Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: cvZvymCZIQRArd7vqS8JFiKzm/dlT3FhR/E1XIxSZ3Y=
Subject key identifier: 22:6C:C5:67:F2:33:0A:48:A8:1B:D5:37:D9:68:B6:1D:82:A1:A5:45
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 019851FB20E73C47386DF13A7A291BE3967D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 095E
Signing time: Mon 28 Jul 2025 17:01:08 +0000
Manifest this update: Mon 28 Jul 2025 17:01:08 +0000
Manifest next update: Tue 29 Jul 2025 17:01:08 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: JWh8Poo5PAuULhHpTWcZk6h08EId5tzYO63//8Ic1Ag=)
2: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (hash: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=)
3: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (hash: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fb:20:e7:3c:47:38:6d:f1:3a:7a:29:1b:e3:96:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Jul 28 17:01:08 2025 GMT
Not After : Jul 29 17:01:08 2025 GMT
Subject: CN=226cc567f2330a48a81bd537d968b61d82a1a545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:68:6b:46:2f:56:59:8e:fd:0a:53:8c:30:
ec:a1:6e:01:87:b3:30:5a:b7:2a:32:62:13:02:94:
7b:8e:e1:fa:74:e4:93:46:d2:64:51:de:f7:2b:e7:
dd:13:e9:2b:b9:20:99:b7:8d:bc:35:8a:b6:ed:b2:
58:61:52:66:90:40:6d:e7:0f:d1:e7:ad:39:d5:62:
78:39:c5:ad:5d:b3:2f:82:2d:16:bd:41:54:de:d8:
ba:df:e1:5e:1f:4b:09:09:44:ef:3e:8a:5f:6c:26:
2f:eb:0e:f6:2c:30:40:ad:a6:a5:e6:ed:73:e2:74:
f0:56:76:62:fd:31:39:b5:48:f5:d7:cd:ca:6f:79:
4e:d8:33:d2:7e:35:4d:0b:79:8b:e0:bb:e7:7e:c2:
be:ce:71:8e:70:3b:80:c4:f7:19:d3:42:53:5c:77:
cf:6e:07:ed:94:fd:c8:9c:58:b5:4a:6c:7f:6c:cf:
08:f2:a3:23:5c:ac:5e:4d:05:24:83:38:0d:66:b1:
d5:ac:98:87:31:ea:09:f0:76:87:41:4c:12:76:85:
cb:c8:58:22:c1:6d:cc:92:5c:64:58:0e:6f:e1:78:
c7:2f:96:ff:13:21:bb:ef:27:26:80:aa:ce:80:f2:
77:2c:31:99:83:d2:d7:75:2d:f0:4d:1b:c5:99:2b:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6C:C5:67:F2:33:0A:48:A8:1B:D5:37:D9:68:B6:1D:82:A1:A5:45
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ac:92:9f:da:93:49:b3:f6:a5:58:32:f5:76:0d:b9:1b:02:
e3:d5:9a:11:38:98:08:ea:07:b3:fb:c2:ac:df:39:7c:e2:d0:
3e:05:58:c8:c3:23:f9:00:fd:67:7a:e7:37:56:32:0c:be:65:
66:41:98:9d:d3:d0:eb:cc:84:9c:95:33:e8:57:c8:f2:1b:60:
d8:af:4d:e3:ed:a4:eb:c3:69:94:06:c9:6c:e3:b6:09:08:0b:
77:6d:6f:ea:cc:d0:f7:78:26:d5:c2:a5:40:53:16:43:ad:7e:
a7:14:3f:c9:ff:73:b5:4a:04:77:56:0a:53:48:11:b8:ec:a9:
ad:5b:fd:53:4f:5d:ae:e1:1d:ea:31:e2:c1:b2:75:e7:ad:30:
a9:71:3c:a9:ff:91:fa:4b:08:13:24:14:5c:87:90:7a:90:dd:
cc:35:41:4d:5e:22:f0:6a:57:ce:88:f4:09:c3:96:d3:aa:b2:
3a:8f:fc:15:08:cf:37:81:69:0b:18:5e:16:e2:68:1c:b2:9e:
66:30:92:b5:6a:02:0a:d9:e1:fd:d2:f2:d6:94:c0:d5:51:a3:
bb:e7:1d:1d:a7:f8:9f:0c:cb:48:b8:61:81:a6:ea:b6:45:85:
78:e9:25:52:a4:ff:a0:c0:79:a2:a8:df:71:57:1c:59:2c:be:
db:75:1b:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhR+yDnPEc4bfE6eikb45Z9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjBmMTA4MzJjNDliYWQ2ZjE1YTk2MDU4YzViYTE4NTcy
YWM1MmEwHhcNMjUwNzI4MTcwMTA4WhcNMjUwNzI5MTcwMTA4WjAzMTEwLwYDVQQD
EygyMjZjYzU2N2YyMzMwYTQ4YTgxYmQ1MzdkOTY4YjYxZDgyYTFhNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptRoa0YvVlmO/QpTjDDsoW4Bh7Mw
WrcqMmITApR7juH6dOSTRtJkUd73K+fdE+kruSCZt428NYq27bJYYVJmkEBt5w/R
56051WJ4OcWtXbMvgi0WvUFU3ti63+FeH0sJCUTvPopfbCYv6w72LDBAraal5u1z
4nTwVnZi/TE5tUj1183Kb3lO2DPSfjVNC3mL4LvnfsK+znGOcDuAxPcZ00JTXHfP
bgftlP3InFi1Smx/bM8I8qMjXKxeTQUkgzgNZrHVrJiHMeoJ8HaHQUwSdoXLyFgi
wW3MklxkWA5v4XjHL5b/EyG77ycmgKrOgPJ3LDGZg9LXdS3wTRvFmSuOLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJsxWfyMwpIqBvVN9loth2CoaVFMB8GA1UdIwQY
MBaAFNAg8QgyxJutbxWpYFjFuhhXKsUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yYzExYzEtNDI1MC00Mzg3LWE0ZGIt
MjcwMWQ1OTFkZWFlLzEvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8yYzExYzEtNDI1MC00Mzg3LWE0ZGItMjcwMWQ1OTFkZWFl
LzEvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqySn9qT
SbP2pVgy9XYNuRsC49WaETiYCOoHs/vCrN85fOLQPgVYyMMj+QD9Z3rnN1YyDL5l
ZkGYndPQ68yEnJUz6FfI8htg2K9N4+2k68NplAbJbOO2CQgLd21v6szQ93gm1cKl
QFMWQ61+pxQ/yf9ztUoEd1YKU0gRuOyprVv9U09druEd6jHiwbJ1560wqXE8qf+R
+ksIEyQUXIeQepDdzDVBTV4i8GpXzoj0CcOW06qyOo/8FQjPN4FpCxheFuJoHLKe
ZjCStWoCCtnh/dLy1pTA1VGju+cdHaf4nwzLSLhhgabqtkWFeOklUqT/oMB5oqjf
cVccWSy+23Ub6A==
-----END CERTIFICATE-----
Generated at Mon Jul 28 20:03:33 2025 by rpki-client