Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: CRXrurerZCygv64xHPKc8h9IrfrnyrJW9LUKWz/peUw=
Subject key identifier: 6C:96:62:0F:3A:38:16:A9:3E:E7:4B:C5:A7:A3:15:BB:95:91:22:BA
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 0198D7060457D915F044FCD13C053F879ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:32 +0000
Manifest this update: Sat 23 Aug 2025 13:02:32 +0000
Manifest next update: Sun 24 Aug 2025 13:02:32 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: vUsT60lqctQ9IXUEBFwAjQwkiOlNBvAxkewl6fcvRI0=)
2: mWwPnP2S4g9JhxWYKKryZjEy1Ao.roa (hash: HyXUe+PYjqIKyOZOZZRdFXR1ckNBvzFOngXjiDgbrBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:04:57:d9:15:f0:44:fc:d1:3c:05:3f:87:9a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Aug 23 13:02:32 2025 GMT
Not After : Aug 24 13:02:32 2025 GMT
Subject: CN=6c96620f3a3816a93ee74bc5a7a315bb959122ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:41:e1:7e:00:0b:b2:b6:18:c7:dd:8b:9f:
b7:4c:5f:38:89:bd:c0:a4:13:16:8b:0e:e1:5d:e5:
f0:d8:28:32:a2:5f:e6:fd:f7:74:ea:8c:65:88:a2:
0c:e8:91:ed:e5:60:89:fa:77:b2:6b:ec:ab:41:46:
9a:bb:dc:7b:98:a8:1a:ba:cc:18:0d:4e:45:70:e1:
6c:b0:38:e5:16:d7:52:bc:c7:21:9c:d3:95:67:f8:
cc:89:a7:f1:9b:53:99:a3:15:40:84:5a:bb:8d:00:
75:f2:2c:16:e2:cd:91:26:c4:3b:2d:71:a5:2f:0a:
d7:8f:98:ee:f0:78:8e:c0:1b:ac:c5:01:e8:de:1b:
19:e1:d6:ce:92:32:6f:4a:9e:35:0d:7c:5c:d4:d6:
0e:a2:e3:38:ee:f1:cd:22:25:8c:1c:af:c2:72:25:
f4:18:26:2f:1f:71:d1:23:41:c2:db:7f:bf:1e:12:
d5:4f:2c:c0:06:98:7d:01:af:22:5c:a3:5c:6e:8d:
e7:ac:10:01:fc:7b:c6:6a:68:95:9a:ee:aa:c2:85:
f4:be:eb:3e:46:ff:59:5a:c9:55:df:7d:cb:98:8b:
fb:fa:4c:eb:08:7b:56:fd:72:ae:43:3a:25:7d:bb:
1b:cc:d7:72:c1:ba:2d:9f:eb:aa:62:79:92:f1:14:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:96:62:0F:3A:38:16:A9:3E:E7:4B:C5:A7:A3:15:BB:95:91:22:BA
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:15:4d:e6:9b:3c:73:f7:33:76:fb:5b:df:c7:b8:ab:d1:9d:
fb:8a:05:90:70:9a:51:cf:b7:ea:7a:5b:55:a5:e9:44:71:1c:
39:40:c2:14:55:8d:a7:4e:df:bc:b3:10:f3:c6:34:96:1c:25:
37:c8:1c:0f:4a:66:c5:e5:f1:13:9b:85:f8:ed:5c:11:b7:27:
cf:97:d6:ad:ed:98:a2:cb:53:1c:d8:73:ca:82:d3:5d:36:3d:
64:c7:26:18:3f:09:e9:6c:8b:ae:75:69:39:2b:82:c0:92:fc:
0c:ff:49:54:0f:b7:66:7e:3e:f3:14:ed:7e:df:7c:0f:84:28:
17:1f:54:8c:a1:1d:06:5e:81:8f:7f:af:46:8b:68:e2:f6:20:
21:07:b1:d5:2b:d1:92:18:f9:0f:b3:84:7a:0f:9b:33:83:6e:
a8:b1:24:a9:b3:61:9e:66:1d:85:ed:a0:c5:e1:67:d4:2f:b6:
11:76:e5:02:26:24:95:ab:cd:9b:02:f4:de:63:58:2c:22:57:
ea:08:d0:5d:75:69:a1:6c:1a:88:6b:13:f7:ca:2a:a6:88:f8:
1a:8e:37:9d:a7:ea:ce:fa:be:e3:0a:4d:ac:7a:c3:3a:54:0e:
a1:a3:79:c6:1e:a3:36:f8:c9:d7:53:12:ce:59:94:ee:2a:fb:
97:35:6e:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBgRX2RXwRPzRPAU/h5raMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTFiYzUwY2ZlZDlkMDJlNTgxOTZhMmM4MWM5ODhlMzBi
YTEyNjAwHhcNMjUwODIzMTMwMjMyWhcNMjUwODI0MTMwMjMyWjAzMTEwLwYDVQQD
Eyg2Yzk2NjIwZjNhMzgxNmE5M2VlNzRiYzVhN2EzMTViYjk1OTEyMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk9B4X4AC7K2GMfdi5+3TF84ib3A
pBMWiw7hXeXw2Cgyol/m/fd06oxliKIM6JHt5WCJ+neya+yrQUaau9x7mKgauswY
DU5FcOFssDjlFtdSvMchnNOVZ/jMiafxm1OZoxVAhFq7jQB18iwW4s2RJsQ7LXGl
LwrXj5ju8HiOwBusxQHo3hsZ4dbOkjJvSp41DXxc1NYOouM47vHNIiWMHK/CciX0
GCYvH3HRI0HC23+/HhLVTyzABph9Aa8iXKNcbo3nrBAB/HvGamiVmu6qwoX0vus+
Rv9ZWslV333LmIv7+kzrCHtW/XKuQzolfbsbzNdywbotn+uqYnmS8RSBcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyWYg86OBapPudLxaejFbuVkSK6MB8GA1UdIwQY
MBaAFAgRvFDP7Z0C5YGWosgcmI4wuhJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYt
ZWU1YTY3NDNiZTU2LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYtZWU1YTY3NDNiZTU2
LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhVN5ps8
c/czdvtb38e4q9Gd+4oFkHCaUc+36npbVaXpRHEcOUDCFFWNp07fvLMQ88Y0lhwl
N8gcD0pmxeXxE5uF+O1cEbcnz5fWre2YostTHNhzyoLTXTY9ZMcmGD8J6WyLrnVp
OSuCwJL8DP9JVA+3Zn4+8xTtft98D4QoFx9UjKEdBl6Bj3+vRoto4vYgIQex1SvR
khj5D7OEeg+bM4NuqLEkqbNhnmYdhe2gxeFn1C+2EXblAiYklavNmwL03mNYLCJX
6gjQXXVpoWwaiGsT98oqpoj4Go43nafqzvq+4wpNrHrDOlQOoaN5xh6jNvjJ11MS
zlmU7ir7lzVumg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:50 2025 by rpki-client