Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: ihGhkbQ4jOVZDnJeoVCfFb0+5nDAzxK16O3C/i3ZaZc=
Subject key identifier: C7:42:62:0F:58:A2:B1:11:94:87:E8:C0:7E:78:76:C6:22:BB:28:A9
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 0198D66059350AC1C8B2A25030684C3319BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 10:01:35 +0000
Manifest this update: Sat 23 Aug 2025 10:01:35 +0000
Manifest next update: Sun 24 Aug 2025 10:01:35 +0000
Files and hashes: 1: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (hash: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=)
2: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: 6fEKQhWWnPjdCy8U0ehdOykBnXBI76vdQgpdlrOCoas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:59:35:0a:c1:c8:b2:a2:50:30:68:4c:33:19:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Aug 23 10:01:35 2025 GMT
Not After : Aug 24 10:01:35 2025 GMT
Subject: CN=c742620f58a2b1119487e8c07e7876c622bb28a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:1b:49:fa:2c:fd:83:4a:1b:e3:bd:e4:dd:
c3:97:89:e4:6c:db:b2:a0:ce:42:b2:fa:d9:e9:c8:
7f:e7:ce:55:58:76:60:84:d9:19:5a:35:46:e4:1d:
2d:f0:79:ca:a6:04:eb:db:3a:9b:e3:22:69:31:9f:
25:6f:98:a5:e3:7c:97:b1:0e:f3:f4:98:6e:25:f9:
f5:7d:63:d6:ab:8a:51:35:a2:9f:45:ca:a9:b0:37:
db:66:23:65:8d:ee:48:5f:06:e3:3c:62:7c:ac:fb:
fd:0a:d7:7b:f3:97:eb:05:0b:0c:b2:0a:d2:76:e5:
c4:6e:ca:3f:17:98:8e:47:23:63:6b:22:6b:56:d4:
9c:30:dd:1c:45:da:ca:f6:1e:cf:9e:a5:d9:5a:b5:
5b:fd:11:36:e1:06:03:80:76:b3:f1:9b:fa:4e:df:
5b:6f:17:bf:28:c9:fe:83:ef:39:a2:8c:a1:68:be:
81:05:8a:03:3d:6b:9e:6d:0b:09:2d:c5:43:65:84:
6e:05:cd:32:b1:01:fb:de:96:26:7c:a1:cf:a5:16:
ea:b9:1e:3b:da:8f:26:d3:e1:81:5a:ab:33:f3:9f:
17:db:0b:53:6c:04:cd:e7:df:6f:c0:db:03:a2:d5:
cf:91:4e:8a:b8:1d:46:8d:ba:d4:4d:48:c8:55:6c:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:42:62:0F:58:A2:B1:11:94:87:E8:C0:7E:78:76:C6:22:BB:28:A9
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d6:58:9e:66:a8:42:f6:a5:fa:b6:60:57:34:cf:57:65:2d:
5e:56:5a:51:e6:40:de:e7:9c:96:01:f5:e7:4d:ab:e7:61:50:
69:f2:62:3f:ea:e0:8e:40:41:8d:53:1c:d0:29:fb:c5:b5:74:
1f:8b:f7:de:77:12:31:ec:fc:20:d9:01:fa:ea:f6:47:62:26:
3f:46:11:e1:d9:50:ba:30:40:b0:8b:0e:62:2c:b5:86:33:1d:
90:e2:f8:ef:fe:31:19:77:b0:b4:95:09:37:16:df:3c:c2:10:
41:84:86:3f:6a:f9:dc:1c:72:f4:79:a5:1c:e7:c7:fa:9d:67:
c5:b5:15:40:89:54:f9:50:35:68:7e:d6:45:d9:6a:4b:8c:a8:
c0:14:d3:5a:a8:4d:c6:72:cb:0d:47:62:20:8b:b3:0a:95:14:
0d:33:e4:95:71:5c:89:12:e5:db:4b:c3:f6:bb:8c:63:91:66:
1d:9f:af:ce:92:06:ba:27:00:4c:de:b9:bf:8d:c8:2f:2f:9d:
12:78:c9:12:8e:2d:d4:c9:61:25:92:9f:8c:ea:60:ff:80:be:
cf:14:db:92:b0:46:44:e1:6b:21:9f:8f:ac:8b:9d:fd:cf:43:
86:98:22:49:5a:9d:76:37:94:9b:ce:94:f3:0c:94:a4:ce:ad:
bc:56:9a:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYFk1CsHIsqJQMGhMMxm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDBhMjk3OWU5YjY2NTJkNjFiOTAxZGQ1NWExOTI4ZGJm
ZGNmNmQwHhcNMjUwODIzMTAwMTM1WhcNMjUwODI0MTAwMTM1WjAzMTEwLwYDVQQD
EyhjNzQyNjIwZjU4YTJiMTExOTQ4N2U4YzA3ZTc4NzZjNjIyYmIyOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZkbSfos/YNKG+O95N3Dl4nkbNuy
oM5CsvrZ6ch/585VWHZghNkZWjVG5B0t8HnKpgTr2zqb4yJpMZ8lb5il43yXsQ7z
9JhuJfn1fWPWq4pRNaKfRcqpsDfbZiNlje5IXwbjPGJ8rPv9Ctd785frBQsMsgrS
duXEbso/F5iORyNjayJrVtScMN0cRdrK9h7PnqXZWrVb/RE24QYDgHaz8Zv6Tt9b
bxe/KMn+g+85ooyhaL6BBYoDPWuebQsJLcVDZYRuBc0ysQH73pYmfKHPpRbquR47
2o8m0+GBWqsz858X2wtTbATN599vwNsDotXPkU6KuB1GjbrUTUjIVWxjBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdCYg9YorERlIfowH54dsYiuyipMB8GA1UdIwQY
MBaAFAnQopeem2ZS1huQHdVaGSjb/c9tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQt
MDlmNzNjMzU0ZTdjLzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQtMDlmNzNjMzU0ZTdj
LzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtZYnmao
Qval+rZgVzTPV2UtXlZaUeZA3ueclgH1502r52FQafJiP+rgjkBBjVMc0Cn7xbV0
H4v33ncSMez8INkB+ur2R2ImP0YR4dlQujBAsIsOYiy1hjMdkOL47/4xGXewtJUJ
NxbfPMIQQYSGP2r53Bxy9HmlHOfH+p1nxbUVQIlU+VA1aH7WRdlqS4yowBTTWqhN
xnLLDUdiIIuzCpUUDTPklXFciRLl20vD9ruMY5FmHZ+vzpIGuicATN65v43ILy+d
EnjJEo4t1MlhJZKfjOpg/4C+zxTbkrBGROFrIZ+PrIud/c9DhpgiSVqddjeUm86U
8wyUpM6tvFaakg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:37 2025 by rpki-client