Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: WQh+Ec+xR90Fwb6VSLx/TOlq99uLckeOy3W41v4IU/w=
Subject key identifier: 82:B3:C1:C8:BC:E6:FA:05:98:29:16:7F:A9:6C:F3:C6:6A:A1:50:10
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019923A0447D1688D6F0F78BD503AF6E938C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:02:09 +0000
Manifest this update: Sun 07 Sep 2025 10:02:09 +0000
Manifest next update: Mon 08 Sep 2025 10:02:09 +0000
Files and hashes: 1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=)
2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: oZ8apqMCgDa50Vb2Kd6vKq9gXtU5pOzL8LoOdxSWR1o=)
3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:44:7d:16:88:d6:f0:f7:8b:d5:03:af:6e:93:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Sep 7 10:02:09 2025 GMT
Not After : Sep 8 10:02:09 2025 GMT
Subject: CN=82b3c1c8bce6fa059829167fa96cf3c66aa15010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:af:5e:48:e6:44:20:21:64:b9:97:dc:53:
86:a5:d4:c2:cf:fd:68:4b:da:7d:2d:36:ce:77:c1:
28:72:fa:ec:15:88:c2:67:26:c8:93:12:7b:c1:27:
66:c7:5a:70:b7:b3:35:7a:7d:5f:a2:39:f4:d0:56:
60:38:f7:82:69:3f:12:d3:34:44:26:3a:b4:4f:64:
75:43:fb:f2:18:d2:e9:03:0f:54:42:2e:5b:4a:8b:
ee:42:67:eb:e9:24:3e:5d:7c:6f:dc:70:a8:7d:e7:
de:0b:7b:17:a8:e7:ca:f7:5a:b8:30:a7:c8:07:7a:
81:02:df:58:f2:e5:67:ba:aa:71:fc:63:7f:e5:23:
ce:ee:17:1f:36:f4:0f:c6:ef:92:b6:7d:f0:85:d5:
99:8a:61:21:11:1b:5b:1d:a3:cd:ab:b5:76:9b:65:
db:f1:07:43:9d:63:e9:10:5d:60:e8:be:2e:3b:ad:
a4:6d:b6:23:32:1d:6f:3d:7d:53:fa:b0:be:0d:22:
4e:bb:01:85:20:67:7a:2c:47:0b:94:c8:fe:38:26:
33:9b:84:15:e1:b6:7f:56:4e:c7:e6:8c:81:0e:64:
df:31:83:b8:4f:84:2f:f7:c8:ae:66:44:e2:a2:a9:
f4:fd:4c:c9:bf:1b:c3:77:3b:63:cf:f5:c2:ca:c3:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B3:C1:C8:BC:E6:FA:05:98:29:16:7F:A9:6C:F3:C6:6A:A1:50:10
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:73:21:a2:fa:c5:94:84:4a:ef:21:d0:f7:3a:59:e8:02:
2b:b6:84:90:ff:7a:cd:91:26:e3:cc:3b:93:eb:c4:f3:3a:fe:
c3:53:51:2a:cd:3c:a2:55:dd:cd:b9:7b:b9:04:cb:5c:92:6a:
76:13:94:63:8a:39:8f:29:38:fd:59:5c:08:61:f8:e3:37:ec:
5a:27:7b:01:0a:83:b4:8d:bd:93:52:ab:b7:34:d3:0d:ac:0c:
13:8b:3f:75:4a:c3:e6:d3:c1:0a:a6:15:c2:cb:a0:2f:22:f9:
12:d4:21:d1:41:ca:b0:f3:fe:d3:77:02:71:ff:45:51:9d:f6:
d0:96:59:6e:7e:8e:b3:0d:ac:63:20:59:4f:90:75:01:0b:fe:
9d:81:df:e9:ad:ad:7f:8d:a2:78:03:99:2f:98:7d:24:bc:9e:
d4:a3:9e:bc:c7:17:ce:ea:66:d6:d3:86:f2:22:88:e5:c3:19:
6d:71:11:d6:0f:f4:f0:a0:93:ed:7f:d3:a3:cc:26:4a:f3:44:
e8:2b:34:84:ee:ec:e7:dd:fa:43:37:09:1b:e8:8e:73:4a:68:
f5:d9:32:48:40:df:97:14:d9:99:b6:80:1b:24:7d:11:a3:5e:
59:42:a5:77:60:67:cf:47:22:93:3a:ed:07:a6:45:65:9e:4a:
6a:33:3e:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoER9FojW8PeL1QOvbpOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNiYzM0MWM4NzQzM2QwM2U0ZGQ2MTViN2YzNDUzMTY0
MzQ0YjMwHhcNMjUwOTA3MTAwMjA5WhcNMjUwOTA4MTAwMjA5WjAzMTEwLwYDVQQD
Eyg4MmIzYzFjOGJjZTZmYTA1OTgyOTE2N2ZhOTZjZjNjNjZhYTE1MDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6+vXkjmRCAhZLmX3FOGpdTCz/1o
S9p9LTbOd8EocvrsFYjCZybIkxJ7wSdmx1pwt7M1en1fojn00FZgOPeCaT8S0zRE
Jjq0T2R1Q/vyGNLpAw9UQi5bSovuQmfr6SQ+XXxv3HCofefeC3sXqOfK91q4MKfI
B3qBAt9Y8uVnuqpx/GN/5SPO7hcfNvQPxu+Stn3whdWZimEhERtbHaPNq7V2m2Xb
8QdDnWPpEF1g6L4uO62kbbYjMh1vPX1T+rC+DSJOuwGFIGd6LEcLlMj+OCYzm4QV
4bZ/Vk7H5oyBDmTfMYO4T4Qv98iuZkTioqn0/UzJvxvDdztjz/XCysN/WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKzwci85voFmCkWf6ls88ZqoVAQMB8GA1UdIwQY
MBaAFAj8vDQch0M9A+TdYVt/NFMWQ0SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQt
YzEwMGE5ODZiYzVjLzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQtYzEwMGE5ODZiYzVj
LzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvNzIaL6
xZSESu8h0Pc6WegCK7aEkP96zZEm48w7k+vE8zr+w1NRKs08olXdzbl7uQTLXJJq
dhOUY4o5jyk4/VlcCGH44zfsWid7AQqDtI29k1KrtzTTDawME4s/dUrD5tPBCqYV
wsugLyL5EtQh0UHKsPP+03cCcf9FUZ320JZZbn6Osw2sYyBZT5B1AQv+nYHf6a2t
f42ieAOZL5h9JLye1KOevMcXzupm1tOG8iKI5cMZbXER1g/08KCT7X/To8wmSvNE
6Cs0hO7s5936QzcJG+iOc0po9dkySEDflxTZmbaAGyR9EaNeWUKld2Bnz0cikzrt
B6ZFZZ5KajM+ow==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:26 2025 by rpki-client