Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: iN+OdiRJKQP+oOffTxUcb+dsuIXuu+K5NIR/NP5xbSc=
Subject key identifier: 25:0B:D4:64:F5:B5:8F:2D:6C:30:4B:1D:CD:14:C5:D3:4C:35:87:FB
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 0198D54E96DC52150B5B997256158E6722DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:34 +0000
Manifest this update: Sat 23 Aug 2025 05:02:34 +0000
Manifest next update: Sun 24 Aug 2025 05:02:34 +0000
Files and hashes: 1: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (hash: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=)
2: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: GMn9DrOd3cPM+iv2dg8EE1Q7vOwZaCrHzsNVCYqxCYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:96:dc:52:15:0b:5b:99:72:56:15:8e:67:22:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Aug 23 05:02:34 2025 GMT
Not After : Aug 24 05:02:34 2025 GMT
Subject: CN=250bd464f5b58f2d6c304b1dcd14c5d34c3587fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:d5:b9:ae:c6:45:b0:92:6a:45:0a:21:bf:
f9:f6:b6:c1:71:91:31:92:33:5e:38:3c:58:33:c8:
5b:3a:9c:91:54:c4:0b:e5:1a:3f:76:30:e4:59:c5:
3a:e0:3d:ee:83:7f:3b:0d:6e:7d:40:7d:46:72:7d:
73:c0:65:fd:9f:55:81:ec:5d:e6:2f:b8:64:1a:68:
e1:ab:d0:51:18:9b:ae:02:45:1c:bd:50:89:69:7f:
82:12:1a:db:03:92:bf:40:f9:f9:93:64:f7:5f:65:
31:5d:c5:bf:82:a0:74:4f:1b:a2:a2:75:93:35:25:
25:34:99:9f:ff:0e:d9:a4:41:db:e4:51:06:26:07:
6b:98:da:f1:ea:c5:12:eb:1a:6b:fd:9c:0c:8b:90:
46:1e:00:95:52:05:e3:78:6f:17:1c:9c:bc:71:2b:
3b:4a:8d:f0:2c:07:c8:24:11:2c:13:21:a0:1b:dd:
43:ba:99:95:ea:08:ae:9f:da:8f:c2:8c:28:6a:6c:
06:af:5c:9e:01:6f:85:b3:8a:51:77:bf:cd:e8:5d:
52:3f:37:7a:a4:e5:0b:f3:1e:5e:03:9a:b2:3b:8d:
c5:39:b2:b5:ea:4a:3d:0b:e6:71:df:22:e8:10:ed:
8d:53:06:d2:ea:ed:3c:86:c9:bc:cc:16:2b:92:51:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0B:D4:64:F5:B5:8F:2D:6C:30:4B:1D:CD:14:C5:D3:4C:35:87:FB
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:40:e4:79:93:19:90:48:a0:b3:f1:a6:78:3e:2a:d3:d7:a5:
0e:91:9f:54:ab:83:f3:ee:5a:83:26:00:4d:1b:b0:59:88:a5:
e8:84:b7:4e:2b:5d:03:16:25:dc:9a:c9:cd:15:12:e4:e5:02:
24:cf:4c:c9:76:f2:f9:1d:3f:88:d6:4a:61:61:9e:ce:cc:67:
83:42:b8:23:ba:98:52:f9:f2:d3:ce:46:06:5e:ae:21:ce:ce:
0f:fc:9f:f0:7c:f4:ed:67:7a:7c:36:99:25:3a:98:95:fa:0f:
84:ee:8e:13:20:83:53:00:53:3d:38:94:b2:26:09:29:c6:24:
99:db:d5:a3:c9:2e:61:ce:2d:85:3a:7e:1a:32:4f:9b:87:2e:
49:9c:ca:c8:b8:15:fe:f2:25:e4:13:c0:5e:55:e8:54:b6:34:
86:a7:d6:0a:22:5a:15:c3:ae:a8:e2:5c:ec:99:df:a0:bb:59:
bf:33:bd:42:7a:b0:14:f1:0d:f5:38:7b:39:bc:18:6d:49:12:
69:13:4c:1a:6a:c8:8f:0a:0a:30:09:cb:07:70:a2:ac:77:e2:
06:d6:0c:9c:14:cb:59:ae:a6:00:84:37:a4:9e:65:4a:18:54:
9a:52:30:75:a1:f1:33:0c:35:f5:0d:89:d1:56:4a:66:bf:a7:
43:ee:3b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTpbcUhULW5lyVhWOZyLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk
ODhmZTMwHhcNMjUwODIzMDUwMjM0WhcNMjUwODI0MDUwMjM0WjAzMTEwLwYDVQQD
EygyNTBiZDQ2NGY1YjU4ZjJkNmMzMDRiMWRjZDE0YzVkMzRjMzU4N2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcDVua7GRbCSakUKIb/59rbBcZEx
kjNeODxYM8hbOpyRVMQL5Ro/djDkWcU64D3ug387DW59QH1Gcn1zwGX9n1WB7F3m
L7hkGmjhq9BRGJuuAkUcvVCJaX+CEhrbA5K/QPn5k2T3X2UxXcW/gqB0TxuionWT
NSUlNJmf/w7ZpEHb5FEGJgdrmNrx6sUS6xpr/ZwMi5BGHgCVUgXjeG8XHJy8cSs7
So3wLAfIJBEsEyGgG91DupmV6giun9qPwowoamwGr1yeAW+Fs4pRd7/N6F1SPzd6
pOUL8x5eA5qyO43FObK16ko9C+Zx3yLoEO2NUwbS6u08hsm8zBYrklGNDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUL1GT1tY8tbDBLHc0UxdNMNYf7MB8GA1UdIwQY
MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt
NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj
LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUDkeZMZ
kEigs/GmeD4q09elDpGfVKuD8+5agyYATRuwWYil6IS3TitdAxYl3JrJzRUS5OUC
JM9MyXby+R0/iNZKYWGezsxng0K4I7qYUvny085GBl6uIc7OD/yf8Hz07Wd6fDaZ
JTqYlfoPhO6OEyCDUwBTPTiUsiYJKcYkmdvVo8kuYc4thTp+GjJPm4cuSZzKyLgV
/vIl5BPAXlXoVLY0hqfWCiJaFcOuqOJc7JnfoLtZvzO9QnqwFPEN9Th7ObwYbUkS
aRNMGmrIjwoKMAnLB3CirHfiBtYMnBTLWa6mAIQ3pJ5lShhUmlIwdaHxMww19Q2J
0VZKZr+nQ+47kg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:36 2025 by rpki-client