Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
File: C_t1KSifiPtLuHs5577cnZ8n1fo.mft (raw, json)
Hash identifier: 9A4KCGcPAYVRQdEZkSr7tpRSsAj8wLD02BM0t25sk0k=
Subject key identifier: 2A:40:7C:A4:C7:CD:77:DA:B9:75:AA:E3:D1:49:F2:E2:1D:34:12:BA
Authority key identifier: 0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
Certificate issuer: /CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Certificate serial: 0198D7A944E5FCAB1E57407545FBBF77886E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
Manifest number: 0C35
Signing time: Sat 23 Aug 2025 16:00:51 +0000
Manifest this update: Sat 23 Aug 2025 16:00:51 +0000
Manifest next update: Sun 24 Aug 2025 16:00:51 +0000
Files and hashes: 1: C_t1KSifiPtLuHs5577cnZ8n1fo.crl (hash: PHeXpyalqdIeBjZw9+538OKh4FkjssnduGqc1Ne5BtU=)
2: whyZk-eGgLM_RCz6JHmHxo6hnC4.roa (hash: JprlHVW3ts3bvDOmnO+99r6acv/rg1V894NDodBDkxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:44:e5:fc:ab:1e:57:40:75:45:fb:bf:77:88:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Validity
Not Before: Aug 23 16:00:51 2025 GMT
Not After : Aug 24 16:00:51 2025 GMT
Subject: CN=2a407ca4c7cd77dab975aae3d149f2e21d3412ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b4:5b:9b:d1:49:94:08:d4:f0:c8:36:40:5a:
15:0d:50:55:c9:36:30:8d:52:bf:b9:90:6c:89:63:
83:70:1b:dd:7d:86:0c:46:ba:8b:42:8d:68:3e:77:
a5:1b:ed:bc:37:f6:ae:03:d7:91:01:50:56:2a:79:
39:de:8e:8e:9c:ca:c2:f7:50:d3:4e:b3:00:f6:d6:
c8:27:4f:99:3a:45:f1:2b:f7:26:da:8c:cb:0c:80:
7c:98:30:fd:78:f9:62:c8:1a:ce:cb:b0:14:f4:b3:
c3:6f:6f:ef:0b:aa:64:a6:ca:bb:c2:8f:d6:a9:05:
71:47:a3:2b:95:4a:35:67:b8:31:18:24:c0:1b:74:
9d:db:30:a0:a0:cc:b7:db:7d:b7:f5:24:51:e8:b2:
aa:14:63:a4:f8:c7:6e:22:5f:4c:66:9a:94:ef:38:
77:1c:f8:40:21:e3:b8:d6:cf:85:71:db:7b:2a:8f:
24:60:a5:bc:1f:4b:f8:5f:14:5b:b6:aa:ba:61:ba:
cc:3a:65:62:d8:d2:76:c0:da:ba:2e:33:79:f1:2e:
34:22:43:c4:25:25:06:0f:7d:8b:4f:5b:4e:2b:55:
fa:35:a4:e1:77:50:5b:0c:72:90:7f:8e:ab:2f:2f:
89:1f:99:02:f4:05:8c:81:de:11:79:92:67:20:bc:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:40:7C:A4:C7:CD:77:DA:B9:75:AA:E3:D1:49:F2:E2:1D:34:12:BA
X509v3 Authority Key Identifier:
keyid:0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:9e:80:f2:e0:98:14:c7:61:c0:95:b3:6c:64:2f:fc:7c:ff:
00:d5:4e:5a:45:ff:ff:46:19:68:37:80:49:47:30:79:b3:9f:
