Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier: xhbvW8/5aLE5PZyfNJPgslXMtpCTsRKkI8fw/zT8/Bo=
Subject key identifier: 4A:CD:6D:8E:02:F7:4D:52:5B:82:B8:0D:09:78:3E:40:09:D7:92:3B
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial: 0198D5158D381F447A5BCB64E5B0D6054ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: OlU6obIQjael3LSg0ssh_4uTiio.roa (hash: PEk/sjzeYnoi97rfsFTmYB012K4urx+cqdtXV/YTu3g=)
2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: l8jQl3XYE0kt+282a5v1VPIwZsWbCQc4ddyLqGPysPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8d:38:1f:44:7a:5b:cb:64:e5:b0:d6:05:4e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=4acd6d8e02f74d525b82b80d09783e4009d7923b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:90:ca:95:3e:6c:11:ba:b6:d8:85:ca:e4:
dc:4b:81:44:01:fe:c5:b5:35:b8:3a:75:05:9f:3c:
39:3a:50:28:36:d8:ab:d7:69:46:c7:9d:fe:2e:14:
13:0a:41:79:82:fc:4b:81:6d:d6:ad:d1:7d:72:be:
3c:3d:8f:14:7b:08:95:bd:8f:e8:64:a7:15:ba:2e:
e5:64:04:43:98:4c:cf:fa:72:bb:df:63:61:d2:a9:
ab:cb:27:74:48:ed:96:09:94:cb:ba:07:68:f1:7f:
cb:28:30:2a:2f:64:57:36:6e:fa:3d:e6:03:cf:76:
bf:aa:1d:2b:7a:fb:13:cf:b0:c2:5d:b5:46:d3:ca:
1a:64:03:ca:26:71:b0:60:e6:87:33:03:b7:d1:72:
7b:ac:9a:b6:c0:a1:0d:41:be:1f:2b:dc:09:40:a5:
dd:0d:2d:df:54:d5:23:09:0c:80:28:41:6a:1c:2d:
49:7a:8c:98:b1:a5:27:03:7a:cc:2e:ea:41:7e:34:
e6:44:33:ce:79:e3:a3:f0:f8:93:c3:eb:9d:e0:50:
19:dd:78:2c:b4:e6:af:6e:79:b7:fc:57:d3:48:97:
2d:86:ab:80:03:0e:80:e0:ae:d5:fc:3c:b6:8a:8c:
51:31:66:fd:91:db:a6:05:16:28:9f:20:5d:ae:42:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CD:6D:8E:02:F7:4D:52:5B:82:B8:0D:09:78:3E:40:09:D7:92:3B
X509v3 Authority Key Identifier:
keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8d:7e:d9:89:b7:03:ad:45:65:c2:68:c4:6d:92:f6:60:d9:
5a:7e:27:51:f4:1c:85:d1:38:9a:1b:b2:cc:11:b6:a5:71:a6:
7c:ef:32:5c:1a:2b:46:97:8a:e1:a9:c8:51:18:db:d6:e9:fc:
ed:10:82:41:0c:89:2f:e6:30:d4:28:78:7e:05:79:22:6d:a0:
cf:f1:0a:ca:e7:07:2c:64:a1:2e:87:d5:76:e6:69:f9:0a:28:
79:73:22:16:ff:36:3d:2f:6a:06:03:fd:55:47:2c:17:1d:7d:
fc:31:13:0a:78:85:41:78:e6:61:a1:9a:52:b6:87:ce:5b:fe:
cc:e2:87:cd:48:47:0b:0c:0b:b9:76:b6:f3:78:6b:8d:98:8b:
b2:93:29:6b:fc:6f:ac:0c:06:50:5b:92:51:d1:c3:97:ad:d8:
62:bf:80:49:5a:ea:9f:ea:21:f7:8f:48:90:96:8e:4c:4b:10:
55:2a:66:40:db:1f:36:e6:65:15:94:bd:38:3a:92:a7:4f:4d:
a2:9e:ee:1d:19:3e:2b:7b:e2:d3:1a:70:bf:a9:8d:11:0e:e3:
fa:44:7a:86:0f:bf:a1:d9:26:1b:12:d9:8b:da:e6:da:57:72:
d3:d8:50:3a:ec:f6:20:b0:87:1c:3a:92:96:86:19:c7:ce:80:
62:9b:81:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFY04H0R6W8tk5bDWBU7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjc1ZjZhNTc3OTdjNWNhOTZjM2ZiNDVlNTMxYmQzMjc4
MzAxNmMwHhcNMjUwODIzMDQwMDE1WhcNMjUwODI0MDQwMDE1WjAzMTEwLwYDVQQD
Eyg0YWNkNmQ4ZTAyZjc0ZDUyNWI4MmI4MGQwOTc4M2U0MDA5ZDc5MjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcaQypU+bBG6ttiFyuTcS4FEAf7F
tTW4OnUFnzw5OlAoNtir12lGx53+LhQTCkF5gvxLgW3WrdF9cr48PY8UewiVvY/o
ZKcVui7lZARDmEzP+nK732Nh0qmryyd0SO2WCZTLugdo8X/LKDAqL2RXNm76PeYD
z3a/qh0revsTz7DCXbVG08oaZAPKJnGwYOaHMwO30XJ7rJq2wKENQb4fK9wJQKXd
DS3fVNUjCQyAKEFqHC1JeoyYsaUnA3rMLupBfjTmRDPOeeOj8PiTw+ud4FAZ3Xgs
tOavbnm3/FfTSJcthquAAw6A4K7V/Dy2ioxRMWb9kdumBRYonyBdrkIGlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErNbY4C901SW4K4DQl4PkAJ15I7MB8GA1UdIwQY
MBaAFHBnX2pXeXxcqWw/tF5TG9MngwFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEt
YzI3N2QzNzE2YmQ5LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEtYzI3N2QzNzE2YmQ5
LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY41+2Ym3
A61FZcJoxG2S9mDZWn4nUfQchdE4mhuyzBG2pXGmfO8yXBorRpeK4anIURjb1un8
7RCCQQyJL+Yw1Ch4fgV5Im2gz/EKyucHLGShLofVduZp+QooeXMiFv82PS9qBgP9
VUcsFx19/DETCniFQXjmYaGaUraHzlv+zOKHzUhHCwwLuXa283hrjZiLspMpa/xv
rAwGUFuSUdHDl63YYr+ASVrqn+oh949IkJaOTEsQVSpmQNsfNuZlFZS9ODqSp09N
op7uHRk+K3vi0xpwv6mNEQ7j+kR6hg+/odkmGxLZi9rm2ldy09hQOuz2ILCHHDqS
loYZx86AYpuBRA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:31 2025 by rpki-client