Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: PvWyHCkXn2oUMqgrs8keoPLJUnhy6XarLAPisGQlpBs=
Subject key identifier: E8:38:F9:91:4F:13:AE:9F:61:DF:77:E1:92:0C:FE:AA:C6:29:79:9E
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 0198D4A8253993FE3E20ACF57EC02C77BDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 10AD
Signing time: Sat 23 Aug 2025 02:00:46 +0000
Manifest this update: Sat 23 Aug 2025 02:00:46 +0000
Manifest next update: Sun 24 Aug 2025 02:00:46 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: bW4dnbx/gps1r8vsr0DR3UJAT8BI3ivPx9F6DUmhqi4=)
2: aZ04YotwMN5NF6QJ2ZcHvh79g-w.roa (hash: dZyQQffGI8dAk3Ily2WBsTj4NOYJ+9MtNaWUE01PNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:25:39:93:fe:3e:20:ac:f5:7e:c0:2c:77:bd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Aug 23 02:00:46 2025 GMT
Not After : Aug 24 02:00:46 2025 GMT
Subject: CN=e838f9914f13ae9f61df77e1920cfeaac629799e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:24:b6:1a:42:ec:f4:7b:fc:a2:34:51:bb:3d:
f6:66:2e:22:8b:dc:e0:05:e2:f0:97:8d:5b:f9:13:
32:77:53:11:60:04:1d:9f:a7:73:91:57:af:7d:ae:
71:42:2c:27:90:c5:2a:55:68:9e:65:13:92:a9:cb:
6c:13:10:24:99:d0:26:cf:c1:82:5b:94:46:dd:48:
53:84:25:c5:a9:52:ed:75:d2:53:fe:28:3a:e1:e9:
49:11:02:0b:de:c5:60:83:fe:e8:53:2c:9a:5a:de:
58:38:4f:f7:c8:fb:94:ea:4c:ad:a8:1b:09:ec:b9:
b3:19:4c:36:8a:6b:02:5d:70:6e:fe:b9:eb:43:ce:
d2:a3:13:0e:9e:8c:9e:ef:5f:e3:60:09:cd:c6:9d:
1f:90:46:40:7c:55:d4:92:5d:ea:d9:5a:00:fa:84:
04:88:40:4d:18:70:94:43:e0:07:14:ca:56:70:56:
28:58:2e:85:4c:93:f3:0a:59:87:ce:84:4a:a5:b5:
43:c6:1a:98:43:f0:7f:9a:0b:e1:94:e4:e1:d0:73:
ad:5d:8d:db:c8:5e:07:f2:d9:a3:44:f0:a1:ef:37:
33:e6:de:f3:a5:2a:f9:a2:b5:ad:3d:1e:b3:93:30:
4a:e9:12:12:21:e8:7c:aa:94:24:10:d5:7b:7e:08:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:38:F9:91:4F:13:AE:9F:61:DF:77:E1:92:0C:FE:AA:C6:29:79:9E
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:69:e0:bf:2e:20:83:28:39:99:c2:89:52:00:ee:cc:3c:b0:
92:1c:69:e4:df:9e:96:b2:78:bb:a6:fd:54:ce:cb:8d:e9:e9:
d3:fc:ea:fb:ef:a7:ee:ea:55:dc:4a:ad:6b:29:f6:33:3e:55:
76:bf:85:51:cc:dd:98:86:6f:c2:8a:44:14:44:1a:d7:48:7b:
8d:6c:a1:cd:83:e2:5c:fe:86:6c:70:83:6f:52:27:26:ed:66:
d4:ea:e4:8c:b8:69:cf:11:f7:d9:44:f4:7a:42:04:92:08:3d:
53:be:de:fb:8e:3c:47:31:d4:b7:5a:cc:4e:d2:95:2f:90:d8:
c9:fa:4e:55:07:40:d5:a4:eb:c6:0a:58:90:99:98:66:0a:21:
4e:c4:a5:d7:a7:85:a6:18:15:51:75:60:1a:55:c3:b6:32:db:
da:93:89:42:32:27:18:1b:cc:91:d4:37:53:ea:00:69:49:bd:
9d:f6:1b:f3:2d:c7:cb:59:51:fa:d7:35:69:c6:ba:22:f1:2b:
d2:20:f9:80:b7:de:b4:fa:62:2d:cb:b1:79:5a:ec:28:8b:3b:
db:51:32:1b:76:87:99:00:c2:85:7d:e4:37:2c:f2:9b:6c:0b:
48:b9:c6:1b:3c:db:3d:e2:b0:35:04:e4:a2:e8:82:a6:a8:26:
78:3f:f5:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqCU5k/4+IKz1fsAsd736MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTg2OGVlODRjNWYyN2Q5MTY5ZDI0M2MzMzdiNzRiNmZm
OGMxNGQwHhcNMjUwODIzMDIwMDQ2WhcNMjUwODI0MDIwMDQ2WjAzMTEwLwYDVQQD
EyhlODM4Zjk5MTRmMTNhZTlmNjFkZjc3ZTE5MjBjZmVhYWM2Mjk3OTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iS2GkLs9Hv8ojRRuz32Zi4ii9zg
BeLwl41b+RMyd1MRYAQdn6dzkVevfa5xQiwnkMUqVWieZROSqctsExAkmdAmz8GC
W5RG3UhThCXFqVLtddJT/ig64elJEQIL3sVgg/7oUyyaWt5YOE/3yPuU6kytqBsJ
7LmzGUw2imsCXXBu/rnrQ87SoxMOnoye71/jYAnNxp0fkEZAfFXUkl3q2VoA+oQE
iEBNGHCUQ+AHFMpWcFYoWC6FTJPzClmHzoRKpbVDxhqYQ/B/mgvhlOTh0HOtXY3b
yF4H8tmjRPCh7zcz5t7zpSr5orWtPR6zkzBK6RISIeh8qpQkENV7fgju5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg4+ZFPE66fYd934ZIM/qrGKXmeMB8GA1UdIwQY
MBaAFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMt
YTMwZjUzN2Q5YzViLzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMtYTMwZjUzN2Q5YzVi
LzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2ngvy4g
gyg5mcKJUgDuzDywkhxp5N+elrJ4u6b9VM7Ljenp0/zq+++n7upV3Eqtayn2Mz5V
dr+FUczdmIZvwopEFEQa10h7jWyhzYPiXP6GbHCDb1InJu1m1OrkjLhpzxH32UT0
ekIEkgg9U77e+448RzHUt1rMTtKVL5DYyfpOVQdA1aTrxgpYkJmYZgohTsSl16eF
phgVUXVgGlXDtjLb2pOJQjInGBvMkdQ3U+oAaUm9nfYb8y3Hy1lR+tc1aca6IvEr
0iD5gLfetPpiLcuxeVrsKIs721EyG3aHmQDChX3kNyzym2wLSLnGGzzbPeKwNQTk
ouiCpqgmeD/1pg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:53 2025 by rpki-client