Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: iiDXM+KGfr/QbnYzhkRaehw5RlQ5OVfnfj9bw7paiw0=
Subject key identifier: B0:B6:6B:E3:F3:64:F1:AF:9E:4C:8D:23:DC:82:15:9F:D6:99:69:82
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 0198D5BB9FA6158D2D9B9F2AC21DFACC7B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0A88
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: a8NQ9iG/4U6UftDahWa1FX3pZ80R/SJs36Ubj1Dv7Yw=)
2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9f:a6:15:8d:2d:9b:9f:2a:c2:1d:fa:cc:7b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=b0b66be3f364f1af9e4c8d23dc82159fd6996982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:1e:9b:f8:1d:d0:77:3b:d7:f1:f5:f6:10:
bf:1b:af:b2:a9:d5:cf:2b:a2:ac:d0:b4:72:af:11:
f8:42:2c:71:62:56:37:3d:aa:77:12:ea:0c:a2:0b:
80:60:cb:9a:45:42:33:a0:8c:83:ef:e9:bd:8f:f8:
65:1d:0e:c7:78:1e:5a:58:a1:1c:5c:d7:bb:b6:8c:
a9:d7:06:d5:d9:db:c8:cc:af:63:1b:c3:e6:27:0d:
51:41:89:66:61:c1:e2:fc:c6:dd:15:0f:a4:8c:ba:
f5:1b:e8:8b:27:1e:f2:2b:0a:e5:12:dd:d9:6f:58:
b8:76:77:93:53:4b:5d:1f:27:db:45:08:a7:a5:f6:
c0:b7:fe:64:b1:99:b3:c4:bb:6a:f4:47:b7:ba:6a:
b1:ec:ee:25:07:2c:0c:cc:49:c1:af:32:77:5b:77:
3e:e7:6c:db:8d:6b:30:6a:d7:0e:bc:c0:45:96:91:
c0:ef:92:bf:30:4d:27:a5:f5:54:42:88:f9:9b:93:
0e:5a:e1:04:0e:20:ac:60:1b:a0:13:cc:50:fd:0d:
ee:d9:a1:98:d7:0e:cd:77:ad:37:5a:bd:8a:c9:c0:
2f:f7:2e:fd:55:f8:b9:a9:ac:46:86:c1:dd:97:33:
64:94:5b:a8:47:97:9a:ba:0f:9f:21:30:dd:25:36:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:6B:E3:F3:64:F1:AF:9E:4C:8D:23:DC:82:15:9F:D6:99:69:82
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1f:08:eb:f6:fa:28:0f:65:88:54:c2:3f:fd:39:a7:57:d8:
a6:57:9e:3a:73:cf:f2:b8:68:cc:8b:bd:c1:36:d6:0f:95:72:
8d:71:e3:90:39:1b:f0:fb:45:19:ee:2a:ca:5d:a9:87:4e:fc:
cb:5f:1f:55:d4:5d:bb:1e:3b:c0:a9:62:95:de:0a:78:9e:36:
ff:2e:41:8c:c4:9d:4b:44:4a:cb:83:f0:80:22:30:41:4d:12:
e4:f2:03:e1:40:e6:19:32:2d:1e:da:b4:65:2a:fe:8d:3c:19:
30:d2:1f:02:e8:25:7d:e9:c2:5a:b2:92:dd:5e:6f:d1:21:31:
2a:d3:24:ae:8e:1f:58:c2:09:de:a9:a1:cc:5d:3d:1e:3c:ff:
71:62:5e:94:db:fc:f8:c8:8f:39:34:bf:9b:f3:37:b2:3c:71:
67:b0:85:fa:e0:25:80:24:51:ee:cb:b8:57:1c:a8:83:ca:e1:
1e:45:3d:57:c6:7d:b2:30:f9:0c:61:85:58:54:b9:5a:56:d4:
4c:a0:9b:ae:0f:10:71:a5:b8:ed:81:d9:92:b6:11:68:5b:a2:
78:90:25:a3:34:e7:bb:7b:3b:40:19:dc:e7:68:04:3e:0c:ca:
98:c4:26:9d:46:62:bf:35:e1:87:7b:f8:fe:d5:7a:2f:78:5c:
6d:ef:31:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu5+mFY0tm58qwh36zHsEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzhlNzU2MzVhMDlkY2MwM2Y2MjVhODBiZmE1NTJiMjJl
MzY2MmMwHhcNMjUwODIzMDcwMTM5WhcNMjUwODI0MDcwMTM5WjAzMTEwLwYDVQQD
EyhiMGI2NmJlM2YzNjRmMWFmOWU0YzhkMjNkYzgyMTU5ZmQ2OTk2OTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmowem/gd0Hc71/H19hC/G6+yqdXP
K6Ks0LRyrxH4QixxYlY3Pap3EuoMoguAYMuaRUIzoIyD7+m9j/hlHQ7HeB5aWKEc
XNe7toyp1wbV2dvIzK9jG8PmJw1RQYlmYcHi/MbdFQ+kjLr1G+iLJx7yKwrlEt3Z
b1i4dneTU0tdHyfbRQinpfbAt/5ksZmzxLtq9Ee3umqx7O4lBywMzEnBrzJ3W3c+
52zbjWswatcOvMBFlpHA75K/ME0npfVUQoj5m5MOWuEEDiCsYBugE8xQ/Q3u2aGY
1w7Nd603Wr2KycAv9y79Vfi5qaxGhsHdlzNklFuoR5eaug+fITDdJTZbdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC2a+PzZPGvnkyNI9yCFZ/WmWmCMB8GA1UdIwQY
MBaAFHB451Y1oJ3MA/YlqAv6VSsi42YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAt
NTM4YjQ3NzA5OTU2LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAtNTM4YjQ3NzA5OTU2
LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMB8I6/b6
KA9liFTCP/05p1fYpleeOnPP8rhozIu9wTbWD5VyjXHjkDkb8PtFGe4qyl2ph078
y18fVdRdux47wKlild4KeJ42/y5BjMSdS0RKy4PwgCIwQU0S5PID4UDmGTItHtq0
ZSr+jTwZMNIfAuglfenCWrKS3V5v0SExKtMkro4fWMIJ3qmhzF09Hjz/cWJelNv8
+MiPOTS/m/M3sjxxZ7CF+uAlgCRR7su4Vxyog8rhHkU9V8Z9sjD5DGGFWFS5WlbU
TKCbrg8QcaW47YHZkrYRaFuieJAlozTnu3s7QBnc52gEPgzKmMQmnUZivzXhh3v4
/tV6L3hcbe8xFQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:18 2025 by rpki-client