Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: p7b8yn1kMkbJpQK7gdUlBbGeZ/PP+JOZYK//qXkr4hE=
Subject key identifier: 8C:A3:9C:47:03:4F:F1:5D:FC:C3:29:69:15:A8:2E:F8:1B:D9:2C:91
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 01992CD9380A867A0588336F2B6F31A68E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 0267
Signing time: Tue 09 Sep 2025 05:00:57 +0000
Manifest this update: Tue 09 Sep 2025 05:00:57 +0000
Manifest next update: Wed 10 Sep 2025 05:00:57 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: pSV1XZI83uAt6jFOTukl+LBAAV4ZSCwUTkQmMyNhPBI=)
3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:38:0a:86:7a:05:88:33:6f:2b:6f:31:a6:8e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Sep 9 05:00:57 2025 GMT
Not After : Sep 10 05:00:57 2025 GMT
Subject: CN=8ca39c47034ff15dfcc3296915a82ef81bd92c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:90:e3:46:73:b6:08:6f:1e:e2:00:eb:2e:
b2:ae:d1:7a:a5:a9:63:cc:02:1e:6a:85:b5:db:1a:
be:bf:55:9b:a6:08:87:47:4b:e7:a0:ab:49:20:05:
14:5c:b8:9f:a8:b5:54:86:48:69:d7:7a:15:da:34:
22:42:c7:08:06:64:a1:5e:d1:2b:d5:61:52:64:92:
0f:31:25:5f:55:cb:2e:a7:39:34:f4:63:b7:cf:4c:
6e:5d:e0:28:4b:d8:a4:02:96:90:53:3a:29:ef:02:
64:3c:c3:f9:90:7a:df:98:1c:7d:c0:8f:0d:2c:de:
c8:e7:e4:e9:31:58:25:07:47:4b:7d:cc:dc:0b:2d:
4f:55:12:c7:8b:ef:31:f8:c9:a5:b8:68:5d:ae:a7:
c5:19:4d:7f:24:82:0a:83:83:c0:6e:dd:fa:3a:27:
20:3a:55:0f:57:14:5e:06:7e:cb:b6:3d:ec:9e:fa:
50:b1:55:9b:e5:72:a5:44:df:a5:bf:ae:23:f5:b3:
cc:c9:69:a2:22:90:07:b8:d9:3d:f5:5a:f2:84:a1:
f2:cf:72:e8:d0:0c:2b:89:76:c8:9b:80:b8:e6:03:
c2:e8:17:0c:b1:a3:8a:79:a1:cf:bc:a0:6c:b3:ae:
91:0c:ce:36:71:73:1e:cb:49:b3:01:9f:e1:d9:59:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A3:9C:47:03:4F:F1:5D:FC:C3:29:69:15:A8:2E:F8:1B:D9:2C:91
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ed:e9:f5:a5:7e:25:11:6d:58:9e:ae:db:89:af:be:69:29:
ba:02:62:04:dd:50:64:c0:96:cb:51:d1:91:25:50:74:06:82:
8e:4e:b3:2f:bf:47:3e:8c:57:37:79:c7:ec:31:1b:8b:37:e4:
e7:43:d4:46:14:de:a8:ec:86:d0:49:b1:88:4e:97:34:4b:19:
62:e8:ad:71:2a:41:f4:e7:15:aa:cd:bb:27:6f:02:11:9b:a3:
c3:69:38:6f:69:fe:02:30:3d:ef:51:1f:22:7d:09:c3:fc:bf:
0e:c6:c9:23:d1:8d:2c:e9:f0:5e:95:e9:90:a5:d8:46:d5:0f:
a5:56:c4:3b:04:ce:05:68:18:eb:4c:46:c0:b3:b4:db:ec:11:
c5:f2:5f:d4:27:e5:90:f5:36:18:30:c9:e2:71:7f:14:f2:fa:
4a:a8:39:eb:6e:58:34:95:89:1c:ba:fa:42:68:9c:19:ee:40:
e2:22:e5:c4:7c:0b:02:39:32:67:f4:78:2d:af:f5:87:a8:3f:
95:99:e7:11:74:ca:fb:27:4c:99:48:8f:1b:ec:ba:df:85:b4:
e3:27:a3:98:fe:d0:a7:f0:bb:44:71:87:41:46:f7:90:d0:83:
3d:01:1c:1c:e9:f8:96:be:56:b7:cd:6d:a5:d8:d3:e9:e7:11:
0d:23:5c:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZks2TgKhnoFiDNvK28xpo48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1
YWM5MzAwHhcNMjUwOTA5MDUwMDU3WhcNMjUwOTEwMDUwMDU3WjAzMTEwLwYDVQQD
Eyg4Y2EzOWM0NzAzNGZmMTVkZmNjMzI5NjkxNWE4MmVmODFiZDkyYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkaQ40ZztghvHuIA6y6yrtF6palj
zAIeaoW12xq+v1WbpgiHR0vnoKtJIAUUXLifqLVUhkhp13oV2jQiQscIBmShXtEr
1WFSZJIPMSVfVcsupzk09GO3z0xuXeAoS9ikApaQUzop7wJkPMP5kHrfmBx9wI8N
LN7I5+TpMVglB0dLfczcCy1PVRLHi+8x+MmluGhdrqfFGU1/JIIKg4PAbt36Oicg
OlUPVxReBn7Ltj3snvpQsVWb5XKlRN+lv64j9bPMyWmiIpAHuNk99VryhKHyz3Lo
0AwriXbIm4C45gPC6BcMsaOKeaHPvKBss66RDM42cXMey0mzAZ/h2Vk2YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyjnEcDT/Fd/MMpaRWoLvgb2SyRMB8GA1UdIwQY
MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt
NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj
LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUe3p9aV+
JRFtWJ6u24mvvmkpugJiBN1QZMCWy1HRkSVQdAaCjk6zL79HPoxXN3nH7DEbizfk
50PURhTeqOyG0EmxiE6XNEsZYuitcSpB9OcVqs27J28CEZujw2k4b2n+AjA971Ef
In0Jw/y/DsbJI9GNLOnwXpXpkKXYRtUPpVbEOwTOBWgY60xGwLO02+wRxfJf1Cfl
kPU2GDDJ4nF/FPL6Sqg5625YNJWJHLr6QmicGe5A4iLlxHwLAjkyZ/R4La/1h6g/
lZnnEXTK+ydMmUiPG+y634W04yejmP7Qp/C7RHGHQUb3kNCDPQEcHOn4lr5Wt81t
pdjT6ecRDSNcGg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:30:06 2025 by rpki-client