Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
File: CpfAyBiGg3PEAUcVBTra9hrx2h0.mft (raw, json)
Hash identifier: id8X8YOWSN0SxviL+0GHwl0UBnohBBYrHQD6c+8xfOE=
Subject key identifier: 79:EC:71:D2:62:90:A8:0E:E4:64:79:F0:C9:00:BE:A5:AB:F2:72:F2
Authority key identifier: 0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D
Certificate issuer: /CN=0a97c0c818868373c4014715053adaf61af1da1d
Certificate serial: 01984AE5E12A927B8C516D41C421F4615682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:36 +0000
Manifest this update: Sun 27 Jul 2025 08:00:36 +0000
Manifest next update: Mon 28 Jul 2025 08:00:36 +0000
Files and hashes: 1: CpfAyBiGg3PEAUcVBTra9hrx2h0.crl (hash: OIakX4SA6a78cykYkauCcf4OrM6xXi2X34Z5BWtLeBY=)
2: _qAUmpmDNefd9UH0oGsDdu0Dm10.roa (hash: dhnP4xuQumbVUsoW5XRDL/9RukaAPXCZivf9aCXaQyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:e1:2a:92:7b:8c:51:6d:41:c4:21:f4:61:56:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a97c0c818868373c4014715053adaf61af1da1d
Validity
Not Before: Jul 27 08:00:36 2025 GMT
Not After : Jul 28 08:00:36 2025 GMT
Subject: CN=79ec71d26290a80ee46479f0c900bea5abf272f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:97:42:32:7c:ec:c3:70:4c:b3:91:42:55:
5a:82:d4:25:8f:59:76:b8:de:c0:d4:c0:5a:7a:72:
84:f7:8f:06:0b:39:7a:aa:bf:0b:b6:86:0e:55:0e:
6b:32:58:16:3f:b0:54:2e:bc:22:b4:0a:9a:f8:c5:
68:41:42:97:93:fa:8c:55:6f:62:17:30:3c:3a:7f:
9e:a9:67:8e:3d:9d:54:24:c3:86:37:cd:3b:69:34:
9b:5c:07:0f:4a:cb:04:ad:15:aa:6c:db:82:1d:83:
a9:35:4b:8a:88:a6:94:be:24:30:3b:ce:3a:33:fa:
32:68:5e:0b:ac:7e:71:e9:4e:0f:87:f0:1f:8a:e0:
58:8f:65:28:6a:26:9a:73:99:a3:b7:45:02:8c:82:
e3:3d:2e:13:a7:7d:07:2d:de:a1:bb:6a:c1:1e:94:
4b:d6:7c:16:47:a6:21:6f:00:9a:08:48:47:35:29:
c6:d5:7c:58:05:59:90:22:30:f5:d3:e3:fa:22:4e:
b0:b9:3f:07:ac:af:22:88:e2:6d:ce:89:54:f8:ad:
a7:ab:8b:7b:5c:3c:f9:01:66:27:19:68:bf:06:65:
4b:a3:3e:b9:bc:4f:07:81:4e:ee:57:55:4e:b4:06:
38:bb:fb:8c:7d:ac:81:32:9b:87:e6:32:fb:28:2c:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EC:71:D2:62:90:A8:0E:E4:64:79:F0:C9:00:BE:A5:AB:F2:72:F2
X509v3 Authority Key Identifier:
keyid:0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dd:3f:42:17:dd:8d:cb:79:ff:a4:86:2c:7a:2c:ce:a3:df:
1a:31:f0:46:e4:f7:7f:56:42:02:c3:79:c1:11:da:9a:49:fc:
