:01:11 +0000
Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: PRxRiqZsDKNO1V+GMuBMXvflZgv/jf2NgeNw5VLPsgY=)
3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:c6:77:73:d8:5c:1f:4a:3a:71:0f:a1:3e:67:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Sep 10 20:01:11 2025 GMT
Not After : Sep 11 20:01:11 2025 GMT
Subject: CN=313520d300e406efa57624f2ce79ac74654f406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:2c:2a:60:dd:29:2b:c5:23:57:b6:2d:d7:
78:b0:f7:07:08:42:0c:ca:6a:3e:c6:38:e2:d0:57:
ba:94:b6:ed:d6:52:6f:c5:49:bf:29:b5:9f:e5:b0:
b9:27:58:8f:8d:c9:c6:df:dd:b2:07:35:8a:fa:b3:
08:b2:45:53:3a:3c:97:1b:92:e3:7d:f8:d1:d3:ed:
7b:8b:29:a0:85:e7:7d:3d:3f:8e:53:c5:6d:33:c0:
83:4f:ce:d9:54:bc:ae:c9:36:81:9d:60:80:50:51:
ed:4c:e8:af:ff:63:cf:a3:90:07:58:61:35:ef:80:
04:8f:61:97:6b:aa:ee:a7:48:1d:2f:cd:b7:e9:c8:
ba:6b:87:b7:4e:31:38:f3:4b:7a:73:aa:77:be:67:
94:59:92:cb:17:28:8a:1c:20:13:30:e2:47:4e:44:
0e:96:12:e7:25:94:52:e6:ac:f6:ec:0f:c9:3f:e6:
17:eb:0c:eb:10:15:45:7e:e4:93:1b:9d:ae:04:fb:
d0:4f:0c:e7:51:e4:29:0a:17:0a:8d:a8:55:1b:3f:
ea:18:64:2c:b1:6c:13:f6:78:ce:93:60:b0:5e:3f:
62:8f:6a:9a:eb:04:ec:98:e1:8e:e4:df:1d:5f:c3:
d2:89:a9:b4:59:13:d6:c6:ad:06:1e:71:86:98:e1:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:35:20:D3:00:E4:06:EF:A5:76:24:F2:CE:79:AC:74:65:4F:40:6A
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:88:ff:56:71:ce:cf:5b:d6:28:59:94:24:f3:24:27:50:42:
b2:50:85:2a:01:f1:0b:e7:75:1c:2a:31:c6:d7:f2:fe:92:0a:
7b:d2:b1:f2:54:50:c8:21:4c:cc:3b:83:87:90:d0:d8:c6:12:
ee:87:a4:94:8e:43:fb:0d:99:99:d2:d9:d2:f7:a0:a4:0e:09:
d0:94:16:fe:4a:af:fc:d3:3c:13:95:ab:80:20:2b:51:e4:68:
09:96:29:96:a3:79:ff:9b:06:6f:cb:de:91:61:7d:f7:12:17:
6c:fa:9d:d7:78:c1:5d:3a:1f:24:de:99:0c:6a:e5:2f:9a:94:
07:2d:6a:f7:ea:62:d3:2e:64:62:25:34:79:65:dd:41:4f:cf:
ad:00:a3:c1:b5:fe:68:17:0f:58:69:9d:31:fb:ae:72:0b:d2:
b3:fc:f3:f6:d9:6c:4d:1e:d9:86:1f:81:34:12:f9:29:ad:2c:
63:45:5c:a2:cf:e2:66:df:f5:a5:e8:cb:17:8f:19:9b:60:55:
36:28:22:5f:b8:5d:b9:bb:cc:fc:a8:5f:c5:22:6f:c6:98:d9:
2b:32:42:5e:d9:a8:68:98:c8:af:4f:64:ac:44:03:0a:69:07:
bc:a6:0f:7c:b4:bb:d5:bc:80:86:bf:dc:b0:70:58:12:ae:d1:
78:da:78:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1N8Z3c9hcH0o6cQ+hPme6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZGU3MDdkNmMwMTAwNmIyYWNhNjg3ZWFhYjI5Y2I0NzM2
Yjc2NjgwHhcNMjUwOTEwMjAwMTExWhcNMjUwOTExMjAwMTExWjAzMTEwLwYDVQQD
EygzMTM1MjBkMzAwZTQwNmVmYTU3NjI0ZjJjZTc5YWM3NDY1NGY0MDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmQsKmDdKSvFI1e2Ldd4sPcHCEIM
ymo+xjji0Fe6lLbt1lJvxUm/KbWf5bC5J1iPjcnG392yBzWK+rMIskVTOjyXG5Lj
ffjR0+17iymghed9PT+OU8VtM8CDT87ZVLyuyTaBnWCAUFHtTOiv/2PPo5AHWGE1
74AEj2GXa6rup0gdL8236ci6a4e3TjE480t6c6p3vmeUWZLLFyiKHCATMOJHTkQO
lhLnJZRS5qz27A/JP+YX6wzrEBVFfuSTG52uBPvQTwznUeQpChcKjahVGz/qGGQs
sWwT9njOk2CwXj9ij2qa6wTsmOGO5N8dX8PSiam0WRPWxq0GHnGGmOHVUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE1INMA5AbvpXYk8s55rHRlT0BqMB8GA1UdIwQY
MBaAFHDecH1sAQBrKspofqqynLRza3ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQt
MThlNWM1MzdkNTFkLzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQtMThlNWM1MzdkNTFk
LzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4j/VnHO
z1vWKFmUJPMkJ1BCslCFKgHxC+d1HCoxxtfy/pIKe9Kx8lRQyCFMzDuDh5DQ2MYS
7oeklI5D+w2ZmdLZ0vegpA4J0JQW/kqv/NM8E5WrgCArUeRoCZYplqN5/5sGb8ve
kWF99xIXbPqd13jBXTofJN6ZDGrlL5qUBy1q9+pi0y5kYiU0eWXdQU/PrQCjwbX+
aBcPWGmdMfuucgvSs/zz9tlsTR7Zhh+BNBL5Ka0sY0Vcos/iZt/1pejLF48Zm2BV
NigiX7hdubvM/KhfxSJvxpjZKzJCXtmoaJjIr09krEQDCmkHvKYPfLS71byAhr/c
sHBYEq7ReNp4fw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 23:49:44 2025 by rpki-client