Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: Jt0J342KRcXplpfszXZDTxYgDXZE7fAZwj2AGW5LIBs=
Subject key identifier: 81:EE:35:EE:80:81:BA:65:3C:C3:39:41:9E:51:C2:8A:A9:E3:4F:2E
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 019A1BE2B5C36CB447E991A34C6F7C83AD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 13F9
Signing time: Sat 25 Oct 2025 15:00:33 +0000
Manifest this update: Sat 25 Oct 2025 15:00:33 +0000
Manifest next update: Sun 26 Oct 2025 15:00:33 +0000
Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=)
2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=)
3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=)
4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=)
5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=)
6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: HAolrG++8vxbtqistlT+PuSiv6/TBSM5gjyl5ZUan+A=)
7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=)
8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=)
9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:b5:c3:6c:b4:47:e9:91:a3:4c:6f:7c:83:ad:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Oct 25 15:00:33 2025 GMT
Not After : Oct 26 15:00:33 2025 GMT
Subject: CN=81ee35ee8081ba653cc339419e51c28aa9e34f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:20:34:5d:a8:75:2a:8f:a6:9d:97:c6:37:
c1:88:ae:08:96:1d:1b:e8:8b:dc:69:12:b4:f7:51:
43:8f:6e:0b:9c:c2:cb:f5:30:f8:08:c3:27:2b:27:
1e:60:66:b3:54:52:1e:00:bc:b6:89:8c:fa:58:1c:
7c:24:8c:be:aa:9a:28:49:b9:54:98:bb:1c:ee:fd:
52:c0:3f:f4:a9:05:e0:d2:8b:43:89:fe:fc:f3:19:
57:6d:f0:ee:0e:b0:25:31:e7:6e:4c:79:56:e1:dc:
46:a0:19:bc:4e:93:b4:84:33:f7:5a:7d:70:4c:ad:
f0:09:f0:c0:6f:d6:47:e0:93:11:35:16:8f:e7:48:
1f:89:ed:14:c4:94:48:83:59:62:9b:42:8d:c0:22:
45:9c:51:41:30:dc:cf:d8:97:08:88:c7:24:07:24:
c5:e9:81:bf:05:00:ca:c4:d4:6c:23:1e:f9:cd:c9:
2d:07:81:57:4d:84:0d:30:24:4a:18:68:2a:3e:85:
a6:94:15:36:a6:18:89:5b:66:ee:12:44:b6:ff:53:
fd:28:ad:21:28:d3:a5:28:34:96:90:f6:58:8f:9b:
d0:99:e3:c6:7d:16:1d:3b:83:86:f2:a6:bf:79:25:
fe:a4:de:3f:b5:44:db:3e:01:6f:02:28:39:25:33:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:35:EE:80:81:BA:65:3C:C3:39:41:9E:51:C2:8A:A9:E3:4F:2E
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d7:74:ae:57:c4:71:01:f0:a0:66:56:b4:aa:d7:f3:75:15:
63:f1:d2:c9:87:2f:d4:8d:a2:e8:fb:23:68:3c:dd:02:3b:d1:
73:88:25:2c:4d:b2:fe:78:80:74:76:bf:0b:4d:51:93:f0:a1:
7f:4c:2d:c7:13:27:0b:93:0f:e2:88:f1:ac:22:78:f1:66:2c:
94:eb:ce:e9:aa:80:94:f7:01:c8:5b:42:60:69:98:f4:ab:df:
b8:d5:83:a1:12:e7:eb:8f:35:4b:37:5f:6a:19:ca:5b:0f:56:
22:ad:b2:56:ec:c6:15:d2:74:88:7c:7b:d3:1c:50:7a:90:68:
53:d3:17:a1:43:6e:75:fb:35:72:48:7f:f9:a5:27:2b:58:45:
9a:fb:8c:aa:da:dd:c1:c4:06:c9:f4:7b:c1:f3:85:76:2f:1f:
23:85:d4:d4:5d:1d:57:59:cb:ed:20:65:90:c5:a1:24:f0:ff:
94:33:a3:00:50:d4:d1:02:ab:94:5e:10:f8:15:7b:5b:1e:60:
ab:6c:4e:b0:c7:3d:44:a3:a7:a5:14:15:92:fd:66:4c:ab:47:
88:b4:17:2a:e7:e8:f6:cc:f5:2f:4e:22:1e:d6:3d:d1:23:f0:
77:7e:31:25:1d:d3:ad:ac:f6:4f:7f:0c:c1:72:10:39:ed:e2:
b9:37:f8:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZob4rXDbLRH6ZGjTG98g61lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1
ZDBmNTUwHhcNMjUxMDI1MTUwMDMzWhcNMjUxMDI2MTUwMDMzWjAzMTEwLwYDVQQD
Eyg4MWVlMzVlZTgwODFiYTY1M2NjMzM5NDE5ZTUxYzI4YWE5ZTM0ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPAgNF2odSqPpp2XxjfBiK4Ilh0b
6IvcaRK091FDj24LnMLL9TD4CMMnKyceYGazVFIeALy2iYz6WBx8JIy+qpooSblU
mLsc7v1SwD/0qQXg0otDif788xlXbfDuDrAlMeduTHlW4dxGoBm8TpO0hDP3Wn1w
TK3wCfDAb9ZH4JMRNRaP50gfie0UxJRIg1lim0KNwCJFnFFBMNzP2JcIiMckByTF
6YG/BQDKxNRsIx75zcktB4FXTYQNMCRKGGgqPoWmlBU2phiJW2buEkS2/1P9KK0h
KNOlKDSWkPZYj5vQmePGfRYdO4OG8qa/eSX+pN4/tUTbPgFvAig5JTNzDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHuNe6AgbplPMM5QZ5Rwoqp408uMB8GA1UdIwQY
MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt
YWI3OWEzNzg5ZjhmLzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm
LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNd0rlfE
cQHwoGZWtKrX83UVY/HSyYcv1I2i6PsjaDzdAjvRc4glLE2y/niAdHa/C01Rk/Ch
f0wtxxMnC5MP4ojxrCJ48WYslOvO6aqAlPcByFtCYGmY9KvfuNWDoRLn6481Szdf
ahnKWw9WIq2yVuzGFdJ0iHx70xxQepBoU9MXoUNudfs1ckh/+aUnK1hFmvuMqtrd
wcQGyfR7wfOFdi8fI4XU1F0dV1nL7SBlkMWhJPD/lDOjAFDU0QKrlF4Q+BV7Wx5g
q2xOsMc9RKOnpRQVkv1mTKtHiLQXKufo9sz1L04iHtY90SPwd34xJR3Traz2T38M
wXIQOe3iuTf4Yw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 20:00:16 2025 by rpki-client