Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier: uSsQCDuq3luKQLL8pGsCsbVqa6NFsXnngXed+sSBgHY=
Subject key identifier: 46:B9:47:62:4F:AE:C8:B1:D1:86:DA:B3:4C:90:D8:F1:1F:9B:A7:70
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019A0AE0012B0EF407D34289A5D8CB6400BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number: 16F3
Signing time: Wed 22 Oct 2025 07:44:03 +0000
Manifest this update: Wed 22 Oct 2025 07:44:03 +0000
Manifest next update: Thu 23 Oct 2025 07:44:03 +0000
Files and hashes: 1: BE6iIPIX8zFmJc8BbYvpzoakrXE.roa (hash: zyf1exZFAT4j17OLfHltxLPlTiiX5aqGBHkZByoGZDo=)
2: TJJQIxFkBPcclxKSiBSE29OWp44.roa (hash: o//SaNRJoAMIebEbxmORe+ZFOyk3uvF1gz9qkdqBZAw=)
3: VNCm6_FzOH2wvD6zP5chPBaMMwY.roa (hash: Y0Swh/SNbMijU4wn94W5cEpLxOM8OyzH9BGZ9D0MVqQ=)
4: W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa (hash: IRDGgxnAqqWapeedP2vWmhEF4xJ1dwTUzVZaEKAfNbA=)
5: btlTysPNtSD16VvTDGwPRcFNQTA.roa (hash: 4GOMdcwUufKF7whyj8s9iAkFjKwaMeqK7FyHtxPB+Hs=)
6: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: 5+bPqtKlJLWjqdC88OanRgfyzjTmV7AWlZ048Xl6l2s=)
7: fxey-d2NI5gsqRXb0UikDcRQ4Hk.roa (hash: mnGLtOe1Pde5CCQx8NNLqfN+Rs/Jpu9t/4yCNDHWIJo=)
8: qOUhVI1G4SW4_rAdHVZjiGEJEhc.roa (hash: mLpbGQvUh3BNlZYktMPLqJ4KDfxwOCyR9t25dQjnDY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:e0:01:2b:0e:f4:07:d3:42:89:a5:d8:cb:64:00:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Oct 22 07:44:03 2025 GMT
Not After : Oct 23 07:44:03 2025 GMT
Subject: CN=46b947624faec8b1d186dab34c90d8f11f9ba770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e1:05:3e:26:ee:06:6a:e8:83:e0:ab:94:55:
68:29:72:3d:3d:e4:44:f6:4d:a5:e4:d3:3f:14:13:
fd:06:31:b1:a2:22:6a:bf:f9:cf:c8:02:5a:a6:80:
68:96:64:a2:c8:36:92:13:f8:2c:dd:21:a7:63:c1:
69:69:90:95:29:26:f0:62:e6:7c:71:a6:e4:99:22:
ec:c1:17:62:7d:4a:5f:77:a7:e3:95:5c:31:17:c0:
5b:cf:f3:fb:f0:16:a7:1c:1c:67:1e:3e:57:98:d8:
9d:71:cc:9e:f1:cc:a0:0e:1d:4d:ae:06:db:2b:73:
0f:57:0f:69:27:12:ca:92:ca:c7:04:20:e5:b6:28:
eb:b3:e7:b2:96:c4:02:ca:9f:a4:91:af:0c:ec:83:
56:1d:da:a1:d2:92:24:23:83:c5:b5:8d:b9:8e:69:
d4:7a:b1:b7:e0:18:a8:a5:c6:d9:06:4f:ec:b6:7a:
fa:7e:b5:de:27:cc:44:b7:e8:ca:07:59:7b:5a:87:
cc:21:67:6f:2c:29:80:f5:32:c4:0f:f3:f6:ed:f5:
07:6f:cd:bd:36:f8:08:07:16:93:84:07:c3:d3:ac:
54:df:98:ec:17:47:05:74:19:70:25:b8:30:9f:15:
e0:96:d1:94:02:ca:4b:f4:13:2f:2e:b4:bf:ef:75:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B9:47:62:4F:AE:C8:B1:D1:86:DA:B3:4C:90:D8:F1:1F:9B:A7:70
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:96:52:5f:b1:ae:bc:b7:59:ea:cb:9e:66:50:d2:ee:05:73:
70:04:65:38:dd:8c:19:c4:17:f5:3e:df:ff:a6:f4:a5:fe:b7:
33:cc:2f:6a:29:e8:67:06:ec:66:85:e9:5c:08:22:15:9d:eb:
ac:9f:f6:a6:8a:7b:9e:e1:7a:28:00:5b:1d:c1:01:31:f8:23:
cf:16:0c:4a:37:a8:d8:91:e9:8f:16:31:87:8c:75:bc:51:f8:
56:83:78:ce:a2:4c:3f:38:6b:42:4a:22:16:72:da:e3:be:9d:
a4:fd:c5:f2:77:f4:89:85:f9:7a:7e:b7:61:ea:d5:e8:05:d3:
28:b4:df:8c:56:45:38:25:ef:1c:db:9f:a2:ee:45:cf:f3:c2:
1a:9d:4a:c0:87:c1:ce:6b:03:ae:fc:3e:44:4e:81:0d:36:07:
d7:87:52:1d:cd:5a:01:ce:0a:60:b2:2d:80:a3:c3:6b:52:6c:
04:3d:ea:95:96:65:2d:d1:c7:e0:56:06:bf:14:00:31:f8:81:
12:09:4f:e5:1a:68:40:9c:0e:6c:ed:30:d4:0f:e2:c4:6d:3c:
71:c7:8c:b9:ce:c6:5c:b2:29:06:3e:46:bc:14:39:10:e2:4d:
7d:6c:a3:03:01:9e:6b:01:61:89:7f:b0:63:7a:ec:6e:97:ca:
80:45:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:18:08 2025 by rpki-client