Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: NounjZBKhnthCMSWfs0Ibiigy21SjykRRHoVvsucWxo=
Subject key identifier: F7:45:F4:DE:F8:D1:F0:F0:79:2B:54:44:99:07:BA:A0:D7:25:65:46
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 0199228D2DC80C5DF6828C1C547978BF9B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:01:41 +0000
Manifest this update: Sun 07 Sep 2025 05:01:41 +0000
Manifest next update: Mon 08 Sep 2025 05:01:41 +0000
Files and hashes: 1: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (hash: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=)
2: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: BZArFe+MyFiRzWyDhJlX475lONvykXNEN/VH1yXS1uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:2d:c8:0c:5d:f6:82:8c:1c:54:79:78:bf:9b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Sep 7 05:01:41 2025 GMT
Not After : Sep 8 05:01:41 2025 GMT
Subject: CN=f745f4def8d1f0f0792b54449907baa0d7256546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:7e:63:e2:5d:82:c0:1c:79:d5:f6:a7:1f:
41:e9:f7:c4:df:84:8d:44:82:52:d0:88:86:b6:e1:
f1:23:f8:b3:2d:e6:9a:50:48:b0:d3:51:01:04:3c:
bd:6c:b5:82:91:10:33:45:e9:07:79:24:52:96:46:
b3:41:60:f6:c8:a7:dc:70:f8:dd:31:7a:6c:40:99:
64:5b:b7:14:31:2e:20:30:c4:98:c4:93:7e:2a:80:
90:5e:15:76:20:3b:0b:83:52:bd:0f:19:91:d5:1a:
81:d1:4e:7b:f6:85:18:3b:ba:94:24:35:c0:cd:b0:
17:55:d8:29:2a:0c:b8:8e:ea:26:c5:fd:a5:c2:98:
b7:08:ba:c6:cd:aa:69:af:c7:4a:8c:6d:fb:67:bb:
52:51:4c:ed:f5:15:12:9e:1b:c8:69:82:22:94:7c:
ab:5c:c7:0c:c2:d1:4b:ac:7d:4a:9b:4a:a5:33:30:
ff:33:64:a7:2f:f1:7d:53:f9:6a:af:f2:4a:4a:49:
5b:3d:89:0e:64:be:01:fe:e2:d6:79:63:d9:d8:6a:
ec:8e:00:96:7a:aa:ba:d8:02:6d:01:af:c5:a7:f4:
55:50:6b:f5:ed:f3:92:89:72:2b:9c:15:a6:39:60:
83:2d:96:03:44:7c:bc:88:5f:39:b4:38:30:55:dc:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:F4:DE:F8:D1:F0:F0:79:2B:54:44:99:07:BA:A0:D7:25:65:46
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:74:24:fe:45:bc:8b:b5:49:9c:85:13:06:a3:e8:56:79:a5:
b0:3e:21:74:6c:a9:4a:3b:0b:c5:8d:bf:6a:d2:a0:0c:5c:42:
39:28:96:12:b4:d0:21:4c:1c:b7:c7:89:d5:d2:da:85:ad:d7:
5f:cc:0e:df:79:69:29:5c:06:7b:5e:66:9b:02:55:9e:83:fe:
8b:f2:59:41:99:14:00:d3:a3:8f:af:55:cb:b5:4f:84:f0:44:
c6:2e:b7:b6:b3:02:e6:87:9a:9e:fc:b4:cf:9a:f8:ac:05:b8:
ab:f3:ac:4f:10:b3:2d:90:78:92:d4:0a:21:1d:e6:3a:64:41:
7e:38:ae:1b:9e:39:33:f7:91:8f:77:db:f7:b0:85:d9:3d:e5:
92:f1:a8:5b:e0:3a:6e:2d:4c:c3:2c:09:34:e8:6b:f2:fd:33:
6c:23:3a:bc:ae:e7:11:31:e1:3a:de:7d:6e:ec:a5:7f:6b:87:
b4:7d:a1:23:00:eb:17:88:ab:30:e5:c6:a4:6b:f9:dc:49:e7:
86:c7:26:fb:1b:9a:19:5e:82:7d:a3:84:70:10:2a:43:3b:8c:
9a:b2:52:84:cf:04:0c:64:18:a2:86:42:6f:5d:c2:96:7d:1b:
80:22:94:e7:e5:07:d1:ff:60:8e:76:2b:7c:e4:76:2a:9f:ad:
03:f2:27:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijS3IDF32gowcVHl4v5sNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk
ODhmZTMwHhcNMjUwOTA3MDUwMTQxWhcNMjUwOTA4MDUwMTQxWjAzMTEwLwYDVQQD
EyhmNzQ1ZjRkZWY4ZDFmMGYwNzkyYjU0NDQ5OTA3YmFhMGQ3MjU2NTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oR+Y+JdgsAcedX2px9B6ffE34SN
RIJS0IiGtuHxI/izLeaaUEiw01EBBDy9bLWCkRAzRekHeSRSlkazQWD2yKfccPjd
MXpsQJlkW7cUMS4gMMSYxJN+KoCQXhV2IDsLg1K9DxmR1RqB0U579oUYO7qUJDXA
zbAXVdgpKgy4juomxf2lwpi3CLrGzappr8dKjG37Z7tSUUzt9RUSnhvIaYIilHyr
XMcMwtFLrH1Km0qlMzD/M2SnL/F9U/lqr/JKSklbPYkOZL4B/uLWeWPZ2GrsjgCW
eqq62AJtAa/Fp/RVUGv17fOSiXIrnBWmOWCDLZYDRHy8iF85tDgwVdwGowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdF9N740fDweStURJkHuqDXJWVGMB8GA1UdIwQY
MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt
NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj
LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHQk/kW8
i7VJnIUTBqPoVnmlsD4hdGypSjsLxY2/atKgDFxCOSiWErTQIUwct8eJ1dLaha3X
X8wO33lpKVwGe15mmwJVnoP+i/JZQZkUANOjj69Vy7VPhPBExi63trMC5oeanvy0
z5r4rAW4q/OsTxCzLZB4ktQKIR3mOmRBfjiuG545M/eRj3fb97CF2T3lkvGoW+A6
bi1MwywJNOhr8v0zbCM6vK7nETHhOt59buylf2uHtH2hIwDrF4irMOXGpGv53Enn
hscm+xuaGV6CfaOEcBAqQzuMmrJShM8EDGQYooZCb13Cln0bgCKU5+UH0f9gjnYr
fOR2Kp+tA/In+w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:25 2025 by rpki-client