Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: ApjleYOH/ZfQ6aXEEueyuWpPF00cQ2vjEoecRJZXES0=
Subject key identifier: 08:1F:4F:DF:9D:27:65:18:F1:87:25:EC:1F:12:E5:73:83:B2:42:6D
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 0199239F118BB5C1B1BA951BC33E235EDCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 6F
Signing time: Sun 07 Sep 2025 10:00:51 +0000
Manifest this update: Sun 07 Sep 2025 10:00:51 +0000
Manifest next update: Mon 08 Sep 2025 10:00:51 +0000
Files and hashes: 1: _h3FGAhO3fVXS5xwWldFCoCGTk8.roa (hash: csfcVsaCewEHGOnoGemFfnFrqe3f8adfupDygaqxPac=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: FjpBAt7dU2hfl6C8t6KQ53ZECbB2u+cBBFz/gnybPP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:11:8b:b5:c1:b1:ba:95:1b:c3:3e:23:5e:dc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Sep 7 10:00:51 2025 GMT
Not After : Sep 8 10:00:51 2025 GMT
Subject: CN=081f4fdf9d276518f18725ec1f12e57383b2426d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:03:ec:21:33:5c:63:f4:ad:94:b7:19:27:
d2:a1:81:a8:44:80:2f:dc:e7:9c:3b:80:fa:9f:14:
70:6f:7d:28:57:38:d8:06:63:d6:7e:18:d0:90:bb:
0b:52:8e:87:2b:22:96:e4:ad:08:bf:34:d7:64:fa:
0a:59:24:89:81:e4:9a:d2:80:cc:89:a9:dc:13:0a:
dc:dc:cc:e5:41:88:74:f0:d9:c3:13:f6:f4:2b:4d:
fa:cb:77:4c:59:21:7b:cb:2c:4c:ee:b7:0b:a5:ab:
05:22:22:61:71:78:cd:8f:27:59:33:8b:24:a0:df:
f3:27:ff:7c:66:69:25:3b:8d:da:69:e9:57:fb:7a:
96:e5:cc:fd:82:ea:85:61:88:5d:ee:8c:23:72:f2:
2d:60:81:71:47:f5:2c:1e:f6:83:9e:f2:9b:d7:7e:
54:8a:72:32:2f:96:51:24:e7:63:f9:a4:a4:a8:73:
d5:56:54:60:f2:8c:4a:9b:56:9b:b2:62:f6:2c:2c:
72:26:4a:d2:a8:64:eb:0f:b1:b3:ae:01:b7:31:90:
58:17:de:7f:f9:58:2c:81:18:31:74:08:5a:4c:3a:
a6:e1:6a:d6:e7:1e:70:5e:92:4b:fc:79:a6:36:98:
f3:c3:b5:d5:93:f7:a0:9d:79:12:54:9e:a0:28:ac:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1F:4F:DF:9D:27:65:18:F1:87:25:EC:1F:12:E5:73:83:B2:42:6D
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b7:01:70:c3:4b:54:f4:03:74:0a:17:03:e0:ec:7d:9a:62:
37:1b:9f:7e:fe:61:85:b3:77:a1:ad:2b:75:2e:0c:cf:ca:89:
b1:5b:f0:4a:09:03:0c:ab:93:da:30:9f:64:0b:59:01:65:64:
02:87:80:b0:f1:8f:f0:7c:3d:90:16:87:ba:e4:e9:bb:21:87:
9d:01:3d:f3:b6:80:0b:2f:44:51:e9:82:e6:22:c7:cd:a3:5f:
e0:db:79:38:5b:a7:fd:a3:da:76:9f:8d:2a:e3:29:07:db:22:
01:d8:48:cd:4e:3d:94:3b:ff:18:76:25:07:e2:02:9f:65:a3:
36:25:f9:26:3b:8b:59:f7:50:60:9b:76:3a:fb:8d:2d:58:8f:
99:8d:ad:2e:4c:5f:67:72:88:1b:18:25:31:7e:e5:1a:f4:80:
b5:9a:3a:87:81:0f:63:48:74:e9:da:05:08:71:5b:de:c9:38:
61:66:d3:f2:54:0b:ec:47:ca:46:02:28:88:2f:63:32:fa:ac:
1f:96:b9:2a:16:75:56:d0:c6:9f:8e:50:b8:a0:6f:fe:cf:c7:
83:6a:0c:b8:9b:ed:0c:11:c9:a2:5c:ec:6c:1e:b9:d1:89:d6:
9a:fa:94:a5:4b:07:38:89:3d:b1:38:dc:12:52:ce:99:c7:5f:
f1:a8:f6:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnxGLtcGxupUbwz4jXtynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOWNhNjNlNmQyYjUwNDQ0OTIxN2RjMDc4OGM5ZDM3NDg5
YjRjNDUwHhcNMjUwOTA3MTAwMDUxWhcNMjUwOTA4MTAwMDUxWjAzMTEwLwYDVQQD
EygwODFmNGZkZjlkMjc2NTE4ZjE4NzI1ZWMxZjEyZTU3MzgzYjI0MjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDAD7CEzXGP0rZS3GSfSoYGoRIAv
3OecO4D6nxRwb30oVzjYBmPWfhjQkLsLUo6HKyKW5K0IvzTXZPoKWSSJgeSa0oDM
iancEwrc3MzlQYh08NnDE/b0K036y3dMWSF7yyxM7rcLpasFIiJhcXjNjydZM4sk
oN/zJ/98ZmklO43aaelX+3qW5cz9guqFYYhd7owjcvItYIFxR/UsHvaDnvKb135U
inIyL5ZRJOdj+aSkqHPVVlRg8oxKm1absmL2LCxyJkrSqGTrD7GzrgG3MZBYF95/
+VgsgRgxdAhaTDqm4WrW5x5wXpJL/HmmNpjzw7XVk/egnXkSVJ6gKKw/AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgfT9+dJ2UY8Ycl7B8S5XODskJtMB8GA1UdIwQY
MBaAFHKcpj5tK1BESSF9wHiMnTdIm0xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2Ut
NTU5ZTNkNzZjNWI2LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2UtNTU5ZTNkNzZjNWI2
LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbcBcMNL
VPQDdAoXA+DsfZpiNxuffv5hhbN3oa0rdS4Mz8qJsVvwSgkDDKuT2jCfZAtZAWVk
AoeAsPGP8Hw9kBaHuuTpuyGHnQE987aACy9EUemC5iLHzaNf4Nt5OFun/aPadp+N
KuMpB9siAdhIzU49lDv/GHYlB+ICn2WjNiX5JjuLWfdQYJt2OvuNLViPmY2tLkxf
Z3KIGxglMX7lGvSAtZo6h4EPY0h06doFCHFb3sk4YWbT8lQL7EfKRgIoiC9jMvqs
H5a5KhZ1VtDGn45QuKBv/s/Hg2oMuJvtDBHJolzsbB650YnWmvqUpUsHOIk9sTjc
ElLOmcdf8aj2ig==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:17 2025 by rpki-client