Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: /HhnuWUWXxyLbTkiJw5856xRCVlTwp0nfSqvH7d6CtI=
Subject key identifier: F4:EE:4F:28:68:29:22:15:30:E0:54:40:EE:01:6F:AC:12:19:A8:48
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 0198D47489E28BCDE3A009C1A17C06D5DC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0CB0
Signing time: Sat 23 Aug 2025 01:04:23 +0000
Manifest this update: Sat 23 Aug 2025 01:04:23 +0000
Manifest next update: Sun 24 Aug 2025 01:04:23 +0000
Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: Qa3aLN3pZnv6zyh1nRV+dJsQBBV9uCnFQ4XnDDvWYD4=)
3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:89:e2:8b:cd:e3:a0:09:c1:a1:7c:06:d5:dc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Aug 23 01:04:23 2025 GMT
Not After : Aug 24 01:04:23 2025 GMT
Subject: CN=f4ee4f286829221530e05440ee016fac1219a848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:d5:7e:d5:50:fc:ea:ff:2a:e1:9b:1f:df:
1d:2e:76:97:cf:83:d5:c9:61:3e:35:4d:ad:81:2d:
53:f0:fa:e4:89:80:b4:0f:ff:35:0a:b5:37:5f:a9:
e7:6e:da:07:a8:9a:a8:ea:5d:d5:19:b9:c5:81:35:
9b:ab:07:be:a3:54:87:85:c2:ca:82:c3:74:dd:07:
c6:37:69:d6:5b:34:b3:96:16:fa:34:f5:62:26:54:
d5:b7:f3:9c:34:a3:08:78:5a:72:5a:b8:02:6c:3e:
3b:11:75:eb:ff:21:52:e6:2e:d8:9e:92:7b:ec:fd:
26:fe:85:41:14:1e:55:92:1e:d4:13:41:e2:0f:b2:
29:fa:4d:54:d8:9f:fe:2f:23:c6:89:09:50:43:4e:
5b:29:8a:e3:94:16:5a:87:aa:de:fc:33:d1:36:02:
39:0d:58:18:68:1b:6f:22:fe:c0:f6:4a:13:da:16:
25:76:69:f4:bf:b2:e5:99:fa:3e:3c:b1:52:95:1e:
9f:5b:3e:0a:44:2f:52:a6:16:16:da:a0:0e:fd:61:
40:1d:23:66:e5:a6:02:e9:36:1d:46:ae:8d:97:6c:
91:23:47:fa:8d:5f:de:1d:9f:b3:a2:14:15:6b:f4:
ef:c2:7e:34:03:5d:ed:05:e8:2a:54:8c:80:0b:14:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EE:4F:28:68:29:22:15:30:E0:54:40:EE:01:6F:AC:12:19:A8:48
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:60:c6:f0:62:bc:41:81:02:81:44:76:32:e1:6a:1a:92:5a:
86:43:1e:5e:a7:e1:ef:b0:07:b0:d6:25:f2:04:6a:45:8c:9d:
0d:4e:92:84:75:70:e9:81:db:5c:c7:c8:b3:4d:ea:cd:f8:64:
41:9c:20:79:f7:05:ca:1a:61:0a:22:6a:bd:a9:20:ad:bf:f6:
93:21:98:e6:a6:8a:e5:8d:45:ca:1d:b5:68:39:1d:f4:3d:6a:
6e:fc:20:e0:9e:59:4a:d2:2c:27:fe:23:06:f8:f6:45:40:f9:
a6:85:d7:06:39:64:3d:d9:28:8d:c4:b3:ad:12:81:4c:26:1c:
b0:d5:77:15:2e:b3:cf:9d:48:4b:ac:bd:8d:05:41:63:ec:b1:
c3:f1:d3:71:36:ee:65:06:fa:91:a8:60:11:60:3e:55:58:b3:
ed:8f:36:8b:89:54:df:cd:f1:65:bb:52:58:fc:de:d5:a6:a6:
21:e1:d9:e0:db:13:0b:be:a2:b2:05:ac:15:97:bc:99:32:60:
a8:76:ff:24:50:1b:8a:18:ac:37:82:8d:07:b1:7a:b7:43:01:
9d:4b:df:d2:fb:0a:9a:f0:34:d3:41:7d:fc:7d:ff:69:79:3f:
92:7f:fe:83:5f:bf:0c:20:69:15:27:02:e8:fb:5f:45:09:7e:
08:15:bb:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdInii83joAnBoXwG1dxBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMzliYzVjZWYzYWVhZGYzMjYxM2Y3ZDk1OWVjOGU0MGE3
NDI5MTgwHhcNMjUwODIzMDEwNDIzWhcNMjUwODI0MDEwNDIzWjAzMTEwLwYDVQQD
EyhmNGVlNGYyODY4MjkyMjE1MzBlMDU0NDBlZTAxNmZhYzEyMTlhODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF7VftVQ/Or/KuGbH98dLnaXz4PV
yWE+NU2tgS1T8PrkiYC0D/81CrU3X6nnbtoHqJqo6l3VGbnFgTWbqwe+o1SHhcLK
gsN03QfGN2nWWzSzlhb6NPViJlTVt/OcNKMIeFpyWrgCbD47EXXr/yFS5i7YnpJ7
7P0m/oVBFB5Vkh7UE0HiD7Ip+k1U2J/+LyPGiQlQQ05bKYrjlBZah6re/DPRNgI5
DVgYaBtvIv7A9koT2hYldmn0v7Llmfo+PLFSlR6fWz4KRC9SphYW2qAO/WFAHSNm
5aYC6TYdRq6Nl2yRI0f6jV/eHZ+zohQVa/Tvwn40A13tBegqVIyACxRCdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTuTyhoKSIVMOBUQO4Bb6wSGahIMB8GA1UdIwQY
MBaAFHE5vFzvOurfMmE/fZWeyOQKdCkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYt
Nzk0YjI4ZWIxNmM1LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYtNzk0YjI4ZWIxNmM1
LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWDG8GK8
QYECgUR2MuFqGpJahkMeXqfh77AHsNYl8gRqRYydDU6ShHVw6YHbXMfIs03qzfhk
QZwgefcFyhphCiJqvakgrb/2kyGY5qaK5Y1Fyh21aDkd9D1qbvwg4J5ZStIsJ/4j
Bvj2RUD5poXXBjlkPdkojcSzrRKBTCYcsNV3FS6zz51IS6y9jQVBY+yxw/HTcTbu
ZQb6kahgEWA+VViz7Y82i4lU383xZbtSWPze1aamIeHZ4NsTC76isgWsFZe8mTJg
qHb/JFAbihisN4KNB7F6t0MBnUvf0vsKmvA000F9/H3/aXk/kn/+g1+/DCBpFScC
6PtfRQl+CBW7Ag==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:26 2025 by rpki-client