Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: DRC5FntZ5UjZOJhdEzZnvhKdFQ9ms2Ahy6tkpPlD0/o=
Subject key identifier: 4D:DE:41:E9:34:2E:E0:83:9A:A3:8B:52:EF:4D:F2:02:80:2C:CC:BC
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 0198D54EBF39C9EBFB29EDB23F74BDB20591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:44 +0000
Manifest this update: Sat 23 Aug 2025 05:02:44 +0000
Manifest next update: Sun 24 Aug 2025 05:02:44 +0000
Files and hashes: 1: SQhydS1Vyld3IgwAh8s8p2RiQDs.roa (hash: kTe34yKWId3G306BKOLdnp9X7okjGmRInSEoph+3YmU=)
2: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
3: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: a1ft9dmZH1QlUDcY2wZ4nxzLkpEKjRgxjPxd8h0A95s=)
4: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bf:39:c9:eb:fb:29:ed:b2:3f:74:bd:b2:05:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Aug 23 05:02:44 2025 GMT
Not After : Aug 24 05:02:44 2025 GMT
Subject: CN=4dde41e9342ee0839aa38b52ef4df202802cccbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:ca:22:79:e4:ee:ee:3f:43:e2:a3:03:78:
75:f0:2a:98:a9:ed:12:ba:3d:02:b7:0a:8a:5e:28:
01:30:ab:05:39:85:ce:f0:84:80:3f:01:56:6f:8b:
c7:19:31:57:03:d9:18:86:8e:4f:6e:f6:28:7b:ca:
03:80:f5:d2:dd:0a:82:63:06:73:74:ba:45:48:65:
0f:b4:b1:8c:55:9a:4d:69:b9:b1:4b:d7:79:3d:32:
7d:64:32:05:50:d6:db:1b:52:5b:b0:10:7c:59:d6:
55:a4:12:e2:29:3f:60:8d:11:a7:77:b4:64:e3:a9:
df:49:ba:79:22:09:a9:d5:e2:67:61:21:a6:ce:ab:
5c:ca:74:1c:ab:8f:8b:c5:cc:ef:b6:c2:c5:8f:cf:
a1:a9:27:3c:b0:7c:4c:df:40:ed:eb:28:e5:7f:e6:
a5:00:5d:c6:0e:0e:a2:97:55:e5:12:31:2f:7d:dd:
fe:40:de:cc:44:81:aa:59:9d:63:58:91:af:63:7d:
9b:04:ed:50:d7:42:60:57:2b:bc:5e:c9:cc:f6:7e:
0c:fa:ae:a7:7a:d3:05:54:2c:6d:6d:17:56:a0:ae:
71:ee:68:70:57:63:04:3c:56:52:06:11:ea:ad:79:
5f:ee:79:2d:15:0d:71:00:60:f2:19:85:b6:9c:76:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DE:41:E9:34:2E:E0:83:9A:A3:8B:52:EF:4D:F2:02:80:2C:CC:BC
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a0:95:63:dc:8d:8d:b1:ca:a5:1a:2f:c3:8c:63:37:68:b8:
15:f5:47:5a:db:d9:6d:d2:24:7a:fe:2b:8e:92:d3:fd:5b:a1:
69:0c:86:b9:e0:6d:8f:6f:5a:a1:4f:81:5f:4e:98:3a:f9:38:
5f:78:69:2f:71:28:d9:c0:f9:5d:4f:24:0b:ba:a0:d3:a4:c4:
33:dc:93:e2:7b:b1:f2:5a:de:60:e8:79:4e:dc:e2:1d:a5:b9:
8c:03:30:2e:a0:24:9c:71:65:ca:40:49:f8:37:43:8b:51:de:
68:ad:75:18:01:e2:63:1a:07:2e:ad:a5:f3:cd:83:aa:2a:c0:
c1:89:d9:b9:c1:f8:94:6d:e3:c1:dd:28:2a:e6:cb:cf:c9:48:
94:5a:aa:87:47:14:99:0d:a5:8f:9e:03:fd:b8:51:36:03:1b:
43:41:69:57:fe:34:c8:ae:f8:75:69:ea:33:e1:85:e6:b8:7e:
0d:83:af:07:2c:f8:74:14:df:a4:53:dd:d1:8c:b5:7a:55:db:
50:94:d3:7c:10:f3:9b:59:9d:cb:ca:a9:fe:05:ae:45:3d:ac:
7c:29:10:72:3c:2a:d6:b8:b5:9c:ee:8e:0c:33:c4:98:4d:d9:
1b:71:b9:9e:a5:c6:e9:be:e0:87:f2:4f:fe:42:b2:1c:1e:a2:
74:a5:51:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTr85yev7Ke2yP3S9sgWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDk4ZWZhYWU4MDYzY2FjZWNjNGYxYzFhMGI2NDQ4M2Ji
Njk1MDMwHhcNMjUwODIzMDUwMjQ0WhcNMjUwODI0MDUwMjQ0WjAzMTEwLwYDVQQD
Eyg0ZGRlNDFlOTM0MmVlMDgzOWFhMzhiNTJlZjRkZjIwMjgwMmNjY2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CnKInnk7u4/Q+KjA3h18CqYqe0S
uj0CtwqKXigBMKsFOYXO8ISAPwFWb4vHGTFXA9kYho5PbvYoe8oDgPXS3QqCYwZz
dLpFSGUPtLGMVZpNabmxS9d5PTJ9ZDIFUNbbG1JbsBB8WdZVpBLiKT9gjRGnd7Rk
46nfSbp5Igmp1eJnYSGmzqtcynQcq4+LxczvtsLFj8+hqSc8sHxM30Dt6yjlf+al
AF3GDg6il1XlEjEvfd3+QN7MRIGqWZ1jWJGvY32bBO1Q10JgVyu8XsnM9n4M+q6n
etMFVCxtbRdWoK5x7mhwV2MEPFZSBhHqrXlf7nktFQ1xAGDyGYW2nHYP+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3eQek0LuCDmqOLUu9N8gKALMy8MB8GA1UdIwQY
MBaAFHIJjvqugGPKzsxPHBoLZEg7tpUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEt
NTczY2E1YTYwOWMwLzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEtNTczY2E1YTYwOWMw
LzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6CVY9yN
jbHKpRovw4xjN2i4FfVHWtvZbdIkev4rjpLT/VuhaQyGueBtj29aoU+BX06YOvk4
X3hpL3Eo2cD5XU8kC7qg06TEM9yT4nux8lreYOh5TtziHaW5jAMwLqAknHFlykBJ
+DdDi1HeaK11GAHiYxoHLq2l882DqirAwYnZucH4lG3jwd0oKubLz8lIlFqqh0cU
mQ2lj54D/bhRNgMbQ0FpV/40yK74dWnqM+GF5rh+DYOvByz4dBTfpFPd0Yy1elXb
UJTTfBDzm1mdy8qp/gWuRT2sfCkQcjwq1ri1nO6ODDPEmE3ZG3G5nqXG6b7gh/JP
/kKyHB6idKVRJQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:19 2025 by rpki-client