Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: St+dg8CtN6EzY8dDYbbFO57IBjV38/Aivudm4mkjoqc=
Subject key identifier: 5D:85:C1:33:2F:9A:A3:6E:F1:88:02:29:63:31:D0:7E:95:82:A5:0F
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 0199307ECBDFB068194942D4DE741AE88FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 1690
Signing time: Tue 09 Sep 2025 22:00:40 +0000
Manifest this update: Tue 09 Sep 2025 22:00:40 +0000
Manifest next update: Wed 10 Sep 2025 22:00:40 +0000
Files and hashes: 1: ELVDoYmFaTCtnTMhAqZufMc8mXg.roa (hash: GX/uRjpcUEeVnkiAfonTZ3Q7zJlqdixXVsuNiqh4BrE=)
2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: CNVDFQ8Jrq2qDd63t2RlItV04VYf2SBp9SqLlPFFi+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7e:cb:df:b0:68:19:49:42:d4:de:74:1a:e8:8f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Sep 9 22:00:40 2025 GMT
Not After : Sep 10 22:00:40 2025 GMT
Subject: CN=5d85c1332f9aa36ef18802296331d07e9582a50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:46:7d:4d:81:bd:20:25:66:f1:84:4f:1f:
41:fc:ca:0a:fd:86:db:c5:dd:52:7f:d3:34:2a:69:
95:b5:8b:2c:10:fb:32:5b:84:72:7f:b4:fe:5c:3a:
6c:aa:ef:17:a0:ee:24:be:86:6f:af:de:e5:fd:46:
de:f0:ee:7a:f6:be:34:51:cf:d5:b8:82:25:00:71:
05:1c:27:81:ca:1e:1e:91:13:92:18:9f:be:80:dc:
af:66:b7:21:77:53:d4:65:00:54:35:65:c3:07:b7:
3c:8b:c4:53:a9:69:d9:ab:27:d3:e0:4a:10:d5:8a:
a9:a9:cc:55:48:33:1f:02:4e:91:a7:b8:52:e4:50:
64:40:1f:18:88:07:72:a1:76:78:4a:c3:82:b3:6a:
f3:cd:d8:4d:33:ac:09:09:98:5f:25:44:7e:4f:61:
18:30:00:84:4f:94:d8:4e:c7:58:54:46:72:24:fe:
55:7b:2e:be:81:f0:50:df:d3:65:79:51:b4:f8:e8:
ff:a8:3c:05:26:f9:9a:04:70:73:5a:e7:5c:5c:48:
c3:c7:43:c8:38:2a:2e:e3:91:4e:e6:46:84:4f:16:
54:44:df:0a:25:e8:9d:5b:c3:32:8b:5b:ea:71:17:
bf:87:f5:24:30:ea:be:65:91:24:92:d0:a1:25:8b:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:C1:33:2F:9A:A3:6E:F1:88:02:29:63:31:D0:7E:95:82:A5:0F
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:05:c3:76:b6:cc:75:32:5c:e0:93:fe:a8:17:31:ff:a4:8b:
f2:0b:4a:a4:82:0f:37:eb:62:9c:f4:e3:92:83:58:91:b4:27:
5d:cc:6e:b7:8b:ab:a2:e6:55:e9:90:46:7a:58:d1:07:4e:0a:
3d:34:51:8a:fc:58:b6:40:c1:43:93:2f:60:98:10:2b:e7:42:
5b:fa:2d:71:9d:a7:58:cd:b8:0f:6c:82:aa:d3:24:8b:9a:9e:
01:8e:6e:ff:ec:29:8d:82:74:fb:a0:1d:aa:a8:bc:ba:9b:f1:
b3:f1:4e:9d:77:f8:be:9a:e6:80:08:6e:18:7b:23:b9:e5:5f:
c1:ef:cf:df:e2:a5:1f:c0:a1:24:40:21:be:d8:e6:0b:e9:c6:
13:b1:2c:76:13:91:25:92:e8:47:5f:18:66:cd:0c:1b:68:a1:
0d:e8:54:96:42:46:b1:81:f5:e3:72:33:61:b4:8d:4e:df:5b:
2b:87:79:51:02:fc:fb:87:1a:4c:fe:00:8f:1f:7a:0d:6b:c4:
62:9d:08:e6:a4:6c:c6:fa:73:ad:a1:75:e0:e4:fd:de:59:dc:
0b:22:f1:dd:fa:3d:82:7d:75:39:02:31:b5:b6:c3:88:b5:6c:
ad:d2:e9:c7:14:41:6e:58:00:51:bb:e3:68:e7:88:fc:40:b4:
ea:8d:1b:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwfsvfsGgZSULU3nQa6I+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTgxZmI1Y2YwZmIzMmM0NTc1Zjg0MTNhY2JkNDFhYTg0
YjgyZjQwHhcNMjUwOTA5MjIwMDQwWhcNMjUwOTEwMjIwMDQwWjAzMTEwLwYDVQQD
Eyg1ZDg1YzEzMzJmOWFhMzZlZjE4ODAyMjk2MzMxZDA3ZTk1ODJhNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44NGfU2BvSAlZvGETx9B/MoK/Ybb
xd1Sf9M0KmmVtYssEPsyW4Ryf7T+XDpsqu8XoO4kvoZvr97l/Ube8O569r40Uc/V
uIIlAHEFHCeByh4ekROSGJ++gNyvZrchd1PUZQBUNWXDB7c8i8RTqWnZqyfT4EoQ
1YqpqcxVSDMfAk6Rp7hS5FBkQB8YiAdyoXZ4SsOCs2rzzdhNM6wJCZhfJUR+T2EY
MACET5TYTsdYVEZyJP5Vey6+gfBQ39NleVG0+Oj/qDwFJvmaBHBzWudcXEjDx0PI
OCou45FO5kaETxZURN8KJeidW8Myi1vqcRe/h/UkMOq+ZZEkktChJYuvNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2FwTMvmqNu8YgCKWMx0H6VgqUPMB8GA1UdIwQY
MBaAFHLoH7XPD7MsRXX4QTrL1BqoS4L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQt
Y2RhNmUxOWZmYjg4LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQtY2RhNmUxOWZmYjg4
LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQXDdrbM
dTJc4JP+qBcx/6SL8gtKpIIPN+tinPTjkoNYkbQnXcxut4urouZV6ZBGeljRB04K
PTRRivxYtkDBQ5MvYJgQK+dCW/otcZ2nWM24D2yCqtMki5qeAY5u/+wpjYJ0+6Ad
qqi8upvxs/FOnXf4vprmgAhuGHsjueVfwe/P3+KlH8ChJEAhvtjmC+nGE7EsdhOR
JZLoR18YZs0MG2ihDehUlkJGsYH143IzYbSNTt9bK4d5UQL8+4caTP4Ajx96DWvE
Yp0I5qRsxvpzraF14OT93lncCyLx3fo9gn11OQIxtbbDiLVsrdLpxxRBblgAUbvj
aOeI/EC06o0b7w==
-----END CERTIFICATE-----
Generated at Tue Sep 9 23:19:20 2025 by rpki-client