31:57:3d:8a:9a:dd:24:fc:b8:de:69:50:a0:fb:e2:61:b5:00:
9c:02:a3:5c:55:94:40:5a:45:39:6d:d2:e8:c7:76:15:e5:64:
f4:c8:be:fc:da:f7:2d:f4:71:67:e3:a3:15:21:26:ac:0e:2c:
42:f7:89:ea:80:b3:c5:d3:0d:ed:53:c9:7e:fa:fd:72:97:81:
92:39:4b:4d:55:7a:37:bb:70:85:60:b6:14:48:b3:c7:f1:c3:
22:bd:e8:9b:0d:7e:7f:ef:87:10:50:04:78:9c:7b:c0:0c:0b:
30:73:a1:ec:ec:40:33:d4:bb:24:71:e3:2b:92:39:6e:70:7c:
82:a8:6a:34:c3:0f:c1:e3:da:2b:a0:11:14:74:dd:c7:9b:48:
cc:78:e9:c9:a7:aa:a9:00:65:dd:6d:ae:1b:16:7f:45:aa:84:
58:66:69:81:41:ef:ac:a0:0b:fa:ac:35:0b:df:f9:e6:c4:13:
5f:92:5b:17:51:b5:a7:86:b3:bb:58:ca:aa:97:3e:c4:ce:4a:
32:1b:a5:9b:27:f0:f2:1f:a6:eb:98:6d:e0:6d:2d:76:a5:aa:
e8:4c:d9:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5eEqknuMUW1BxCH0YVaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOTdjMGM4MTg4NjgzNzNjNDAxNDcxNTA1M2FkYWY2MWFm
MWRhMWQwHhcNMjUwNzI3MDgwMDM2WhcNMjUwNzI4MDgwMDM2WjAzMTEwLwYDVQQD
Eyg3OWVjNzFkMjYyOTBhODBlZTQ2NDc5ZjBjOTAwYmVhNWFiZjI3MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkiXQjJ87MNwTLORQlVagtQlj1l2
uN7A1MBaenKE948GCzl6qr8LtoYOVQ5rMlgWP7BULrwitAqa+MVoQUKXk/qMVW9i
FzA8On+eqWeOPZ1UJMOGN807aTSbXAcPSssErRWqbNuCHYOpNUuKiKaUviQwO846
M/oyaF4LrH5x6U4Ph/AfiuBYj2Uoaiaac5mjt0UCjILjPS4Tp30HLd6hu2rBHpRL
1nwWR6YhbwCaCEhHNSnG1XxYBVmQIjD10+P6Ik6wuT8HrK8iiOJtzolU+K2nq4t7
XDz5AWYnGWi/BmVLoz65vE8HgU7uV1VOtAY4u/uMfayBMpuH5jL7KCykPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnscdJikKgO5GR58MkAvqWr8nLyMB8GA1UdIwQY
MBaAFAqXwMgYhoNzxAFHFQU62vYa8dodMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BmQXlCaUdnM1BFQVVjVkJUcmE5aHJ4MmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hOTM5OWItZjg2Ny00ODAyLThjNjct
ZGJmMmIzNzY5NDQ1LzEvQ3BmQXlCaUdnM1BFQVVjVkJUcmE5aHJ4MmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hOTM5OWItZjg2Ny00ODAyLThjNjctZGJmMmIzNzY5NDQ1
LzEvQ3BmQXlCaUdnM1BFQVVjVkJUcmE5aHJ4MmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUd0/Qhfd
jct5/6SGLHoszqPfGjHwRuT3f1ZCAsN5wRHamkn8MVc9iprdJPy43mlQoPviYbUA
nAKjXFWUQFpFOW3S6Md2FeVk9Mi+/Nr3LfRxZ+OjFSEmrA4sQveJ6oCzxdMN7VPJ
fvr9cpeBkjlLTVV6N7twhWC2FEizx/HDIr3omw1+f++HEFAEeJx7wAwLMHOh7OxA
M9S7JHHjK5I5bnB8gqhqNMMPwePaK6ARFHTdx5tIzHjpyaeqqQBl3W2uGxZ/RaqE
WGZpgUHvrKAL+qw1C9/55sQTX5JbF1G1p4azu1jKqpc+xM5KMhulmyfw8h+m65ht
4G0tdqWq6EzZRw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:36 2025 by rpki-client