Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
File: cw4Zvy8v23MCMtosRVGjEro-LuI.mft (raw, json)
Hash identifier: qSHsZVigpzUb/BamDYzNzu1267NdQpafyoeXhlFnxoA=
Subject key identifier: A8:77:2B:92:E9:1B:DB:21:8D:83:E8:B0:78:B2:91:54:40:D9:61:CF
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Certificate issuer: /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial: 019A03A3BDE2854DBE5AC57FC847EE27C286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
Manifest number: 16ED
Signing time: Mon 20 Oct 2025 22:00:53 +0000
Manifest this update: Mon 20 Oct 2025 22:00:53 +0000
Manifest next update: Tue 21 Oct 2025 22:00:53 +0000
Files and hashes: 1: 1z8pyfwC2t4dhlRaN8IL2Vz2Hao.roa (hash: okZD4KMt3vd7NMiadPiaHzBYrfOLxrrZpbs/oGs3PRE=)
2: 4PCFTZ1aepYvP13_Ep7q7mZBv_s.roa (hash: nxXggf/AC/RJxQoUxCNgb0lu+FwJmy4tkPULZ/J1w0w=)
3: cw4Zvy8v23MCMtosRVGjEro-LuI.crl (hash: DbsVtzDJkGs0UVcqNAFp02qJrykNB0ol2NnT49FZBNI=)
4: sZiDjovlZR7TPPXq724QB4yd_Ds.roa (hash: g0NC0qA2yq5MjWHr5RjOBshN8A2Yl9uqhpeNRfy6QdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:bd:e2:85:4d:be:5a:c5:7f:c8:47:ee:27:c2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Validity
Not Before: Oct 20 22:00:53 2025 GMT
Not After : Oct 21 22:00:53 2025 GMT
Subject: CN=a8772b92e91bdb218d83e8b078b2915440d961cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:3f:90:6d:22:33:09:d1:6d:64:e5:3d:0d:
40:62:6d:6b:69:62:82:aa:98:c6:99:31:9e:07:f3:
01:40:a2:9d:4b:40:ff:20:2d:39:37:28:c8:0d:67:
e8:37:4d:c7:16:b9:f9:fb:b4:e0:ee:78:84:f8:85:
15:37:17:8e:55:8c:5e:39:ea:24:a3:7b:6e:ff:f7:
68:6e:c1:28:29:8e:34:4b:fe:2b:8a:bf:b5:0e:c8:
f2:7a:2c:62:cb:f6:9c:6e:6b:40:9e:1c:2d:31:77:
00:15:2a:4c:b2:8a:e6:b1:a5:21:b1:4a:d9:9a:fc:
57:58:71:b7:11:68:cc:9f:8f:95:db:68:32:d2:11:
7c:37:fc:6e:08:30:1d:2e:91:fe:02:fe:0a:bf:a1:
19:8a:f9:ba:23:ab:62:f3:5d:9b:a9:45:6d:91:dc:
09:93:ee:ae:d3:5d:66:6e:dd:ee:44:e5:92:5a:76:
64:a6:27:ce:ee:d2:90:47:fb:8f:7f:28:5f:1e:ae:
cb:2a:42:03:72:1a:90:6a:c6:77:58:a9:c8:a2:15:
e6:ea:67:a0:7c:eb:28:50:ad:c2:5f:97:43:b7:2e:
8c:7d:73:da:ad:98:77:4d:9e:77:aa:55:1b:2f:81:
c6:21:42:6e:cc:21:54:23:03:d3:a3:fe:9a:3b:00:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:77:2B:92:E9:1B:DB:21:8D:83:E8:B0:78:B2:91:54:40:D9:61:CF
X509v3 Authority Key Identifier:
keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:99:a6:d1:84:05:85:78:2a:eb:25:2e:32:00:37:57:47:95:
