Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier: fVRpbV4benMIK09uE7G0SF9ZXxceYdtz3yIHUn4cmg0=
Subject key identifier: B8:B2:2E:A7:CC:D8:E5:9F:51:DB:A2:38:FD:B2:F2:8C:CB:39:50:17
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial: 0199239F09787FD4BF51BABDE1D87EA03719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 10:00:49 +0000
Manifest this update: Sun 07 Sep 2025 10:00:49 +0000
Manifest next update: Mon 08 Sep 2025 10:00:49 +0000
Files and hashes: 1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: AlvCP7Ebr3Bjzqgy0XjoVougClyqPNGDUt9NSjZzMlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:09:78:7f:d4:bf:51:ba:bd:e1:d8:7e:a0:37:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Validity
Not Before: Sep 7 10:00:49 2025 GMT
Not After : Sep 8 10:00:49 2025 GMT
Subject: CN=b8b22ea7ccd8e59f51dba238fdb2f28ccb395017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:78:53:34:a4:a8:06:75:b4:f0:9b:a9:8a:
49:45:3e:c4:36:6e:ae:d0:a9:c2:88:4b:1d:2f:2a:
2b:2c:c7:19:57:ab:c2:80:09:e5:69:45:75:9e:57:
d5:4a:a6:f8:a9:8b:12:ad:92:d0:b5:63:74:b3:5a:
83:20:b0:44:49:de:1a:57:bd:50:13:d2:7a:ce:57:
9b:28:15:ed:1b:20:da:0a:1c:73:b5:bb:1d:99:8c:
e5:82:e7:93:7a:89:86:ce:a2:64:2b:bb:58:28:ee:
03:17:18:ed:a4:e6:d1:dc:72:84:db:4e:f5:b3:e0:
cd:7e:e4:2b:1b:ee:9c:b2:cf:66:70:5a:64:dc:e1:
71:90:61:7f:75:b5:74:84:90:ca:fb:10:6e:04:b2:
b7:5a:bd:b6:cf:c8:22:26:23:50:d9:e2:27:4a:fd:
32:70:54:70:a6:e6:43:35:be:db:ce:77:22:3c:3a:
f4:06:3b:fb:c9:bc:84:30:02:06:78:e0:d2:cc:2c:
22:63:ee:69:0e:dc:83:25:47:db:43:89:be:cb:c5:
7d:4d:0d:d9:d5:57:95:4a:b0:80:23:34:7b:e6:63:
2d:a1:c6:c0:df:b3:96:5f:5e:a3:52:7e:0c:aa:7f:
f7:01:66:35:29:6f:e3:4f:85:c2:2e:e7:28:a9:c5:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B2:2E:A7:CC:D8:E5:9F:51:DB:A2:38:FD:B2:F2:8C:CB:39:50:17
X509v3 Authority Key Identifier:
keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:eb:69:48:c5:fe:9b:94:dc:ed:44:de:0d:c2:6e:0a:ba:92:
3b:2d:ef:fb:de:80:9f:f2:8b:b3:83:e7:09:19:63:f0:e1:15:
61:ba:13:84:29:d3:5e:ba:64:78:e1:37:80:6e:a2:6b:70:35:
3d:26:f4:5a:13:db:b2:e2:1f:a1:8a:91:1a:bf:b4:66:3b:b6:
45:72:ed:69:13:b4:97:da:93:7b:e2:e0:b3:27:a7:1e:b5:32:
28:ee:65:bf:f8:6b:8d:e0:77:41:5d:a9:89:28:04:0b:12:cf:
36:e6:9f:4d:77:52:9a:3e:43:2d:74:c0:20:2a:6c:69:a7:db:
e0:71:41:06:2e:d1:86:f6:8d:b7:43:0f:1d:69:13:3b:a7:fd:
6c:46:bc:c2:50:08:69:5b:24:44:6f:be:4a:10:5d:ce:1a:f4:
51:a0:67:eb:0e:58:d9:04:e5:b5:b4:af:6f:23:2d:0b:9e:c6:
5b:5c:66:19:a8:e1:16:d9:4b:a7:6e:d7:af:38:88:cd:f7:4d:
64:d8:51:68:5c:73:9a:83:6c:e0:a8:9d:5a:99:34:a7:32:bc:
4c:47:d7:8b:45:19:32:38:af:ac:71:50:81:7d:f9:a1:0f:ad:
57:00:1e:08:9d:b1:34:4a:a0:63:a1:3d:26:17:fd:1f:13:df:
d5:50:39:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnwl4f9S/Ubq94dh+oDcZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMWM1YzNmMjhhNWMwNzEwZGJlNDgyOWQyMTZjODllOTQy
ZWYwZWIwHhcNMjUwOTA3MTAwMDQ5WhcNMjUwOTA4MTAwMDQ5WjAzMTEwLwYDVQQD
EyhiOGIyMmVhN2NjZDhlNTlmNTFkYmEyMzhmZGIyZjI4Y2NiMzk1MDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkl4UzSkqAZ1tPCbqYpJRT7ENm6u
0KnCiEsdLyorLMcZV6vCgAnlaUV1nlfVSqb4qYsSrZLQtWN0s1qDILBESd4aV71Q
E9J6zlebKBXtGyDaChxztbsdmYzlgueTeomGzqJkK7tYKO4DFxjtpObR3HKE2071
s+DNfuQrG+6css9mcFpk3OFxkGF/dbV0hJDK+xBuBLK3Wr22z8giJiNQ2eInSv0y
cFRwpuZDNb7bznciPDr0Bjv7ybyEMAIGeODSzCwiY+5pDtyDJUfbQ4m+y8V9TQ3Z
1VeVSrCAIzR75mMtocbA37OWX16jUn4Mqn/3AWY1KW/jT4XCLucoqcWMHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiyLqfM2OWfUduiOP2y8ozLOVAXMB8GA1UdIwQY
MBaAFHAcXD8opcBxDb5IKdIWyJ6ULvDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0J4Y1B5aWx3SEVOdmtncDBoYklucFF1OE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mYWM5MjEtZjU1Mi00YThhLThiNDkt
NGZhOTg2MDFhZThjLzEvY0J4Y1B5aWx3SEVOdmtncDBoYklucFF1OE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mYWM5MjEtZjU1Mi00YThhLThiNDktNGZhOTg2MDFhZThj
LzEvY0J4Y1B5aWx3SEVOdmtncDBoYklucFF1OE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVutpSMX+
m5Tc7UTeDcJuCrqSOy3v+96An/KLs4PnCRlj8OEVYboThCnTXrpkeOE3gG6ia3A1
PSb0WhPbsuIfoYqRGr+0Zju2RXLtaRO0l9qTe+LgsyenHrUyKO5lv/hrjeB3QV2p
iSgECxLPNuafTXdSmj5DLXTAICpsaafb4HFBBi7RhvaNt0MPHWkTO6f9bEa8wlAI
aVskRG++ShBdzhr0UaBn6w5Y2QTltbSvbyMtC57GW1xmGajhFtlLp27XrziIzfdN
ZNhRaFxzmoNs4KidWpk0pzK8TEfXi0UZMjivrHFQgX35oQ+tVwAeCJ2xNEqgY6E9
Jhf9HxPf1VA5Bw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:46 2025 by rpki-client