Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: 3Tlo+ZUgw1x1KHFMa8Rhh4XMN8HONWgJa+LpdnN4xlY=
Subject key identifier: DE:91:7A:56:DC:7A:13:B1:47:41:D4:85:19:C1:05:DC:19:8D:30:69
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 0198D4730653D5DF4000E32C3BAD9437BDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:02:44 +0000
Manifest this update: Sat 23 Aug 2025 01:02:44 +0000
Manifest next update: Sun 24 Aug 2025 01:02:44 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: 982uFHFnq9GpjmZD9WpNaPTCHAFcYphKF2VZgACROKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:06:53:d5:df:40:00:e3:2c:3b:ad:94:37:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Aug 23 01:02:44 2025 GMT
Not After : Aug 24 01:02:44 2025 GMT
Subject: CN=de917a56dc7a13b14741d48519c105dc198d3069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:51:8a:bc:e9:c3:76:29:56:22:6d:e6:3e:
b7:5d:30:9d:58:4b:b8:15:71:65:28:91:2c:3f:ac:
fc:41:65:5e:de:82:00:fc:dc:09:7c:c8:ac:cc:d7:
ff:34:34:1f:f6:42:6b:3a:c0:bb:55:50:ad:04:b8:
06:9e:d3:35:a8:d5:68:90:ca:79:4b:3e:ff:ad:23:
90:af:74:54:e7:76:b7:6e:27:7c:13:1e:21:dc:90:
ee:0a:31:e7:a6:cc:66:6a:9d:30:57:95:6c:89:e9:
82:26:80:72:20:3e:fd:ec:89:fb:97:77:79:50:86:
fc:78:9e:ec:05:30:e6:4d:75:c5:0b:6f:be:f0:bc:
31:c4:c6:fb:ba:04:19:66:37:c2:ba:63:29:94:d5:
a5:05:f4:df:54:9b:a3:f4:fd:4b:fc:99:a6:dd:af:
67:af:36:f9:5a:3c:b0:8c:5e:57:b2:5d:fd:d9:26:
8c:f3:b7:74:bd:3c:c0:47:04:20:64:e6:83:af:f9:
a5:45:3a:5b:75:a6:c3:fe:f4:cd:55:58:23:00:48:
12:5d:38:d5:74:11:a6:e8:cd:21:62:fd:7f:13:dd:
5e:f1:b9:f7:56:83:d2:cd:14:8a:7a:0a:c5:65:dc:
a0:75:e5:6a:00:2b:6a:27:b0:24:29:b0:82:9b:3d:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:91:7A:56:DC:7A:13:B1:47:41:D4:85:19:C1:05:DC:19:8D:30:69
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a7:60:a8:41:6b:f9:a9:d9:00:63:41:a4:1d:f0:72:77:6a:
39:39:bb:7c:8f:6f:83:21:36:55:2c:1e:58:19:f4:c9:da:70:
55:0c:57:32:c1:93:be:6f:1c:ff:7a:b0:01:75:ea:5f:ec:9d:
dc:4c:97:f8:43:98:6d:92:42:34:e9:26:e9:07:8d:df:9c:17:
be:08:e0:61:37:d5:9c:51:e0:c9:4a:3c:3a:0e:2f:28:be:36:
fc:35:99:ff:e6:02:b8:8e:be:3d:fa:3f:99:eb:98:39:34:43:
0b:44:9a:4b:2c:73:e6:01:c8:89:2a:1e:bd:63:e0:da:05:8e:
25:3b:c8:8f:c5:2c:e7:05:0e:fe:8e:32:c1:bd:77:3c:3b:39:
83:c2:ce:04:a8:2a:85:be:8f:92:ad:37:64:bc:05:0d:0d:1a:
7a:ff:26:7e:de:ea:5d:d5:c6:6e:7f:d8:83:e8:af:47:68:2d:
5d:c0:f5:58:50:91:50:78:a7:61:e1:aa:6d:37:95:b7:9b:fa:
bf:5f:ac:14:02:d8:4b:51:47:d4:93:39:d6:61:7b:26:0f:b0:
62:90:4d:ce:a1:1d:ea:41:2b:40:4b:d9:4a:70:36:6a:b0:9a:
9b:ef:33:02:e8:5c:5b:89:b8:fe:4b:a0:55:1e:bf:33:81:6b:
99:4e:1a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcwZT1d9AAOMsO62UN73xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOWZkMzA4ZmUzZWFkYmEzMzQ2OGNlNGJiOTk2YmJkZDhj
ZGU2MTUwHhcNMjUwODIzMDEwMjQ0WhcNMjUwODI0MDEwMjQ0WjAzMTEwLwYDVQQD
EyhkZTkxN2E1NmRjN2ExM2IxNDc0MWQ0ODUxOWMxMDVkYzE5OGQzMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LpRirzpw3YpViJt5j63XTCdWEu4
FXFlKJEsP6z8QWVe3oIA/NwJfMiszNf/NDQf9kJrOsC7VVCtBLgGntM1qNVokMp5
Sz7/rSOQr3RU53a3bid8Ex4h3JDuCjHnpsxmap0wV5VsiemCJoByID797In7l3d5
UIb8eJ7sBTDmTXXFC2++8LwxxMb7ugQZZjfCumMplNWlBfTfVJuj9P1L/Jmm3a9n
rzb5WjywjF5Xsl392SaM87d0vTzARwQgZOaDr/mlRTpbdabD/vTNVVgjAEgSXTjV
dBGm6M0hYv1/E91e8bn3VoPSzRSKegrFZdygdeVqACtqJ7AkKbCCmz3evwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6RelbcehOxR0HUhRnBBdwZjTBpMB8GA1UdIwQY
MBaAFAqf0wj+Pq26M0aM5LuZa73YzeYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDct
YTFhYmIyZWZjODFjLzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDctYTFhYmIyZWZjODFj
LzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFadgqEFr
+anZAGNBpB3wcndqOTm7fI9vgyE2VSweWBn0ydpwVQxXMsGTvm8c/3qwAXXqX+yd
3EyX+EOYbZJCNOkm6QeN35wXvgjgYTfVnFHgyUo8Og4vKL42/DWZ/+YCuI6+Pfo/
meuYOTRDC0SaSyxz5gHIiSoevWPg2gWOJTvIj8Us5wUO/o4ywb13PDs5g8LOBKgq
hb6Pkq03ZLwFDQ0aev8mft7qXdXGbn/Yg+ivR2gtXcD1WFCRUHinYeGqbTeVt5v6
v1+sFALYS1FH1JM51mF7Jg+wYpBNzqEd6kErQEvZSnA2arCam+8zAuhcW4m4/kug
VR6/M4FrmU4aeQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:34 2025 by rpki-client