99:8d:79:94:ac:4f:dd:36:dc:71:85:e0:c4:3f:f2:6e:37:65:
73:49:0e:0a:c3:86:c4:a2:2c:be:ce:4f:3a:d3:63:83:c9:9d:
a9:9e:c2:ad:40:ed:d1:49:28:c9:f9:02:7b:62:bb:ba:df:82:
ce:f9:0a:77:ef:97:33:d5:bb:c7:e2:2a:b1:d3:08:6d:d7:61:
c1:26:14:3c:d1:c3:1f:66:c4:5d:7f:cd:33:91:e3:52:93:2d:
af:28:f5:dd:bc:ef:1b:43:9b:c6:06:52:48:e8:46:e8:79:20:
1b:7d:77:21:08:1a:13:91:c0:a3:9d:65:6e:ef:b7:88:c2:0c:
b4:74:b7:e2:12:b1:b6:2d:fd:7c:5e:cb:bb:ac:07:2e:2e:b7:
97:7b:07:84:4c:b0:6d:9a:54:58:89:ac:50:69:1d:3a:fd:24:
22:09:53:36:99:be:f0:80:34:f7:f7:84:c2:b9:40:72:83:96:
da:47:4f:42:69:47:b8:93:3d:33:13:c7:d0:97:3a:2d:6d:e4:
38:4c:54:78:83:58:a2:d7:f3:ad:51:85:f0:3e:8f:91:60:42:
4e:dd:1b:18:8c:f1:ec:99:8f:98:5a:4d:e2:44:47:60:24:09:
4d:65:e5:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDo73ihU2+WsV/yEfuJ8KGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMGUxOWJmMmYyZmRiNzMwMjMyZGEyYzQ1NTFhMzEyYmEz
ZTJlZTIwHhcNMjUxMDIwMjIwMDUzWhcNMjUxMDIxMjIwMDUzWjAzMTEwLwYDVQQD
EyhhODc3MmI5MmU5MWJkYjIxOGQ4M2U4YjA3OGIyOTE1NDQwZDk2MWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L8/kG0iMwnRbWTlPQ1AYm1raWKC
qpjGmTGeB/MBQKKdS0D/IC05NyjIDWfoN03HFrn5+7Tg7niE+IUVNxeOVYxeOeok
o3tu//dobsEoKY40S/4rir+1Dsjyeixiy/acbmtAnhwtMXcAFSpMsormsaUhsUrZ
mvxXWHG3EWjMn4+V22gy0hF8N/xuCDAdLpH+Av4Kv6EZivm6I6ti812bqUVtkdwJ
k+6u011mbt3uROWSWnZkpifO7tKQR/uPfyhfHq7LKkIDchqQasZ3WKnIohXm6meg
fOsoUK3CX5dDty6MfXParZh3TZ53qlUbL4HGIUJuzCFUIwPTo/6aOwD4JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKh3K5LpG9shjYPosHiykVRA2WHPMB8GA1UdIwQY
MBaAFHMOGb8vL9tzAjLaLEVRoxK6Pi7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3c0WnZ5OHYyM01DTXRvc1JWR2pFcm8tTHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lODE3NTUtNDU5Mi00ZjIwLWFmNzAt
Y2FmOTUxZTE1MzFkLzEvY3c0WnZ5OHYyM01DTXRvc1JWR2pFcm8tTHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lODE3NTUtNDU5Mi00ZjIwLWFmNzAtY2FmOTUxZTE1MzFk
LzEvY3c0WnZ5OHYyM01DTXRvc1JWR2pFcm8tTHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5mm0YQF
hXgq6yUuMgA3V0eVmY15lKxP3TbccYXgxD/ybjdlc0kOCsOGxKIsvs5POtNjg8md
qZ7CrUDt0UkoyfkCe2K7ut+CzvkKd++XM9W7x+IqsdMIbddhwSYUPNHDH2bEXX/N
M5HjUpMtryj13bzvG0ObxgZSSOhG6HkgG313IQgaE5HAo51lbu+3iMIMtHS34hKx
ti39fF7Lu6wHLi63l3sHhEywbZpUWImsUGkdOv0kIglTNpm+8IA09/eEwrlAcoOW
2kdPQmlHuJM9MxPH0Jc6LW3kOExUeINYotfzrVGF8D6PkWBCTt0bGIzx7JmPmFpN
4kRHYCQJTWXlWQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:49:30 2025 by rpki-client