Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: 5h73TyQRR+JY+i+ZQ3YqPudaAoV/JVHN000gISrtRgo=
Subject key identifier: 03:EE:D3:2C:20:9A:39:0C:CA:A0:BE:C7:88:24:0B:38:B7:FC:0F:EB
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 019A232E439B23F7900F6A99D017B44250CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 01:00:25 +0000
Manifest this update: Mon 27 Oct 2025 01:00:25 +0000
Manifest next update: Tue 28 Oct 2025 01:00:25 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: IZl2+K0yJ0iAPQEMig31XmpwA7AyKg48DmXQgIrKr8E=)
2: mWwPnP2S4g9JhxWYKKryZjEy1Ao.roa (hash: HyXUe+PYjqIKyOZOZZRdFXR1ckNBvzFOngXjiDgbrBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:43:9b:23:f7:90:0f:6a:99:d0:17:b4:42:50:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Oct 27 01:00:25 2025 GMT
Not After : Oct 28 01:00:25 2025 GMT
Subject: CN=03eed32c209a390ccaa0bec788240b38b7fc0feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:bf:64:78:47:44:90:f4:70:db:33:eb:a3:
ca:55:fd:6b:da:9c:a3:74:3d:86:46:e4:5e:78:82:
10:01:75:4c:81:88:58:d0:c9:63:3f:ad:8e:86:8a:
5d:40:be:91:1d:6e:8d:46:1c:24:a3:8e:a4:e8:ad:
2c:e2:18:f2:13:e0:bd:44:62:a6:0e:b1:6c:6a:4e:
2d:f9:f9:73:c4:95:04:56:22:b7:bf:a0:6e:2b:73:
50:17:03:1a:c6:da:d9:c3:69:38:36:af:9a:03:11:
8d:ef:ec:45:b8:ea:ee:d7:2d:d9:ff:eb:f6:08:43:
a1:1e:b5:18:29:c0:40:85:d8:72:54:37:40:21:8a:
ea:12:57:51:29:c8:da:3b:40:2d:d8:df:29:69:22:
d1:87:0a:cb:a4:ac:fa:f1:44:5c:9d:86:0c:4f:1e:
cf:e5:6f:70:ce:9b:a1:60:e3:0d:ed:ef:3b:13:c7:
7a:68:b6:08:00:a3:b4:a0:cd:9b:06:97:f4:08:a2:
8c:df:f6:3b:07:13:d7:c9:fa:a1:96:c0:08:37:6d:
a8:f2:c0:e4:79:63:27:20:e7:c1:ed:16:c3:ac:a4:
35:f9:f7:a2:32:69:78:14:5c:06:42:78:91:14:f4:
1d:17:e5:1f:fc:4a:00:37:44:cb:f4:f4:32:79:f3:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EE:D3:2C:20:9A:39:0C:CA:A0:BE:C7:88:24:0B:38:B7:FC:0F:EB
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b9:7d:b4:f2:e7:93:8b:fd:43:6e:82:a7:f8:2a:68:8d:bb:
a4:a5:00:dc:a2:97:a1:e3:29:6f:0f:2b:eb:cc:8e:ca:0a:e6:
a1:4c:b2:e4:8a:4e:f8:6f:4a:42:73:fe:55:e3:09:42:4a:a1:
a7:04:69:bd:ed:00:3b:34:a3:45:64:9f:59:78:1b:e2:9f:08:
a4:93:2c:70:5e:48:98:a0:c6:cd:8d:9c:b8:cf:78:d1:8f:40:
17:b2:ee:e8:b5:96:1f:10:3c:9f:19:9a:9c:db:f8:af:5e:99:
61:ba:bd:92:4f:bf:10:d0:02:48:81:36:0b:e6:b1:82:f2:d8:
4a:e7:ac:83:70:30:ae:2e:31:96:60:75:57:0c:25:1d:34:48:
e6:4e:b7:80:c7:32:f4:62:44:38:e0:9a:ce:ba:6a:7e:53:63:
fa:4b:2f:91:b6:4f:a7:4f:b4:64:20:83:75:f2:8c:64:21:13:
7e:57:16:ba:21:ea:51:e3:99:69:a4:d5:60:b8:87:9a:6c:24:
ca:89:48:54:8a:0b:70:37:49:5d:53:16:75:33:7b:75:13:ec:
d9:ec:e2:d3:da:23:4b:89:28:1b:b6:19:f1:40:36:97:8f:41:
3c:6e:1f:51:f3:8b:9f:43:7d:97:41:95:b9:5c:2b:62:2c:1f:
69:43:88:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLkObI/eQD2qZ0Be0QlDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTFiYzUwY2ZlZDlkMDJlNTgxOTZhMmM4MWM5ODhlMzBi
YTEyNjAwHhcNMjUxMDI3MDEwMDI1WhcNMjUxMDI4MDEwMDI1WjAzMTEwLwYDVQQD
EygwM2VlZDMyYzIwOWEzOTBjY2FhMGJlYzc4ODI0MGIzOGI3ZmMwZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygu/ZHhHRJD0cNsz66PKVf1r2pyj
dD2GRuReeIIQAXVMgYhY0MljP62OhopdQL6RHW6NRhwko46k6K0s4hjyE+C9RGKm
DrFsak4t+flzxJUEViK3v6BuK3NQFwMaxtrZw2k4Nq+aAxGN7+xFuOru1y3Z/+v2
CEOhHrUYKcBAhdhyVDdAIYrqEldRKcjaO0At2N8paSLRhwrLpKz68URcnYYMTx7P
5W9wzpuhYOMN7e87E8d6aLYIAKO0oM2bBpf0CKKM3/Y7BxPXyfqhlsAIN22o8sDk
eWMnIOfB7RbDrKQ1+feiMml4FFwGQniRFPQdF+Uf/EoAN0TL9PQyefMlpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPu0ywgmjkMyqC+x4gkCzi3/A/rMB8GA1UdIwQY
MBaAFAgRvFDP7Z0C5YGWosgcmI4wuhJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYt
ZWU1YTY3NDNiZTU2LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYtZWU1YTY3NDNiZTU2
LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7l9tPLn
k4v9Q26Cp/gqaI27pKUA3KKXoeMpbw8r68yOygrmoUyy5IpO+G9KQnP+VeMJQkqh
pwRpve0AOzSjRWSfWXgb4p8IpJMscF5ImKDGzY2cuM940Y9AF7Lu6LWWHxA8nxma
nNv4r16ZYbq9kk+/ENACSIE2C+axgvLYSuesg3Awri4xlmB1VwwlHTRI5k63gMcy
9GJEOOCazrpqflNj+ksvkbZPp0+0ZCCDdfKMZCETflcWuiHqUeOZaaTVYLiHmmwk
yolIVIoLcDdJXVMWdTN7dRPs2ezi09ojS4koG7YZ8UA2l49BPG4fUfOLn0N9l0GV
uVwrYiwfaUOIdA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 06:53:29 2025 by rpki-client