Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: y/QRIrpAcG7CUfsN7gWtZWyB8nV20x64SOSnFlfjOuQ=
Subject key identifier: 90:51:A0:82:6F:86:4B:90:B8:0A:43:B8:9F:75:EC:4F:56:BB:D0:6F
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 01984D41DAC6D1FD4399E2E6B1156DD25A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0C6A
Signing time: Sun 27 Jul 2025 19:00:17 +0000
Manifest this update: Sun 27 Jul 2025 19:00:17 +0000
Manifest next update: Mon 28 Jul 2025 19:00:17 +0000
Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: d9Nsavd5PZ55aTgfSYXW20U3HQJmvqf5muYRdhfMNhw=)
3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:41:da:c6:d1:fd:43:99:e2:e6:b1:15:6d:d2:5a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Jul 27 19:00:17 2025 GMT
Not After : Jul 28 19:00:17 2025 GMT
Subject: CN=9051a0826f864b90b80a43b89f75ec4f56bbd06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:cc:59:aa:d0:59:c6:8a:35:da:28:a7:a5:
32:f0:bf:80:b2:cc:d0:a3:45:6d:5f:05:89:06:a5:
0b:61:23:ef:05:81:63:87:85:2f:04:d2:48:e0:23:
43:85:50:40:de:fb:32:2f:b9:9b:04:46:f7:8a:a8:
b3:eb:78:ca:12:cd:d1:43:f2:11:bd:66:a7:d6:4a:
14:9b:97:e1:b6:df:3c:66:bf:46:fa:8c:26:8e:38:
78:ae:67:5a:6d:85:48:f6:33:cd:32:e3:d2:bf:9b:
60:53:6a:14:0d:50:9a:bb:c2:b2:e1:3b:b5:21:69:
9a:d2:a2:72:09:b4:8c:a2:06:cd:73:6d:e7:01:c5:
3a:f2:1a:22:ee:19:bd:4a:0e:8a:cf:4c:30:25:eb:
4a:fe:d8:8c:51:3f:a7:fe:c4:35:6d:32:d7:43:17:
f7:4b:8b:c3:7f:42:a7:a1:ac:f4:57:d0:b6:79:9e:
ab:d8:67:0d:4c:5f:df:28:94:74:dd:e5:78:18:1a:
38:8a:f9:3d:49:0b:bf:af:2a:80:d7:0c:cc:0e:84:
da:0c:38:f3:49:1c:3c:37:22:5a:9a:e7:6d:35:bd:
43:74:f5:70:84:57:3d:ec:a5:f6:8a:a9:32:50:6b:
ff:dd:f2:d4:3d:1b:11:59:f8:bd:b1:c3:86:cb:aa:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:51:A0:82:6F:86:4B:90:B8:0A:43:B8:9F:75:EC:4F:56:BB:D0:6F
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:21:3b:a9:7d:18:28:9d:d3:25:c4:46:f1:57:b0:84:d1:cb:
74:f1:c0:09:0c:64:11:fb:08:1f:2d:1c:4e:b5:6a:13:fd:aa:
08:75:f0:ba:72:bb:ec:74:9c:11:0f:46:c9:ef:02:70:81:4e:
8d:19:31:ef:85:c9:a7:af:24:12:1b:e2:1c:6a:1e:5c:27:0a:
81:ab:c8:2e:7d:15:ee:dd:3d:f7:4c:af:ea:9d:a5:35:92:17:
b3:5d:6a:97:6b:63:f9:96:94:61:86:76:7f:a3:2e:e8:d1:eb:
d1:c1:48:56:34:8d:69:3f:8a:96:1e:ec:32:05:8b:11:89:2e:
cc:f0:7b:c4:fb:ea:d4:28:f1:c8:1b:2c:9d:a1:6d:c0:e9:6c:
c7:34:ea:27:36:80:24:ee:ca:70:d3:73:70:75:cd:39:0f:44:
97:48:1c:ca:fe:73:47:f7:b0:a7:5f:93:bc:37:90:b4:02:3a:
1f:a2:ee:65:b4:79:bf:df:64:9f:b1:76:a6:f9:b5:6c:3d:be:
0c:0c:cc:66:82:5d:05:ff:9c:f9:64:d0:38:6f:a8:0b:13:05:
4a:f2:66:72:2b:93:b7:70:24:33:65:0b:ae:5b:6e:77:d0:44:
a5:aa:aa:77:75:d9:80:4f:26:da:a1:6e:87:ff:f9:80:df:bf:
b0:fa:44:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhNQdrG0f1DmeLmsRVt0lpIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMzliYzVjZWYzYWVhZGYzMjYxM2Y3ZDk1OWVjOGU0MGE3
NDI5MTgwHhcNMjUwNzI3MTkwMDE3WhcNMjUwNzI4MTkwMDE3WjAzMTEwLwYDVQQD
Eyg5MDUxYTA4MjZmODY0YjkwYjgwYTQzYjg5Zjc1ZWM0ZjU2YmJkMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVfMWarQWcaKNdoop6Uy8L+AsszQ
o0VtXwWJBqULYSPvBYFjh4UvBNJI4CNDhVBA3vsyL7mbBEb3iqiz63jKEs3RQ/IR
vWan1koUm5fhtt88Zr9G+owmjjh4rmdabYVI9jPNMuPSv5tgU2oUDVCau8Ky4Tu1
IWma0qJyCbSMogbNc23nAcU68hoi7hm9Sg6Kz0wwJetK/tiMUT+n/sQ1bTLXQxf3
S4vDf0Knoaz0V9C2eZ6r2GcNTF/fKJR03eV4GBo4ivk9SQu/ryqA1wzMDoTaDDjz
SRw8NyJamudtNb1DdPVwhFc97KX2iqkyUGv/3fLUPRsRWfi9scOGy6ocnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBRoIJvhkuQuApDuJ917E9Wu9BvMB8GA1UdIwQY
MBaAFHE5vFzvOurfMmE/fZWeyOQKdCkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYt
Nzk0YjI4ZWIxNmM1LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYtNzk0YjI4ZWIxNmM1
LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCE7qX0Y
KJ3TJcRG8VewhNHLdPHACQxkEfsIHy0cTrVqE/2qCHXwunK77HScEQ9Gye8CcIFO
jRkx74XJp68kEhviHGoeXCcKgavILn0V7t0990yv6p2lNZIXs11ql2tj+ZaUYYZ2
f6Mu6NHr0cFIVjSNaT+Klh7sMgWLEYkuzPB7xPvq1CjxyBssnaFtwOlsxzTqJzaA
JO7KcNNzcHXNOQ9El0gcyv5zR/ewp1+TvDeQtAI6H6LuZbR5v99kn7F2pvm1bD2+
DAzMZoJdBf+c+WTQOG+oCxMFSvJmciuTt3AkM2ULrltud9BEpaqqd3XZgE8m2qFu
h//5gN+/sPpEUA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 01:17:51 2025 by rpki-client