Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: +3S3WITy8dSFyeT4KWASVcpOf0LBJE5NvDV+1ElTfeo=
Subject key identifier: 92:0F:3C:54:CE:61:59:3F:4E:50:65:D7:54:80:27:A0:6E:0F:01:36
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 0198D65F700B3C725D3396D88119A357A7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 098D
Signing time: Sat 23 Aug 2025 10:00:35 +0000
Manifest this update: Sat 23 Aug 2025 10:00:35 +0000
Manifest next update: Sun 24 Aug 2025 10:00:35 +0000
Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=)
3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: vAOdisiaYdqjPK8jjv858bZvoUFCJtkX3L4YYcxFFL0=)
4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:70:0b:3c:72:5d:33:96:d8:81:19:a3:57:a7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Aug 23 10:00:35 2025 GMT
Not After : Aug 24 10:00:35 2025 GMT
Subject: CN=920f3c54ce61593f4e5065d7548027a06e0f0136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:aa:00:57:5b:ca:3a:29:bf:42:35:f9:fa:
31:f3:b1:2b:4f:9f:cc:d4:76:e8:10:e8:34:ef:46:
ef:e0:38:f0:fb:8d:49:e2:97:e1:10:d7:17:3d:9c:
b7:a1:e2:06:31:22:ea:39:41:fd:45:04:2d:0c:b8:
49:86:4f:ec:ac:fd:7b:8f:f3:4d:cb:c2:5f:b8:0d:
29:1d:df:05:0d:4b:e5:13:f2:9e:62:71:8d:35:87:
2a:bc:7b:3f:ed:64:78:a5:8c:74:2f:9f:25:d1:0d:
58:26:e4:7f:0f:ac:c4:44:1a:c1:68:7a:7d:5d:2b:
7e:13:76:e8:9d:80:be:f7:6c:92:13:92:38:ea:f7:
d1:36:a3:18:bd:67:df:c0:64:c8:d4:e3:b5:83:e9:
84:49:b8:d4:38:d7:d8:bd:7e:df:3d:80:59:ac:ab:
3a:66:7f:45:7f:3d:cf:4c:d7:f8:31:d9:fd:97:86:
b3:a0:b8:7f:a0:21:81:56:65:4b:27:ea:36:36:a7:
7f:37:87:ef:f3:98:ec:c1:22:3c:c9:88:85:0f:cd:
f3:2f:4e:54:e5:b0:65:71:4e:58:cb:1c:72:91:36:
ab:8f:35:62:07:57:0d:92:6b:3e:19:d1:98:62:95:
53:77:45:37:94:e8:54:73:18:d3:65:c1:41:55:ff:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0F:3C:54:CE:61:59:3F:4E:50:65:D7:54:80:27:A0:6E:0F:01:36
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4a:cb:5e:a5:50:3d:9f:8d:a5:55:ce:e7:82:e0:2c:c8:29:
4f:a4:99:9a:eb:94:d5:e7:a7:5d:d7:a1:0f:41:7f:13:7b:85:
48:95:8b:01:64:be:db:86:5c:47:a6:1d:30:da:9c:fb:05:27:
33:37:a8:42:f6:1c:75:ba:6d:f3:1a:29:df:bf:d0:ff:c9:c1:
aa:44:07:a2:de:ad:e6:b7:b4:38:78:39:c8:3e:8e:01:91:f9:
8c:37:bf:38:4f:76:57:05:b8:7e:a1:7e:24:e8:a5:6b:1d:fa:
b3:35:3d:ec:d9:00:73:f4:db:6d:75:93:b0:e1:28:68:b9:04:
01:bf:34:b9:e1:df:ce:69:89:3a:35:51:65:8a:8a:da:4a:dc:
ee:a8:b7:42:7f:90:bc:7d:71:34:05:09:db:30:02:c0:8a:73:
d8:da:07:f8:1e:5e:40:fd:7e:95:79:42:9e:91:1b:a5:4e:08:
c0:91:74:12:3c:ba:33:81:c1:fb:9c:19:cc:54:4f:a2:bb:31:
14:50:7e:d5:e1:3e:2d:23:67:d2:29:ee:32:08:a9:62:4c:05:
ad:d8:0e:3d:41:7e:ab:1c:04:4e:a2:cd:19:f6:55:5d:23:51:
99:be:d2:ae:31:d0:5f:66:0f:57:d9:11:54:22:3b:11:90:7e:
20:63:e7:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX3ALPHJdM5bYgRmjV6f6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTgwYjYwZTBkMzBlNDk4ZGUxYmFhNjQ1YTFiZTU3YTk1
MjA0OWQwHhcNMjUwODIzMTAwMDM1WhcNMjUwODI0MTAwMDM1WjAzMTEwLwYDVQQD
Eyg5MjBmM2M1NGNlNjE1OTNmNGU1MDY1ZDc1NDgwMjdhMDZlMGYwMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaWqAFdbyjopv0I1+fox87ErT5/M
1HboEOg070bv4Djw+41J4pfhENcXPZy3oeIGMSLqOUH9RQQtDLhJhk/srP17j/NN
y8JfuA0pHd8FDUvlE/KeYnGNNYcqvHs/7WR4pYx0L58l0Q1YJuR/D6zERBrBaHp9
XSt+E3bonYC+92ySE5I46vfRNqMYvWffwGTI1OO1g+mESbjUONfYvX7fPYBZrKs6
Zn9Ffz3PTNf4Mdn9l4azoLh/oCGBVmVLJ+o2Nqd/N4fv85jswSI8yYiFD83zL05U
5bBlcU5YyxxykTarjzViB1cNkms+GdGYYpVTd0U3lOhUcxjTZcFBVf/b3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIPPFTOYVk/TlBl11SAJ6BuDwE2MB8GA1UdIwQY
MBaAFHCYC2Dg0w5JjeG6pkWhvlepUgSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMt
N2YzN2I3NzhjMDExLzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMtN2YzN2I3NzhjMDEx
LzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUrLXqVQ
PZ+NpVXO54LgLMgpT6SZmuuU1eenXdehD0F/E3uFSJWLAWS+24ZcR6YdMNqc+wUn
MzeoQvYcdbpt8xop37/Q/8nBqkQHot6t5re0OHg5yD6OAZH5jDe/OE92VwW4fqF+
JOilax36szU97NkAc/TbbXWTsOEoaLkEAb80ueHfzmmJOjVRZYqK2krc7qi3Qn+Q
vH1xNAUJ2zACwIpz2NoH+B5eQP1+lXlCnpEbpU4IwJF0Ejy6M4HB+5wZzFRPorsx
FFB+1eE+LSNn0inuMgipYkwFrdgOPUF+qxwETqLNGfZVXSNRmb7SrjHQX2YPV9kR
VCI7EZB+IGPnSA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:35 2025 by rpki-client