Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: xZ3i0k+BIIQu903aaQWt1uEWeTvgFztvmufvrX2Xjpk=
Subject key identifier: 1D:26:D8:DC:9C:81:AF:9B:A7:BE:F7:6B:AC:C2:0C:4F:9E:5A:F1:8C
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 0198D6CD752105ED723403AE48FA936B82F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 08DF
Signing time: Sat 23 Aug 2025 12:00:45 +0000
Manifest this update: Sat 23 Aug 2025 12:00:45 +0000
Manifest next update: Sun 24 Aug 2025 12:00:45 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: qQJjXSvg0E4WvsAoiuZmR59PAUGLEsGKdsqMt151zB0=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:75:21:05:ed:72:34:03:ae:48:fa:93:6b:82:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Aug 23 12:00:45 2025 GMT
Not After : Aug 24 12:00:45 2025 GMT
Subject: CN=1d26d8dc9c81af9ba7bef76bacc20c4f9e5af18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:2c:e7:1b:df:26:36:57:85:93:00:41:1b:
38:8c:1e:3b:68:c3:66:f8:9a:c5:1b:e8:c7:47:99:
6c:ea:1c:e3:e1:21:98:7f:a0:b8:2a:a8:f7:20:7c:
64:1c:c2:da:9f:1b:db:a8:40:87:a4:1f:11:04:cf:
c9:8a:1b:cf:78:2c:51:a1:2f:3a:3b:4f:66:bf:72:
1c:49:5c:bb:66:d6:a3:47:31:19:78:62:f8:3e:f4:
56:90:b8:40:e3:36:d9:ea:5d:60:a2:24:0b:c7:df:
96:63:b7:f6:a0:b2:86:83:35:7c:b8:f7:d5:14:be:
13:5f:ad:b3:f4:1b:15:b6:74:d4:8b:aa:52:33:54:
66:18:4d:ff:aa:84:9e:4d:ea:a1:13:da:e5:7d:c7:
7b:6b:d4:5c:1f:8f:1f:a3:dc:0c:9e:94:93:ff:3f:
cb:9b:74:d6:5a:09:c6:3c:36:85:74:1e:81:a2:9b:
b9:56:1a:f1:dd:65:09:6e:d2:cd:23:d1:b7:a4:dc:
9a:3f:f3:e2:9c:7d:79:0b:f1:0f:1d:a2:3a:8f:a9:
6b:74:29:e0:19:a2:e8:1d:eb:fc:5b:5f:13:67:50:
c4:2c:5d:63:e8:f1:5e:59:3b:ef:8c:0d:23:cd:1d:
cc:c3:9f:ba:6f:13:94:50:da:8d:63:51:ad:a0:0b:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:D8:DC:9C:81:AF:9B:A7:BE:F7:6B:AC:C2:0C:4F:9E:5A:F1:8C
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:49:b2:57:60:8a:52:f3:ab:f1:62:0d:ac:81:b8:fd:af:23:
64:89:cd:4e:ef:4f:dc:77:5d:98:5b:d4:37:d9:63:e5:cc:5b:
bb:cb:56:e5:37:a9:08:81:e5:95:10:eb:1f:de:66:03:b6:e8:
93:25:16:3d:53:7d:fc:1a:37:8c:a3:ad:b0:f1:ce:7d:6c:ab:
cc:59:56:68:7d:eb:27:f5:62:a3:a7:82:be:e1:22:54:dc:43:
4f:08:ec:47:cd:f8:22:40:c2:20:bd:8c:3d:66:7d:a0:31:c6:
bd:00:66:6c:aa:3f:0c:88:12:d4:3f:97:b8:cb:09:a5:2f:5e:
82:c3:c4:ce:e9:6c:27:26:16:40:90:53:73:01:b9:21:6b:68:
fc:97:06:1f:05:eb:ce:c4:1b:7f:39:f5:4e:12:82:3c:28:d9:
ae:64:3b:98:a4:2d:97:53:5b:03:d4:ab:4a:96:60:16:a9:dc:
95:23:1d:80:ec:32:f4:63:1d:64:03:ed:7d:26:2b:4b:94:55:
17:7d:eb:1c:dc:1a:d4:0c:36:00:d7:8f:47:61:c6:00:03:03:
1b:ac:b3:20:74:dc:46:0c:5c:86:43:24:9e:33:45:3c:f6:cb:
f9:95:e2:f1:ac:d5:f0:16:93:65:e7:61:77:b5:1d:6d:b5:85:
e8:f8:2c:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzXUhBe1yNAOuSPqTa4LyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmYxZTlmMDk1MGU0ZjM5YzljNWZlZTNmODY4YTI0ZWIz
NjFlZjEwHhcNMjUwODIzMTIwMDQ1WhcNMjUwODI0MTIwMDQ1WjAzMTEwLwYDVQQD
EygxZDI2ZDhkYzljODFhZjliYTdiZWY3NmJhY2MyMGM0ZjllNWFmMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcAs5xvfJjZXhZMAQRs4jB47aMNm
+JrFG+jHR5ls6hzj4SGYf6C4Kqj3IHxkHMLanxvbqECHpB8RBM/JihvPeCxRoS86
O09mv3IcSVy7ZtajRzEZeGL4PvRWkLhA4zbZ6l1goiQLx9+WY7f2oLKGgzV8uPfV
FL4TX62z9BsVtnTUi6pSM1RmGE3/qoSeTeqhE9rlfcd7a9RcH48fo9wMnpST/z/L
m3TWWgnGPDaFdB6Bopu5Vhrx3WUJbtLNI9G3pNyaP/PinH15C/EPHaI6j6lrdCng
GaLoHev8W18TZ1DELF1j6PFeWTvvjA0jzR3Mw5+6bxOUUNqNY1GtoAt4CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0m2Nycga+bp773a6zCDE+eWvGMMB8GA1UdIwQY
MBaAFAtvHp8JUOTznJxf7j+GiiTrNh7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAt
MDgxYmNiYWM0ZGFmLzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAtMDgxYmNiYWM0ZGFm
LzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEmyV2CK
UvOr8WINrIG4/a8jZInNTu9P3HddmFvUN9lj5cxbu8tW5TepCIHllRDrH95mA7bo
kyUWPVN9/Bo3jKOtsPHOfWyrzFlWaH3rJ/Vio6eCvuEiVNxDTwjsR834IkDCIL2M
PWZ9oDHGvQBmbKo/DIgS1D+XuMsJpS9egsPEzulsJyYWQJBTcwG5IWto/JcGHwXr
zsQbfzn1ThKCPCjZrmQ7mKQtl1NbA9SrSpZgFqnclSMdgOwy9GMdZAPtfSYrS5RV
F33rHNwa1Aw2ANePR2HGAAMDG6yzIHTcRgxchkMknjNFPPbL+ZXi8azV8BaTZedh
d7UdbbWF6PgsgQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:56:38 2025 by rpki-client