Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: e/67gufQ4rbsGZ87klvre75YPTNDSoTQ/agKW9EJg7s=
Subject key identifier: 03:6B:91:90:B8:4B:DE:17:1C:4D:75:26:05:A0:AB:DD:AC:0E:FA:4B
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019A25C181348F3654AE4553B82B5C9C5F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 170F
Signing time: Mon 27 Oct 2025 13:00:29 +0000
Manifest this update: Mon 27 Oct 2025 13:00:29 +0000
Manifest next update: Tue 28 Oct 2025 13:00:29 +0000
Files and hashes: 1: ELVDoYmFaTCtnTMhAqZufMc8mXg.roa (hash: GX/uRjpcUEeVnkiAfonTZ3Q7zJlqdixXVsuNiqh4BrE=)
2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: kLqh3gSVujsHqkg7hvbKC3ZDCa7DFDdzGH+T2IxAKZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:81:34:8f:36:54:ae:45:53:b8:2b:5c:9c:5f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Oct 27 13:00:29 2025 GMT
Not After : Oct 28 13:00:29 2025 GMT
Subject: CN=036b9190b84bde171c4d752605a0abddac0efa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:c2:1a:f7:c7:c7:99:1b:40:71:36:6a:a5:
a9:75:40:b7:28:7b:ce:3e:04:8b:4b:6f:1f:8c:d0:
23:6b:4b:76:5c:32:2d:b4:3e:40:22:54:1b:99:51:
ae:5e:e4:e0:67:39:a8:e9:c2:81:11:1b:a3:b9:86:
80:01:8f:01:49:e9:d0:ac:23:e6:b8:7a:36:97:f5:
1e:09:cb:7c:cf:46:5e:72:8f:bf:66:df:15:da:65:
18:dc:da:30:c9:3d:1a:bc:b4:c7:d4:97:e9:52:10:
7b:ff:3a:a8:15:d9:01:71:6b:69:ce:00:e8:c8:90:
d9:b7:3b:96:c6:24:c5:b2:79:52:ac:e9:4d:7d:65:
21:8f:26:ca:6c:d0:f4:cf:be:62:09:90:a9:f8:3b:
22:a1:b7:ce:75:84:f7:06:3d:f2:22:dc:1f:cc:df:
cb:a6:84:bf:1e:0e:85:2d:54:c0:6f:b5:23:d8:1b:
6a:66:4b:aa:c6:42:f9:93:4a:44:98:67:ec:83:16:
fc:12:dd:0b:99:bc:4a:7c:cb:c6:ec:5e:d1:43:38:
84:ac:d1:69:54:6a:85:ad:b9:41:bf:db:ce:7d:7f:
ed:1a:2f:6b:4c:26:e7:ea:50:e6:b0:9e:06:d6:09:
c4:fa:9b:ba:b8:df:15:ab:96:bd:ce:6e:e8:37:5b:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6B:91:90:B8:4B:DE:17:1C:4D:75:26:05:A0:AB:DD:AC:0E:FA:4B
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7b:ae:04:12:28:62:7f:51:66:ab:e2:58:73:fa:7d:d2:7a:
64:b2:e5:7d:db:91:59:3d:c2:bf:d7:49:c2:af:51:0c:b2:92:
f0:24:e3:fa:86:ed:fe:a6:49:75:a1:4b:52:b4:46:25:3d:36:
ee:8c:f9:df:6e:c0:8b:68:d8:fa:3f:7d:f1:d5:88:c0:ae:af:
4f:38:9f:41:c7:2f:6a:a2:8a:64:0a:73:b6:04:7f:7a:86:92:
c7:4f:00:4c:e8:43:2d:0d:c3:8c:b8:30:76:fc:f2:97:55:64:
03:b9:05:a6:d6:f6:15:18:99:cb:2d:59:5d:f4:f5:24:2e:27:
99:64:f8:d2:31:8a:98:11:c9:53:80:8a:d6:ba:87:a9:6d:c4:
4e:73:19:d3:16:77:d0:4d:72:47:50:a4:83:85:33:81:e3:f4:
6e:7d:e3:74:c7:ce:c9:ac:dc:ce:02:2b:e9:fb:67:64:c2:91:
17:b9:72:71:96:49:4b:ce:53:7b:cd:fa:d5:ec:0a:dd:8c:e7:
de:ce:5c:12:0e:f4:74:c4:17:b2:10:2e:1c:84:60:42:86:41:
02:d2:0a:fb:84:f2:bd:6d:d3:86:6a:7b:91:c1:33:03:c9:63:
cf:b5:a0:e5:19:21:91:f6:44:0b:64:67:3e:57:5d:73:a4:f5:
74:99:c3:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolwYE0jzZUrkVTuCtcnF9EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTgxZmI1Y2YwZmIzMmM0NTc1Zjg0MTNhY2JkNDFhYTg0
YjgyZjQwHhcNMjUxMDI3MTMwMDI5WhcNMjUxMDI4MTMwMDI5WjAzMTEwLwYDVQQD
EygwMzZiOTE5MGI4NGJkZTE3MWM0ZDc1MjYwNWEwYWJkZGFjMGVmYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWbCGvfHx5kbQHE2aqWpdUC3KHvO
PgSLS28fjNAja0t2XDIttD5AIlQbmVGuXuTgZzmo6cKBERujuYaAAY8BSenQrCPm
uHo2l/UeCct8z0Zeco+/Zt8V2mUY3NowyT0avLTH1JfpUhB7/zqoFdkBcWtpzgDo
yJDZtzuWxiTFsnlSrOlNfWUhjybKbND0z75iCZCp+DsiobfOdYT3Bj3yItwfzN/L
poS/Hg6FLVTAb7Uj2BtqZkuqxkL5k0pEmGfsgxb8Et0LmbxKfMvG7F7RQziErNFp
VGqFrblBv9vOfX/tGi9rTCbn6lDmsJ4G1gnE+pu6uN8Vq5a9zm7oN1s/6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANrkZC4S94XHE11JgWgq92sDvpLMB8GA1UdIwQY
MBaAFHLoH7XPD7MsRXX4QTrL1BqoS4L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQt
Y2RhNmUxOWZmYjg4LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQtY2RhNmUxOWZmYjg4
LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3uuBBIo
Yn9RZqviWHP6fdJ6ZLLlfduRWT3Cv9dJwq9RDLKS8CTj+obt/qZJdaFLUrRGJT02
7oz5327Ai2jY+j998dWIwK6vTzifQccvaqKKZApztgR/eoaSx08ATOhDLQ3DjLgw
dvzyl1VkA7kFptb2FRiZyy1ZXfT1JC4nmWT40jGKmBHJU4CK1rqHqW3ETnMZ0xZ3
0E1yR1Ckg4UzgeP0bn3jdMfOyazczgIr6ftnZMKRF7lycZZJS85Te8361ewK3Yzn
3s5cEg70dMQXshAuHIRgQoZBAtIK+4TyvW3Thmp7kcEzA8ljz7Wg5RkhkfZEC2Rn
Plddc6T1dJnD4g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 21:31:37 2025 by rpki-client