Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: wwURgEwoWW610BrJCdSmKNEEBUGDnnHmOl5PQnWrUmc=
Subject key identifier: 48:B6:F4:27:87:8E:15:18:D3:08:ED:9A:24:0F:5F:F4:DA:97:A8:8E
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 0198D6982AE82D8DDF2C4FD557D3408DA437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: +uQ0aVz/dM/hyJbtSq/addcgZz8P9C394VX7B8d7bMU=)
2: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2a:e8:2d:8d:df:2c:4f:d5:57:d3:40:8d:a4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=48b6f427878e1518d308ed9a240f5ff4da97a88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0d:db:d1:67:c6:40:ef:8b:90:4b:14:f5:97:
7f:fe:72:69:71:e3:ef:04:3b:d2:14:97:6a:fa:89:
9a:3e:81:bb:5a:24:00:ac:0a:a9:19:4e:84:5f:66:
0e:1d:c2:cf:cb:5f:1c:75:b2:aa:6e:e6:d1:61:4e:
6b:7e:25:ce:da:ac:39:10:f0:e9:bb:77:cd:2f:6d:
82:7a:f9:85:96:24:17:23:7d:fc:c1:dc:22:9f:6a:
87:dd:36:3f:bf:a2:fa:62:91:7d:a7:fc:fd:eb:ed:
b1:f9:18:76:ba:c0:cb:03:1f:2c:a1:8c:11:15:88:
8d:7a:5b:21:8c:03:0c:10:85:30:e3:0c:3d:47:1c:
54:9c:b6:e0:a6:8e:06:fc:1c:7f:08:7b:59:e8:28:
be:5d:81:e4:90:6a:2f:a2:8d:83:1b:76:18:c8:0d:
81:67:f3:1b:3c:2b:79:73:12:f4:1a:dd:f2:8c:d9:
0c:df:9a:89:a8:3d:04:42:be:9c:a0:22:b4:97:51:
dd:6f:c7:c9:69:7f:00:bb:49:9f:6b:6f:90:62:13:
16:d7:d5:64:b0:c8:b8:1d:c4:f9:b4:72:ca:e4:26:
9c:8e:0a:c0:5b:1a:f3:25:18:5c:b7:ca:48:a4:80:
c7:a7:6f:ba:3f:f8:39:5c:e1:2b:7d:73:5e:ce:72:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B6:F4:27:87:8E:15:18:D3:08:ED:9A:24:0F:5F:F4:DA:97:A8:8E
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e1:12:ae:c4:f8:be:ce:dc:44:15:73:99:6c:92:d2:7d:a3:
67:3b:c4:9f:ac:c0:fb:e7:cc:c5:da:83:a0:67:59:0a:ee:7c:
6a:d4:d3:4d:79:94:71:38:c2:f9:c6:e3:80:db:c9:f6:a1:0a:
15:60:ae:47:b6:02:83:38:9a:a1:1d:99:c1:72:55:97:78:72:
59:44:c2:73:af:37:46:96:88:f9:d5:6c:42:93:26:81:60:b9:
94:74:9e:f9:bf:a3:95:fd:2d:9c:f2:32:b8:92:c1:22:41:c5:
aa:58:62:5a:d8:23:24:36:6d:bd:1e:fc:94:6e:36:cd:1e:87:
7e:b4:d0:f7:ab:ef:8f:5d:8b:84:68:32:26:7f:a3:bc:09:e9:
50:6a:78:1a:66:05:75:c6:fc:aa:4a:c6:2a:25:96:2c:d2:7f:
ef:51:d2:38:4a:a9:be:2b:12:dd:bf:da:ff:cb:2f:30:53:a6:
90:21:14:e0:01:80:97:c6:4f:6f:6f:82:18:22:f9:fa:b1:da:
4e:c7:77:ae:51:19:56:5e:21:5f:6f:aa:75:8f:c9:fe:48:99:
2f:de:0a:42:05:46:49:d9:4e:0a:8e:7a:99:d2:3f:ee:ac:50:
66:9f:fd:fe:5e:97:74:0a:99:02:06:b3:05:b7:03:8e:4f:6d:
68:5d:77:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmCroLY3fLE/VV9NAjaQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTc1ZTBhMzZjNzg5ZDMxNDIwYjMzMzAzZmJjNzMyNGM3
YzU3NGIwHhcNMjUwODIzMTEwMjMzWhcNMjUwODI0MTEwMjMzWjAzMTEwLwYDVQQD
Eyg0OGI2ZjQyNzg3OGUxNTE4ZDMwOGVkOWEyNDBmNWZmNGRhOTdhODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q3b0WfGQO+LkEsU9Zd//nJpcePv
BDvSFJdq+omaPoG7WiQArAqpGU6EX2YOHcLPy18cdbKqbubRYU5rfiXO2qw5EPDp
u3fNL22CevmFliQXI338wdwin2qH3TY/v6L6YpF9p/z96+2x+Rh2usDLAx8soYwR
FYiNelshjAMMEIUw4ww9RxxUnLbgpo4G/Bx/CHtZ6Ci+XYHkkGovoo2DG3YYyA2B
Z/MbPCt5cxL0Gt3yjNkM35qJqD0EQr6coCK0l1Hdb8fJaX8Au0mfa2+QYhMW19Vk
sMi4HcT5tHLK5CacjgrAWxrzJRhct8pIpIDHp2+6P/g5XOErfXNeznJDCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi29CeHjhUY0wjtmiQPX/Tal6iOMB8GA1UdIwQY
MBaAFAgXXgo2x4nTFCCzMwP7xzJMfFdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8yOGU5Y2ItOGVmMy00ODJhLThlZDEt
MmY1MDcwOGFjNTdmLzEvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8yOGU5Y2ItOGVmMy00ODJhLThlZDEtMmY1MDcwOGFjNTdm
LzEvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceESrsT4
vs7cRBVzmWyS0n2jZzvEn6zA++fMxdqDoGdZCu58atTTTXmUcTjC+cbjgNvJ9qEK
FWCuR7YCgziaoR2ZwXJVl3hyWUTCc683RpaI+dVsQpMmgWC5lHSe+b+jlf0tnPIy
uJLBIkHFqlhiWtgjJDZtvR78lG42zR6HfrTQ96vvj12LhGgyJn+jvAnpUGp4GmYF
dcb8qkrGKiWWLNJ/71HSOEqpvisS3b/a/8svMFOmkCEU4AGAl8ZPb2+CGCL5+rHa
Tsd3rlEZVl4hX2+qdY/J/kiZL94KQgVGSdlOCo56mdI/7qxQZp/9/l6XdAqZAgaz
BbcDjk9taF13nQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:20 2025 by rpki-client