Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: RggYRn71Zem0DEt3IqLTAMQHLR2CbY0aRMd+XogDCP0=
Subject key identifier: A5:DA:29:FC:30:B3:EF:AF:B8:B1:2A:0A:E8:D1:15:4A:27:D1:BB:9D
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 0198D660893E6DE7993EC028AE915969FCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 028B
Signing time: Sat 23 Aug 2025 10:01:47 +0000
Manifest this update: Sat 23 Aug 2025 10:01:47 +0000
Manifest next update: Sun 24 Aug 2025 10:01:47 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: /SeUNw5LZIaVbFbqLy+MVP46B6bAXtgFNccHZEX0O40=)
2: Dx843zJfB2RQ1tXw_6blL8VsbDw.roa (hash: Wk3Kg6R2i9DDoDfgR64ME8g+dDPZ0Euba0eJlCA1nOk=)
3: Eqq1hxnObNRaQRziaWuuBD1-O8o.roa (hash: jq17ziTa438haUw4I3TgAJRiuoEa3mnBNSNTDtlyTb8=)
4: baeYMpQTf1prfSgvYpiSJyiA86o.roa (hash: K1aC88mjEbBLbQ7U4e/CSJaIjpQ51Z65KxdLka02ark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:89:3e:6d:e7:99:3e:c0:28:ae:91:59:69:fc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Aug 23 10:01:47 2025 GMT
Not After : Aug 24 10:01:47 2025 GMT
Subject: CN=a5da29fc30b3efafb8b12a0ae8d1154a27d1bb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:9e:91:2c:7c:56:22:65:ce:e0:53:a4:8a:
94:59:48:50:46:05:dd:9f:08:7d:0f:27:bb:22:c3:
11:fa:44:d5:80:03:a3:cf:42:a2:36:6f:53:f6:03:
be:2d:d2:21:f2:17:c1:b9:36:3a:ea:a0:9a:ed:2c:
2b:42:62:e5:4c:a8:02:d7:24:b8:65:ac:38:09:94:
45:79:20:93:d7:64:43:0c:74:a1:a1:18:36:48:95:
b3:34:a2:55:9c:59:2f:66:fa:40:82:ca:0d:be:32:
b2:39:8b:ae:71:db:f6:c2:5f:dc:2b:30:15:1e:0e:
69:d5:f8:bf:b4:80:21:d5:ab:28:d3:9d:bb:5b:79:
b0:31:4c:2b:e1:cf:fd:44:57:48:2c:12:8b:ab:8f:
8d:b7:36:68:c0:e9:be:64:dd:c7:f6:52:30:f1:5d:
61:e4:2e:12:9c:13:da:bf:d7:39:db:b4:93:b0:f4:
11:eb:ca:f6:d1:21:a7:29:a4:4c:58:a5:2a:18:f8:
cd:6f:00:be:59:0e:89:32:70:2b:d7:5f:ce:a6:b6:
48:57:cd:1f:9b:2f:73:f9:a1:52:6c:ab:37:70:e8:
85:8c:5a:f7:36:dd:a9:26:56:72:6a:20:fe:a7:c7:
e9:96:cd:0c:b8:12:ff:bb:e5:5f:dc:03:4b:fb:6f:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DA:29:FC:30:B3:EF:AF:B8:B1:2A:0A:E8:D1:15:4A:27:D1:BB:9D
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:90:4b:b0:17:da:11:6c:cd:9b:72:40:8a:9b:8a:fc:1a:2d:
10:d1:f8:df:56:58:4f:14:a0:5e:7d:d7:96:e3:26:17:6e:f4:
ac:3e:56:63:30:d4:8b:65:4d:28:44:61:df:69:78:ea:d0:12:
0d:cb:4a:5c:c8:24:31:e2:07:8e:74:31:82:ed:c2:fa:87:2d:
a6:93:e3:81:d9:1b:8e:17:9c:6f:2b:b2:0c:ee:0d:62:79:64:
f9:0e:e3:2c:16:c0:7a:6d:f6:73:b1:34:3d:ca:ac:c6:2d:d2:
70:f5:48:cf:ba:ce:25:d3:9b:75:52:b2:ff:a5:04:96:2d:16:
30:d1:65:fa:bc:0a:7f:c2:8b:2c:6c:12:6d:89:7b:1f:7f:7a:
28:51:de:de:97:ed:16:fe:3b:92:ce:b2:e1:8e:b0:f8:5e:13:
fc:22:3b:c3:7f:56:78:d7:97:c5:43:7c:d1:5d:a5:75:24:66:
d2:8c:26:09:c2:0c:91:50:a0:3e:43:a6:13:49:54:d8:62:90:
ec:78:a4:f2:a8:98:da:16:a4:f6:ab:e4:8a:a0:25:26:62:a2:
c0:00:15:77:98:95:fd:d0:7d:b4:73:23:43:95:ad:73:68:ab:
3f:fe:cd:1b:67:ee:2d:bd:23:e5:99:95:a5:95:7d:83:d0:50:
ae:d0:f8:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYIk+beeZPsAorpFZafzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0
MTIxMmUwHhcNMjUwODIzMTAwMTQ3WhcNMjUwODI0MTAwMTQ3WjAzMTEwLwYDVQQD
EyhhNWRhMjlmYzMwYjNlZmFmYjhiMTJhMGFlOGQxMTU0YTI3ZDFiYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPSekSx8ViJlzuBTpIqUWUhQRgXd
nwh9Dye7IsMR+kTVgAOjz0KiNm9T9gO+LdIh8hfBuTY66qCa7SwrQmLlTKgC1yS4
Zaw4CZRFeSCT12RDDHShoRg2SJWzNKJVnFkvZvpAgsoNvjKyOYuucdv2wl/cKzAV
Hg5p1fi/tIAh1aso0527W3mwMUwr4c/9RFdILBKLq4+NtzZowOm+ZN3H9lIw8V1h
5C4SnBPav9c527STsPQR68r20SGnKaRMWKUqGPjNbwC+WQ6JMnAr11/OprZIV80f
my9z+aFSbKs3cOiFjFr3Nt2pJlZyaiD+p8fpls0MuBL/u+Vf3ANL+285QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXaKfwws++vuLEqCujRFUon0budMB8GA1UdIwQY
MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct
M2U4ZGYzMzEwMjMyLzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy
LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZBLsBfa
EWzNm3JAipuK/BotENH431ZYTxSgXn3XluMmF270rD5WYzDUi2VNKERh32l46tAS
DctKXMgkMeIHjnQxgu3C+octppPjgdkbjhecbyuyDO4NYnlk+Q7jLBbAem32c7E0
Pcqsxi3ScPVIz7rOJdObdVKy/6UEli0WMNFl+rwKf8KLLGwSbYl7H396KFHe3pft
Fv47ks6y4Y6w+F4T/CI7w39WeNeXxUN80V2ldSRm0owmCcIMkVCgPkOmE0lU2GKQ
7Hik8qiY2hak9qvkiqAlJmKiwAAVd5iV/dB9tHMjQ5Wtc2irP/7NG2fuLb0j5ZmV
pZV9g9BQrtD4WQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:18 2025 by rpki-client