Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: VSD+26IoIx9moD5wm04KQRHuepFlgqrnpUulbJxUvRE=
Subject key identifier: A6:9E:04:30:D4:2D:65:3E:88:95:FF:9F:54:6B:77:0F:B9:B2:5C:4F
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 0198D6CD14A2BCFC9F6B54A7D22352EE6BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0BAD
Signing time: Sat 23 Aug 2025 12:00:21 +0000
Manifest this update: Sat 23 Aug 2025 12:00:21 +0000
Manifest next update: Sun 24 Aug 2025 12:00:21 +0000
Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: AJ+a4f5dwBWq+mfRJPO46L/Lp6tmNU865ftun3JGmgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:14:a2:bc:fc:9f:6b:54:a7:d2:23:52:ee:6b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Aug 23 12:00:21 2025 GMT
Not After : Aug 24 12:00:21 2025 GMT
Subject: CN=a69e0430d42d653e8895ff9f546b770fb9b25c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:79:dd:90:04:ac:e2:57:98:d4:e1:63:54:
00:80:d0:d2:22:94:fb:a1:35:71:42:be:df:43:70:
32:5d:0a:ae:a0:af:b7:5b:90:02:90:c3:ea:1a:cb:
d2:d6:0c:22:ba:f4:7e:ab:d9:cf:12:1b:bf:bb:d9:
b6:c9:90:f2:db:a0:48:cf:1b:c0:a1:77:b1:36:25:
b7:07:bc:71:1e:2a:d4:7c:14:3e:94:c1:b8:e2:b0:
85:40:2f:79:35:93:e0:f8:57:49:cc:8e:26:1c:91:
4f:63:4f:80:ef:ab:1b:2f:60:5c:08:7f:2d:77:b6:
c3:1d:57:70:8d:5c:6e:f0:8f:50:0d:cd:33:72:02:
bf:06:f8:ee:f2:8c:63:1d:5b:f6:a1:e5:cf:8f:42:
8f:af:4d:6f:bb:76:36:2f:71:5b:44:45:07:d5:46:
3f:4c:6a:ac:b0:c1:2e:b8:e7:98:b5:89:0d:1b:88:
6f:b0:0f:2b:14:65:d5:99:11:07:a2:c1:86:24:f1:
2b:be:b1:a4:0d:f8:a1:6b:be:2a:b3:38:7a:ac:19:
35:cf:98:b2:0b:70:c2:75:86:54:bf:62:88:dd:1c:
26:9e:f7:60:50:bb:5e:0e:12:72:24:eb:bc:60:52:
4a:da:da:7c:38:d9:24:45:2e:6a:5f:82:99:94:4b:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9E:04:30:D4:2D:65:3E:88:95:FF:9F:54:6B:77:0F:B9:B2:5C:4F
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8f:7f:73:cc:84:20:c7:ec:07:78:92:45:b9:18:e1:d7:83:
e1:c6:b2:92:3b:78:c2:c1:e3:63:99:0f:05:ea:2a:c1:20:46:
44:38:fe:e0:09:46:21:54:b1:ac:9d:77:ed:57:46:24:a6:6d:
39:94:e8:69:d6:f9:b0:8d:84:43:30:57:3b:ae:fa:2c:88:f0:
ff:c3:b5:a9:98:34:85:3e:67:45:24:ef:e0:53:71:36:77:22:
dc:a1:44:12:7c:81:a8:fa:ee:a2:f0:b5:b4:a0:c0:0d:ed:bb:
6f:33:7f:92:f2:f4:9e:06:5c:5d:c4:a6:39:ed:42:11:b0:b9:
f1:54:70:cf:1c:ed:2f:36:fb:78:ec:95:04:1a:26:e5:1a:06:
5a:ea:09:fa:f5:81:38:3f:3d:86:bf:34:2b:c9:09:3c:e4:cf:
a5:df:83:ee:6f:d7:be:13:57:3a:78:14:02:ac:af:6d:c1:a2:
65:eb:45:47:aa:2c:2f:2a:b9:01:fb:0e:3a:cc:62:1c:43:72:
4e:96:d3:e7:28:f4:d7:d2:c1:19:2a:74:cf:08:ce:f9:0a:91:
d0:f9:f4:22:3c:e8:f6:80:8b:30:38:72:5b:51:6f:a3:7f:a5:
17:55:95:d1:d5:b1:e3:8e:ed:b6:77:f6:1d:94:01:6e:ab:bd:
69:b9:c9:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzRSivPyfa1Sn0iNS7mvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDFhNjM0YmJiN2FlZmFkODdkMTIxYTVmZTU0NTY0ODcz
OGM4YzUwHhcNMjUwODIzMTIwMDIxWhcNMjUwODI0MTIwMDIxWjAzMTEwLwYDVQQD
EyhhNjllMDQzMGQ0MmQ2NTNlODg5NWZmOWY1NDZiNzcwZmI5YjI1YzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TJ53ZAErOJXmNThY1QAgNDSIpT7
oTVxQr7fQ3AyXQquoK+3W5ACkMPqGsvS1gwiuvR+q9nPEhu/u9m2yZDy26BIzxvA
oXexNiW3B7xxHirUfBQ+lMG44rCFQC95NZPg+FdJzI4mHJFPY0+A76sbL2BcCH8t
d7bDHVdwjVxu8I9QDc0zcgK/Bvju8oxjHVv2oeXPj0KPr01vu3Y2L3FbREUH1UY/
TGqssMEuuOeYtYkNG4hvsA8rFGXVmREHosGGJPErvrGkDfiha74qszh6rBk1z5iy
C3DCdYZUv2KI3RwmnvdgULteDhJyJOu8YFJK2tp8ONkkRS5qX4KZlEu/kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaeBDDULWU+iJX/n1Rrdw+5slxPMB8GA1UdIwQY
MBaAFAnRpjS7t6762H0SGl/lRWSHOMjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjIt
NWU1YjhiMjgwNTlhLzEvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjItNWU1YjhiMjgwNTlh
LzEvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWo9/c8yE
IMfsB3iSRbkY4deD4caykjt4wsHjY5kPBeoqwSBGRDj+4AlGIVSxrJ137VdGJKZt
OZToadb5sI2EQzBXO676LIjw/8O1qZg0hT5nRSTv4FNxNnci3KFEEnyBqPruovC1
tKDADe27bzN/kvL0ngZcXcSmOe1CEbC58VRwzxztLzb7eOyVBBom5RoGWuoJ+vWB
OD89hr80K8kJPOTPpd+D7m/XvhNXOngUAqyvbcGiZetFR6osLyq5AfsOOsxiHENy
TpbT5yj019LBGSp0zwjO+QqR0Pn0Ijzo9oCLMDhyW1Fvo3+lF1WV0dWx447ttnf2
HZQBbqu9abnJow==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:00 2025 by rpki-client