Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier: 5v9JWJkGFqpjYgzupaTYAZmG31X5bTvQE7bNyq/RJ0c=
Subject key identifier: 02:24:4E:B9:B1:DB:41:18:E7:3D:59:80:89:FE:66:03:58:FD:6F:A6
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 0198D515E9B8CACB8B6C96D4E7D661DFDD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number: 9C
Signing time: Sat 23 Aug 2025 04:00:39 +0000
Manifest this update: Sat 23 Aug 2025 04:00:39 +0000
Manifest next update: Sun 24 Aug 2025 04:00:39 +0000
Files and hashes: 1: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: dUoBDFVsSUd1RgJfaWq79yuoTlajnKnrnuTCLfG8USY=)
2: l3EQEBZnleFof5yb88UhTSSdRTM.roa (hash: UQRjHQuRnFXbfdwyx6MJct5Sj+7na+HTqU/QptK8INI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e9:b8:ca:cb:8b:6c:96:d4:e7:d6:61:df:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Aug 23 04:00:39 2025 GMT
Not After : Aug 24 04:00:39 2025 GMT
Subject: CN=02244eb9b1db4118e73d598089fe660358fd6fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:66:93:f2:75:65:cc:92:46:2d:4f:6a:33:da:
cb:dc:f5:5d:2c:98:8f:52:2e:d0:71:ec:20:dd:cb:
28:0b:30:5c:c2:78:72:07:43:b6:6a:df:52:af:0c:
5a:ef:bb:9a:1d:26:b0:2b:c0:19:0b:f7:c9:f6:41:
b0:8a:c1:ff:17:b4:5d:2a:14:cb:58:eb:0f:ca:c0:
53:d0:32:d2:4f:3c:27:e1:2a:f2:84:77:01:bf:da:
3c:d9:82:d1:c1:17:39:c7:34:7d:aa:88:1c:d8:92:
72:5a:2e:fd:54:be:f8:b6:71:ff:c9:7a:24:40:35:
ff:ca:60:84:af:aa:3a:9e:cb:ae:b5:4e:a2:a0:1a:
4f:f1:a2:90:4a:c1:52:11:6a:4b:9f:7e:29:7e:62:
a0:45:53:d8:bd:94:43:b9:75:73:5d:0e:d9:16:bc:
ba:d3:84:8c:25:8d:6b:c0:b2:89:d3:d6:39:ae:45:
6b:b6:fd:59:a8:38:99:8e:ec:66:28:d3:c2:9b:e1:
2c:7a:fe:61:1a:32:dd:f3:90:ad:8e:c8:c7:ae:8e:
8a:35:ff:9b:21:ac:b9:95:26:bf:ad:22:d2:93:ff:
3a:d4:6e:5a:90:f6:3e:3c:8e:38:fb:7c:cf:e9:75:
4d:e6:19:2b:bc:8a:f5:92:0d:de:14:94:a0:0b:d5:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:24:4E:B9:B1:DB:41:18:E7:3D:59:80:89:FE:66:03:58:FD:6F:A6
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4e:c7:af:61:96:5b:89:ac:3f:28:8f:1e:46:7d:e6:ef:87:
ef:e1:50:7e:bb:f5:56:ce:43:62:70:f1:71:79:ce:08:97:3e:
bc:3e:ea:bf:ab:8f:ce:28:79:46:48:ed:2f:bd:f3:f4:83:dc:
5c:a8:30:21:1c:90:8f:14:e1:f6:2b:1a:09:59:85:bb:4b:a2:
e7:0d:65:40:a5:2f:b8:c5:41:8c:0d:62:50:1e:d2:e8:32:33:
d0:cb:f7:b4:98:77:6e:a3:9f:c3:c5:68:20:09:1d:5f:59:37:
1b:5d:13:34:e0:47:5f:40:80:21:aa:9b:1e:18:9c:73:2e:1e:
cc:47:01:93:6f:ae:5b:e8:5c:e4:be:7b:5f:76:0f:6a:97:4b:
56:75:d2:63:9a:56:7b:4f:d1:28:c3:ac:89:6a:2b:21:81:d8:
06:1d:81:80:c1:0f:33:dd:22:e7:bc:b5:e1:ca:b0:6e:3b:1c:
d2:11:0c:6c:78:a9:81:98:0b:58:24:df:85:b0:79:c2:55:f9:
32:6c:07:d4:20:b3:8d:78:bf:75:7f:6e:d3:01:8f:1e:44:da:
88:9d:76:0c:63:f1:26:98:f8:36:8f:0b:d1:3b:e5:9c:9c:6d:
59:15:a0:e0:37:6a:26:7d:fb:3d:f3:32:1a:a3:77:66:33:e9:
d2:08:f3:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFem4ysuLbJbU59Zh392bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm
NTNkYjIwHhcNMjUwODIzMDQwMDM5WhcNMjUwODI0MDQwMDM5WjAzMTEwLwYDVQQD
EygwMjI0NGViOWIxZGI0MTE4ZTczZDU5ODA4OWZlNjYwMzU4ZmQ2ZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GaT8nVlzJJGLU9qM9rL3PVdLJiP
Ui7Qcewg3csoCzBcwnhyB0O2at9Srwxa77uaHSawK8AZC/fJ9kGwisH/F7RdKhTL
WOsPysBT0DLSTzwn4SryhHcBv9o82YLRwRc5xzR9qogc2JJyWi79VL74tnH/yXok
QDX/ymCEr6o6nsuutU6ioBpP8aKQSsFSEWpLn34pfmKgRVPYvZRDuXVzXQ7ZFry6
04SMJY1rwLKJ09Y5rkVrtv1ZqDiZjuxmKNPCm+Esev5hGjLd85CtjsjHro6KNf+b
Iay5lSa/rSLSk/861G5akPY+PI44+3zP6XVN5hkrvIr1kg3eFJSgC9WLYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIkTrmx20EY5z1ZgIn+ZgNY/W+mMB8GA1UdIwQY
MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt
ZTIxNzYzYzY3MmZhLzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh
LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhU7Hr2GW
W4msPyiPHkZ95u+H7+FQfrv1Vs5DYnDxcXnOCJc+vD7qv6uPzih5RkjtL73z9IPc
XKgwIRyQjxTh9isaCVmFu0ui5w1lQKUvuMVBjA1iUB7S6DIz0Mv3tJh3bqOfw8Vo
IAkdX1k3G10TNOBHX0CAIaqbHhiccy4ezEcBk2+uW+hc5L57X3YPapdLVnXSY5pW
e0/RKMOsiWorIYHYBh2BgMEPM90i57y14cqwbjsc0hEMbHipgZgLWCTfhbB5wlX5
MmwH1CCzjXi/dX9u0wGPHkTaiJ12DGPxJpj4No8L0TvlnJxtWRWg4DdqJn37PfMy
GqN3ZjPp0gjzcg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:04 2025 by rpki-client