bb:cb:d8:64:44:2d:a3:f5:0a:ad:fc:77:16:c3:26:9d:d7:2a:
3c:b6:87:4f:1e:19:5e:32:b7:74:f3:87:44:4c:33:e7:e5:0f:
00:99:6a:a5:69:5b:9f:57:bb:b8:ff:8c:7a:e9:e8:1f:62:12:
54:4b:3e:22:33:03:86:53:e9:23:8e:79:2d:0b:08:98:24:c8:
a4:e7:5d:da:79:ab:86:2b:0d:6b:ce:4a:06:80:dd:00:2a:55:
85:a6:0e:a6:51:9b:65:80:b6:53:d8:8e:83:13:12:e0:cf:83:
36:cb:c4:ba:cf:c0:14:1b:25:ff:cf:1f:cc:55:e4:e2:31:61:
70:7a:d9:6a:f6:14:24:ed:32:57:bc:64:88:9e:3b:46:14:b4:
b1:a8:48:23:c3:35:0b:b1:b5:be:a5:6d:e1:ac:6b:e8:c1:14:
85:7d:fc:7e:18:75:1e:88:89:e1:6a:09:29:05:a2:9f:58:00:
97:81:ef:9f:a6:42:ab:a9:cc:4f:7b:6c:a1:46:5e:e6:0d:a2:
7b:53:2a:83:3c:10:2e:34:c6:d4:72:60:ed:91:e6:cb:23:e6:
4d:27:ef:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqUTl/KseV0B1Rfu/d4huMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmI3NTI5Mjg5Zjg4ZmI0YmI4N2IzOWU3YmVkYzlkOWYy
N2Q1ZmEwHhcNMjUwODIzMTYwMDUxWhcNMjUwODI0MTYwMDUxWjAzMTEwLwYDVQQD
EygyYTQwN2NhNGM3Y2Q3N2RhYjk3NWFhZTNkMTQ5ZjJlMjFkMzQxMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rRbm9FJlAjU8Mg2QFoVDVBVyTYw
jVK/uZBsiWODcBvdfYYMRrqLQo1oPnelG+28N/auA9eRAVBWKnk53o6OnMrC91DT
TrMA9tbIJ0+ZOkXxK/cm2ozLDIB8mDD9ePliyBrOy7AU9LPDb2/vC6pkpsq7wo/W
qQVxR6MrlUo1Z7gxGCTAG3Sd2zCgoMy323239SRR6LKqFGOk+MduIl9MZpqU7zh3
HPhAIeO41s+Fcdt7Ko8kYKW8H0v4XxRbtqq6YbrMOmVi2NJ2wNq6LjN58S40IkPE
JSUGD32LT1tOK1X6NaThd1BbDHKQf46rLy+JH5kC9AWMgd4ReZJnILzwBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpAfKTHzXfauXWq49FJ8uIdNBK6MB8GA1UdIwQY
MBaAFAv7dSkon4j7S7h7Oee+3J2fJ9X6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ190MUtTaWZpUHRMdUhzNTU3N2NuWjhuMWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81N2Q1NjUtODgzYi00OGEyLWE0MjQt
MjczZGI3ZDUzODk4LzEvQ190MUtTaWZpUHRMdUhzNTU3N2NuWjhuMWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81N2Q1NjUtODgzYi00OGEyLWE0MjQtMjczZGI3ZDUzODk4
LzEvQ190MUtTaWZpUHRMdUhzNTU3N2NuWjhuMWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJ6A8uCY
FMdhwJWzbGQv/Hz/ANVOWkX//0YZaDeASUcwebOfu8vYZEQto/UKrfx3FsMmndcq
PLaHTx4ZXjK3dPOHREwz5+UPAJlqpWlbn1e7uP+MeunoH2ISVEs+IjMDhlPpI455
LQsImCTIpOdd2nmrhisNa85KBoDdACpVhaYOplGbZYC2U9iOgxMS4M+DNsvEus/A
FBsl/88fzFXk4jFhcHrZavYUJO0yV7xkiJ47RhS0sahII8M1C7G1vqVt4axr6MEU
hX38fhh1HoiJ4WoJKQWin1gAl4Hvn6ZCq6nMT3tsoUZe5g2ie1MqgzwQLjTG1HJg
7ZHmyyPmTSfvOg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:24 2025 by rpki-client