Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: UZNcFHEFj45T+GdEw/3SoAL7rARmo6O7kt02jRHgWw8=
Subject key identifier: DE:9D:6C:BA:7D:EE:36:08:D9:AE:A5:0B:D4:48:C3:0D:6D:DA:B5:51
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019A240A50CAEE2EC8686D375E7F4039ADE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 1707
Signing time: Mon 27 Oct 2025 05:00:47 +0000
Manifest this update: Mon 27 Oct 2025 05:00:47 +0000
Manifest next update: Tue 28 Oct 2025 05:00:47 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: Rfk0sLOBXIme5NbiyS6yyG6NWii4eXo+hdUvu8UMt2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:50:ca:ee:2e:c8:68:6d:37:5e:7f:40:39:ad:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Oct 27 05:00:47 2025 GMT
Not After : Oct 28 05:00:47 2025 GMT
Subject: CN=de9d6cba7dee3608d9aea50bd448c30d6ddab551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:47:f4:e5:d3:81:9c:64:5d:12:94:66:9e:
6e:cc:2f:9f:46:aa:86:ae:06:be:43:61:92:45:eb:
01:35:30:e5:94:4b:7e:f6:1d:6a:98:0f:2a:4c:2a:
a9:9c:29:b0:f6:a7:ad:e6:e8:66:bf:47:84:d8:f0:
b2:19:24:40:b4:2b:16:6e:25:35:84:f7:00:fa:69:
09:8e:9e:46:64:77:a0:cd:11:ee:d9:e7:ce:4e:4b:
cb:29:0a:65:ba:d1:d5:c4:12:4c:3c:9a:ef:e5:ef:
5d:31:8d:21:0e:8e:0d:af:16:6e:90:55:cf:9c:41:
44:88:e8:99:2a:bc:48:47:58:2e:3f:80:4e:af:9a:
d3:29:dd:72:80:1d:65:27:07:6a:b5:39:aa:e4:d0:
78:f3:51:fe:5e:13:18:93:cb:cf:22:04:1d:5f:0f:
ae:85:70:17:ec:fd:46:d5:5d:cb:6d:e8:8a:12:97:
66:80:8d:3d:db:aa:2d:75:91:04:7a:f4:5a:1b:1e:
a1:d3:5b:b7:45:1a:51:f3:26:c9:a4:a5:25:db:c2:
cb:06:dc:37:65:9d:e0:6a:73:c6:5a:41:0f:47:98:
b3:ed:b8:1d:d8:f9:eb:f6:3f:cd:b2:ba:c4:71:6a:
d7:be:64:46:3a:db:68:38:5d:72:90:a7:5c:e0:21:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9D:6C:BA:7D:EE:36:08:D9:AE:A5:0B:D4:48:C3:0D:6D:DA:B5:51
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:bd:5b:4d:b1:fa:d3:51:66:ba:d1:fb:17:82:40:15:03:7d:
ed:c5:36:99:79:d6:11:5f:10:87:ae:3e:89:91:ec:3d:a3:5d:
80:5d:70:95:80:30:a6:a7:f5:1a:54:3c:11:05:48:b1:34:9d:
77:04:00:a3:b4:94:23:0d:06:05:61:c1:19:67:d7:e1:0b:c8:
b1:22:cc:1e:57:08:b9:3e:76:43:30:a3:4e:9c:7a:63:3b:0f:
0f:e4:74:20:76:b7:11:ff:b2:9b:33:6b:3b:d4:97:32:3b:8b:
f8:07:a8:7d:df:0f:02:e8:15:41:72:d6:a1:f3:d4:71:22:55:
de:ef:2a:36:f7:fd:e9:d9:e6:08:23:75:f2:1e:30:a5:e0:69:
19:c1:99:bf:6e:c3:b6:9a:1d:32:2f:d0:ff:a6:84:cc:53:c9:
2d:8b:81:89:5e:fb:53:b5:4e:b8:30:9d:b7:af:3c:17:1f:a6:
d4:eb:76:00:cf:4b:80:92:06:72:8f:a1:8d:1a:78:6f:3a:c9:
0f:33:ef:93:2b:93:15:4b:60:4e:93:37:05:59:d1:e1:0a:36:
14:4b:65:78:09:36:92:c2:82:71:12:5d:b3:7d:87:65:e8:7b:
2c:de:8c:61:bd:b3:7a:df:61:e8:45:d1:97:87:b7:1a:ca:2c:
a1:72:24:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokClDK7i7IaG03Xn9AOa3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOWQ4NjA5NmE0OTExMGNmOWJmNjcwMjQwYjUxOTMxNWI2
NmFiY2IwHhcNMjUxMDI3MDUwMDQ3WhcNMjUxMDI4MDUwMDQ3WjAzMTEwLwYDVQQD
EyhkZTlkNmNiYTdkZWUzNjA4ZDlhZWE1MGJkNDQ4YzMwZDZkZGFiNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GtH9OXTgZxkXRKUZp5uzC+fRqqG
rga+Q2GSResBNTDllEt+9h1qmA8qTCqpnCmw9qet5uhmv0eE2PCyGSRAtCsWbiU1
hPcA+mkJjp5GZHegzRHu2efOTkvLKQplutHVxBJMPJrv5e9dMY0hDo4NrxZukFXP
nEFEiOiZKrxIR1guP4BOr5rTKd1ygB1lJwdqtTmq5NB481H+XhMYk8vPIgQdXw+u
hXAX7P1G1V3LbeiKEpdmgI0926otdZEEevRaGx6h01u3RRpR8ybJpKUl28LLBtw3
ZZ3ganPGWkEPR5iz7bgd2Pnr9j/NsrrEcWrXvmRGOttoOF1ykKdc4CH5fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6dbLp97jYI2a6lC9RIww1t2rVRMB8GA1UdIwQY
MBaAFAudhglqSREM+b9nAkC1GTFbZqvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUt
OGMxMDkwOWE0ODVjLzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUtOGMxMDkwOWE0ODVj
LzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvr1bTbH6
01FmutH7F4JAFQN97cU2mXnWEV8Qh64+iZHsPaNdgF1wlYAwpqf1GlQ8EQVIsTSd
dwQAo7SUIw0GBWHBGWfX4QvIsSLMHlcIuT52QzCjTpx6YzsPD+R0IHa3Ef+ymzNr
O9SXMjuL+Aeofd8PAugVQXLWofPUcSJV3u8qNvf96dnmCCN18h4wpeBpGcGZv27D
tpodMi/Q/6aEzFPJLYuBiV77U7VOuDCdt688Fx+m1Ot2AM9LgJIGco+hjRp4bzrJ
DzPvkyuTFUtgTpM3BVnR4Qo2FEtleAk2ksKCcRJds32HZeh7LN6MYb2zet9h6EXR
l4e3GsosoXIkKQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:54 2025 by rpki-client