Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: 01FtibqZj6M8zX7xd0YshAb50jjji1HXEv4Mg2W2uMQ=
Subject key identifier: DD:8D:78:80:FD:08:9B:92:E1:AC:FD:99:C6:97:13:5B:85:D7:09:3B
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 01984106F0B1CBAEC7729420034881FCFFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 15FD
Signing time: Fri 25 Jul 2025 10:00:30 +0000
Manifest this update: Fri 25 Jul 2025 10:00:30 +0000
Manifest next update: Sat 26 Jul 2025 10:00:30 +0000
Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: VR26AjR+LvGV30YDokF83SjSiJ8VQgQmlv/VInpsMaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:06:f0:b1:cb:ae:c7:72:94:20:03:48:81:fc:ff:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Jul 25 10:00:30 2025 GMT
Not After : Jul 26 10:00:30 2025 GMT
Subject: CN=dd8d7880fd089b92e1acfd99c697135b85d7093b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:b0:95:a7:43:a5:0a:90:63:fa:dc:77:7a:
53:9f:a3:36:95:86:e3:dd:91:bd:09:ff:6f:7d:4e:
34:fe:36:95:c3:ed:b7:ee:3d:cb:3f:78:59:e4:0f:
36:cc:f6:4f:6f:4b:46:ff:78:47:b1:f9:f7:9c:59:
86:8f:1c:8e:b9:bc:0f:df:e6:2e:f7:4d:b0:b3:10:
99:38:4e:4e:9c:af:c6:a3:5e:7f:cc:e2:46:57:72:
e9:8a:b6:de:3b:ff:90:0b:c7:96:e6:26:a0:16:fe:
d4:16:07:4e:59:e9:b3:25:12:24:7f:c0:26:37:6a:
aa:5b:a9:e2:28:ef:1f:d8:36:7b:7a:9b:f6:6b:5c:
d1:6e:b7:20:cf:2d:d7:80:21:68:ff:a1:f5:de:b8:
a7:4d:4e:00:6b:2c:ce:d6:22:52:de:db:d2:cb:82:
0d:aa:25:d8:f9:59:ba:88:ba:2a:63:90:e2:ff:84:
8a:c9:b0:87:65:66:9c:62:d5:5e:ca:5b:64:d0:e3:
c0:de:0c:cb:db:2c:24:6b:33:e3:5c:1c:59:3d:e7:
c2:10:4f:22:a4:36:07:31:68:ed:b5:6d:b1:24:59:
ae:82:92:7a:5d:f9:81:6a:ed:be:70:a2:2d:d4:13:
9c:72:37:c6:53:c4:59:47:2b:b1:d9:84:d9:a8:f1:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:78:80:FD:08:9B:92:E1:AC:FD:99:C6:97:13:5B:85:D7:09:3B
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:91:9b:ff:5f:11:df:a0:b3:2d:0d:4e:da:48:6d:53:b8:d8:
b6:2e:56:ca:0e:5f:bf:be:b7:9c:ff:dd:38:16:fa:40:7f:8a:
9d:c9:40:1e:c0:b1:49:bf:8c:d5:09:3e:c1:3d:0c:7f:04:b4:
97:e9:85:f9:53:09:5a:b8:1c:fd:4d:68:99:bf:1a:f1:0b:ab:
c4:a7:eb:51:73:a9:c2:dd:1a:11:91:b5:5d:a7:f5:dd:e3:62:
49:29:66:7a:28:e7:36:28:a6:2d:c8:27:57:14:ad:f0:59:1e:
5e:54:d5:d6:7f:21:f3:43:88:d0:e6:f1:b9:30:04:24:65:f7:
35:37:66:8b:fc:81:9e:a3:08:45:de:e7:63:aa:4a:2e:ff:c2:
ca:dc:49:dd:19:5b:bc:95:22:6f:6c:21:a2:04:7c:86:8f:a8:
e5:63:c7:df:4f:ae:2e:67:6f:ee:21:5a:a2:1c:78:a1:bf:df:
27:68:21:2a:bf:55:78:6a:15:74:7a:b1:ba:4d:32:1d:22:de:
a6:0b:5f:79:1a:7d:69:83:36:19:65:9c:7c:74:5d:7d:2c:ae:
1e:10:8f:76:f1:f4:05:ac:ff:5f:dd:96:6c:7f:08:c9:82:f2:
b1:55:31:f4:1e:89:1b:05:8e:ec:00:80:64:e2:7a:da:aa:80:
8f:9e:36:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhBBvCxy67HcpQgA0iB/P/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYWQzNTNjYzFhMGQxNmQ1ZThlMTRhMzc1NzVhNmYzZDYw
NTYzZjgwHhcNMjUwNzI1MTAwMDMwWhcNMjUwNzI2MTAwMDMwWjAzMTEwLwYDVQQD
EyhkZDhkNzg4MGZkMDg5YjkyZTFhY2ZkOTljNjk3MTM1Yjg1ZDcwOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0CwladDpQqQY/rcd3pTn6M2lYbj
3ZG9Cf9vfU40/jaVw+237j3LP3hZ5A82zPZPb0tG/3hHsfn3nFmGjxyOubwP3+Yu
902wsxCZOE5OnK/Go15/zOJGV3LpirbeO/+QC8eW5iagFv7UFgdOWemzJRIkf8Am
N2qqW6niKO8f2DZ7epv2a1zRbrcgzy3XgCFo/6H13rinTU4AayzO1iJS3tvSy4IN
qiXY+Vm6iLoqY5Di/4SKybCHZWacYtVeyltk0OPA3gzL2ywkazPjXBxZPefCEE8i
pDYHMWjttW2xJFmugpJ6XfmBau2+cKIt1BOccjfGU8RZRyux2YTZqPFybwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2NeID9CJuS4az9mcaXE1uF1wk7MB8GA1UdIwQY
MBaAFHCtNTzBoNFtXo4Uo3V1pvPWBWP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1Zjkt
MTUwNGVhNTNlMjU1LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1ZjktMTUwNGVhNTNlMjU1
LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZGb/18R
36CzLQ1O2khtU7jYti5Wyg5fv763nP/dOBb6QH+KnclAHsCxSb+M1Qk+wT0MfwS0
l+mF+VMJWrgc/U1omb8a8QurxKfrUXOpwt0aEZG1Xaf13eNiSSlmeijnNiimLcgn
VxSt8FkeXlTV1n8h80OI0ObxuTAEJGX3NTdmi/yBnqMIRd7nY6pKLv/CytxJ3Rlb
vJUib2whogR8ho+o5WPH30+uLmdv7iFaohx4ob/fJ2ghKr9VeGoVdHqxuk0yHSLe
pgtfeRp9aYM2GWWcfHRdfSyuHhCPdvH0Baz/X92WbH8IyYLysVUx9B6JGwWO7ACA
ZOJ62qqAj542LA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 13:14:50 2025 by rpki-client