Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: FhW2Re+D3iXcOX18b6SxQEQNe8HbA7GvAC8kIwh9GQU=
Subject key identifier: 2C:57:62:2C:99:75:D0:01:72:0C:64:3B:FA:5D:B8:3B:7F:A5:8C:86
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 019845F682491DA90115E3C079D006611153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 01A2
Signing time: Sat 26 Jul 2025 09:00:39 +0000
Manifest this update: Sat 26 Jul 2025 09:00:39 +0000
Manifest next update: Sun 27 Jul 2025 09:00:39 +0000
Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: rLNZEJfII/b4kATifPuxDWJQVhOhFjyckh1DNsv6Olw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:82:49:1d:a9:01:15:e3:c0:79:d0:06:61:11:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Jul 26 09:00:39 2025 GMT
Not After : Jul 27 09:00:39 2025 GMT
Subject: CN=2c57622c9975d001720c643bfa5db83b7fa58c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:7f:84:d0:d2:cc:6d:a4:47:21:eb:84:dd:
57:20:84:da:a0:5d:62:1c:f3:64:5d:f4:5f:fa:4f:
8a:7f:e5:dc:1a:e1:e3:66:6b:9a:f3:3c:63:7b:ab:
c6:e8:16:48:43:c2:9c:0a:dd:93:bb:b2:38:06:66:
ff:7e:7c:24:f1:00:21:57:eb:9e:a7:15:0d:72:9f:
13:19:cd:2c:52:54:82:90:30:83:af:3e:de:76:05:
f9:3b:01:91:58:f1:ce:f2:b3:31:ae:89:86:c3:12:
35:9a:0c:e1:2a:98:2b:c0:8b:00:0a:1f:62:6d:47:
5b:52:80:9b:cf:44:39:20:1d:51:b9:4c:2e:12:8c:
c7:73:2b:22:db:8b:78:3e:a8:e1:54:1d:2f:f7:4d:
1c:00:f7:bd:6c:54:87:bb:6a:6b:f2:29:16:2b:7a:
a7:1b:be:cb:94:e0:3f:79:04:d8:f2:dd:08:54:17:
26:1b:fd:b9:27:39:8a:2d:e7:12:a5:b4:8a:66:73:
06:74:7a:51:10:66:bb:38:00:ae:83:0f:12:85:b1:
92:8c:c6:99:6e:7b:d2:7b:78:49:31:8d:34:cf:d8:
c0:11:a6:f0:8b:c9:c4:06:e9:22:e8:f9:5b:3b:7c:
bd:8f:9f:67:8a:28:27:31:d4:81:f1:5d:44:1b:f9:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:57:62:2C:99:75:D0:01:72:0C:64:3B:FA:5D:B8:3B:7F:A5:8C:86
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0e:69:69:f3:49:a5:42:9c:32:07:1e:d7:64:5a:a2:44:36:
e0:4a:5b:a2:8e:30:6b:ff:7d:c5:80:f1:2f:65:8a:0c:07:c1:
13:5e:a1:12:25:f4:bb:45:87:aa:6d:af:88:5b:99:e1:35:96:
e1:ad:eb:27:73:45:57:48:d6:e7:9f:61:dc:52:30:01:fa:08:
9e:e7:1e:33:58:1d:ac:78:be:02:ff:2e:c0:4e:57:20:bb:e2:
bf:f4:ef:e7:76:3d:f2:03:f7:27:c7:3b:85:52:1f:8a:6c:6d:
95:0e:95:17:0b:c2:ce:fe:7d:ab:3c:99:9b:b4:c8:dd:e1:28:
7b:93:2a:f1:1a:1a:3a:df:38:d3:33:0c:47:2d:38:bd:f9:af:
77:7c:fa:a4:02:ad:d9:52:27:42:5d:70:8f:5f:5e:9a:33:d2:
5f:28:85:98:72:5a:ac:ff:71:58:33:3e:c5:db:bb:d8:d6:f9:
1e:5a:2c:b2:01:da:28:21:7f:30:dc:87:db:7b:56:94:ba:3d:
e2:ad:33:79:f1:03:48:84:3e:06:26:35:0d:71:e2:15:79:2e:
b1:c2:71:b7:39:22:31:5e:2c:1e:e9:45:30:07:98:b8:5c:88:
41:9e:a6:b9:44:64:74:b6:61:85:22:3b:78:73:ce:58:9e:11:
6a:1c:07:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9oJJHakBFePAedAGYRFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMzZlMDRlNTNiOWQzOTY3Y2Y5ZDQxOGU3OGI2MGJiYWQw
NzU4MzEwHhcNMjUwNzI2MDkwMDM5WhcNMjUwNzI3MDkwMDM5WjAzMTEwLwYDVQQD
EygyYzU3NjIyYzk5NzVkMDAxNzIwYzY0M2JmYTVkYjgzYjdmYTU4Yzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs75/hNDSzG2kRyHrhN1XIITaoF1i
HPNkXfRf+k+Kf+XcGuHjZmua8zxje6vG6BZIQ8KcCt2Tu7I4Bmb/fnwk8QAhV+ue
pxUNcp8TGc0sUlSCkDCDrz7edgX5OwGRWPHO8rMxromGwxI1mgzhKpgrwIsACh9i
bUdbUoCbz0Q5IB1RuUwuEozHcysi24t4PqjhVB0v900cAPe9bFSHu2pr8ikWK3qn
G77LlOA/eQTY8t0IVBcmG/25JzmKLecSpbSKZnMGdHpREGa7OACugw8ShbGSjMaZ
bnvSe3hJMY00z9jAEabwi8nEBuki6PlbO3y9j59niignMdSB8V1EG/lu4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxXYiyZddABcgxkO/pduDt/pYyGMB8GA1UdIwQY
MBaAFHA24E5TudOWfPnUGOeLYLutB1gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEt
ODlkZWYwMDgyZTJhLzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEtODlkZWYwMDgyZTJh
LzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvw5pafNJ
pUKcMgce12RaokQ24Epboo4wa/99xYDxL2WKDAfBE16hEiX0u0WHqm2viFuZ4TWW
4a3rJ3NFV0jW559h3FIwAfoInuceM1gdrHi+Av8uwE5XILviv/Tv53Y98gP3J8c7
hVIfimxtlQ6VFwvCzv59qzyZm7TI3eEoe5Mq8RoaOt840zMMRy04vfmvd3z6pAKt
2VInQl1wj19emjPSXyiFmHJarP9xWDM+xdu72Nb5HlossgHaKCF/MNyH23tWlLo9
4q0zefEDSIQ+BiY1DXHiFXkuscJxtzkiMV4sHulFMAeYuFyIQZ6muURkdLZhhSI7
eHPOWJ4RahwHdw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:47:12 2025 by rpki-client