Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: HUo+EWMspgUktgfjBQw4YNTHac9V7ODBUWSG2oyGboc=
Subject key identifier: 12:47:99:9F:C5:F2:34:9C:31:B2:5E:03:3B:C6:E7:D7:18:80:98:FB
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 01984C9CEB123775FF3949EFD27C0F6244FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 1309
Signing time: Sun 27 Jul 2025 16:00:08 +0000
Manifest this update: Sun 27 Jul 2025 16:00:08 +0000
Manifest next update: Mon 28 Jul 2025 16:00:08 +0000
Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=)
2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=)
3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=)
4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=)
5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=)
6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: sw2+9+O/ybhY53blKpPmD6fqSGXPT+ngsD4A5cWiK78=)
7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=)
8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=)
9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9c:eb:12:37:75:ff:39:49:ef:d2:7c:0f:62:44:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jul 27 16:00:08 2025 GMT
Not After : Jul 28 16:00:08 2025 GMT
Subject: CN=1247999fc5f2349c31b25e033bc6e7d7188098fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:76:fc:c1:aa:9e:48:99:00:17:00:46:4c:
17:6c:1a:eb:8d:10:35:5d:5c:55:0d:cb:4e:35:97:
d4:c9:43:c1:b1:aa:cd:ce:11:67:6a:2d:7b:75:e7:
a7:97:8e:9b:b9:3d:9b:f9:6b:76:19:e6:b8:19:06:
29:89:9b:87:68:e7:fa:a5:76:79:de:ff:3a:54:4a:
7b:01:1e:a9:fc:52:99:c4:87:4d:23:50:19:4c:8d:
e7:a2:c5:30:23:05:a4:63:5f:e4:08:57:53:5d:30:
a1:11:8a:f6:a2:5c:ad:86:66:9c:0a:e5:47:ca:80:
3d:ba:f4:5c:f3:ea:7a:a3:28:eb:12:d1:30:b9:77:
c1:e0:39:23:99:ea:b7:2d:cf:eb:58:96:b4:e1:ac:
fc:52:8f:05:91:56:27:bd:ac:15:c7:78:cd:69:22:
e3:c1:cd:da:3c:96:35:07:97:22:3c:a9:d7:55:2a:
fa:77:b0:fb:93:72:c6:3d:b0:ff:6c:ce:6a:69:b1:
d5:bc:10:89:15:cb:c9:da:7b:1b:cd:e3:ef:98:3a:
fc:70:49:01:49:f2:80:32:63:f4:40:e3:02:d6:37:
91:80:ad:16:00:3a:6a:67:ba:92:3a:3c:40:09:30:
b5:f5:8d:05:05:19:32:2e:cd:79:36:53:3b:01:4c:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:47:99:9F:C5:F2:34:9C:31:B2:5E:03:3B:C6:E7:D7:18:80:98:FB
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:77:4b:6e:9d:e4:3a:7b:67:84:58:cc:48:bf:c0:9e:15:3e:
a1:d4:8e:c4:2f:9f:4d:23:a3:c2:ec:fd:e4:69:a0:e3:87:21:
bb:e0:7d:f2:dd:2d:4a:ac:43:93:bf:92:0c:1b:84:86:bd:b7:
7f:45:2f:2c:8b:cf:9a:ce:1a:40:74:ef:72:cf:1f:9b:f7:97:
6e:d1:f1:60:a1:df:67:bf:ca:75:9e:8a:d6:7a:61:26:5a:2c:
3b:c6:3f:9d:19:07:4e:53:da:4f:94:36:40:58:eb:9d:8c:6d:
82:3a:0f:57:8b:92:04:b9:da:bc:ad:a9:a0:34:6d:6f:b8:07:
81:a8:0f:c2:81:65:e1:41:c7:df:ca:6c:1f:a7:dc:fa:7b:04:
49:a9:a0:05:88:84:7f:51:af:ec:09:bd:bd:45:dd:09:96:54:
e6:8f:c9:b4:62:2a:41:af:33:6d:1b:fb:b8:d1:d5:cd:31:4a:
f9:7f:f1:03:c2:89:ba:27:2d:58:d0:0f:c6:52:c2:38:68:50:
77:dc:c0:d8:91:65:24:5d:60:3b:11:d9:03:da:39:b8:d1:74:
97:62:3e:ff:e7:d2:92:a4:86:5c:cd:1a:99:61:06:59:99:17:
55:30:85:4e:2c:f1:0f:65:21:2a:8a:7e:27:ef:13:9f:c7:61:
e0:e4:64:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhMnOsSN3X/OUnv0nwPYkT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1
ZDBmNTUwHhcNMjUwNzI3MTYwMDA4WhcNMjUwNzI4MTYwMDA4WjAzMTEwLwYDVQQD
EygxMjQ3OTk5ZmM1ZjIzNDljMzFiMjVlMDMzYmM2ZTdkNzE4ODA5OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU12/MGqnkiZABcARkwXbBrrjRA1
XVxVDctONZfUyUPBsarNzhFnai17deenl46buT2b+Wt2Gea4GQYpiZuHaOf6pXZ5
3v86VEp7AR6p/FKZxIdNI1AZTI3nosUwIwWkY1/kCFdTXTChEYr2olythmacCuVH
yoA9uvRc8+p6oyjrEtEwuXfB4Dkjmeq3Lc/rWJa04az8Uo8FkVYnvawVx3jNaSLj
wc3aPJY1B5ciPKnXVSr6d7D7k3LGPbD/bM5qabHVvBCJFcvJ2nsbzePvmDr8cEkB
SfKAMmP0QOMC1jeRgK0WADpqZ7qSOjxACTC19Y0FBRkyLs15NlM7AUwymQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJHmZ/F8jScMbJeAzvG59cYgJj7MB8GA1UdIwQY
MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt
YWI3OWEzNzg5ZjhmLzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm
LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJndLbp3k
OntnhFjMSL/AnhU+odSOxC+fTSOjwuz95Gmg44chu+B98t0tSqxDk7+SDBuEhr23
f0UvLIvPms4aQHTvcs8fm/eXbtHxYKHfZ7/KdZ6K1nphJlosO8Y/nRkHTlPaT5Q2
QFjrnYxtgjoPV4uSBLnavK2poDRtb7gHgagPwoFl4UHH38psH6fc+nsESamgBYiE
f1Gv7Am9vUXdCZZU5o/JtGIqQa8zbRv7uNHVzTFK+X/xA8KJuictWNAPxlLCOGhQ
d9zA2JFlJF1gOxHZA9o5uNF0l2I+/+fSkqSGXM0amWEGWZkXVTCFTizxD2UhKop+
J+8Tn8dh4ORkpQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 23:34:57 2025 by rpki-client