Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: kfbtpG1NsWCPyu4oLnNYFaiGwAXMcIXgIfoMufT51sA=
Subject key identifier: DE:0F:43:64:FC:23:B9:EB:36:E4:93:F8:00:4D:90:E8:1A:FC:39:23
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 019918E41A71D93D4BAFDB4B667B0447B820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 166D
Signing time: Fri 05 Sep 2025 08:00:25 +0000
Manifest this update: Fri 05 Sep 2025 08:00:25 +0000
Manifest next update: Sat 06 Sep 2025 08:00:25 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: QoCOkVbVPg/pUZGxDYGaMyYkqMDFKMAXzY3xxFEaZ0o=)
2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:e4:1a:71:d9:3d:4b:af:db:4b:66:7b:04:47:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Sep 5 08:00:25 2025 GMT
Not After : Sep 6 08:00:25 2025 GMT
Subject: CN=de0f4364fc23b9eb36e493f8004d90e81afc3923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:af:74:6a:d1:76:26:c4:06:d3:55:d7:cf:
73:a5:c0:ad:8a:5d:b6:38:bd:25:a1:17:d5:1c:ea:
f8:36:ed:65:d7:be:ad:6d:01:9a:29:23:ab:2a:70:
66:c3:1b:01:a1:dd:41:dd:0b:d3:43:06:80:6c:66:
2e:cb:d2:24:18:51:b3:f8:6b:fb:0b:3a:c2:06:cb:
ab:96:77:cd:83:d7:0e:31:8f:6d:c8:5e:9d:11:12:
42:6b:b1:89:ee:66:82:9c:60:36:3f:46:20:b4:44:
de:6f:42:c9:65:7d:89:a4:79:88:7b:8b:c3:a3:17:
41:e7:05:8b:2f:bf:29:7d:0a:ad:2b:ce:93:6f:c1:
62:a2:f7:06:b3:c9:c9:ad:c3:08:41:18:2a:6c:6b:
50:9d:5a:33:27:e1:ca:95:80:90:32:50:1b:25:d5:
21:52:97:b1:49:80:ef:d5:0f:0e:a1:56:78:06:85:
d7:bc:c5:37:4c:7f:86:ca:fe:81:88:e4:2a:25:51:
ba:59:4c:33:a5:31:8e:53:3f:1a:18:4a:0a:41:c8:
5f:2c:11:c1:9b:84:a4:22:74:b1:ad:f1:16:52:cc:
e0:0b:33:10:a7:36:84:34:14:37:46:52:2d:13:5f:
75:69:d2:8e:bf:e3:6e:f2:bf:5f:6c:28:e4:59:12:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0F:43:64:FC:23:B9:EB:36:E4:93:F8:00:4D:90:E8:1A:FC:39:23
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4d:e1:19:94:7c:1b:61:82:bf:50:43:38:70:ee:c8:9c:05:
43:10:61:79:95:1a:5c:8b:69:c4:0d:b2:de:c2:f2:55:48:4c:
d8:0f:f8:df:f1:ed:98:28:20:67:b0:39:de:d0:6a:05:b5:c4:
1b:1f:40:e0:d2:ff:67:c7:a5:59:16:1b:29:82:06:ee:13:10:
77:e7:6a:17:25:47:b1:d3:67:37:bc:8c:d5:d5:bf:d5:97:d9:
3c:ae:70:47:c3:28:47:a1:31:d5:e1:1d:3d:83:ea:1b:e0:8a:
cb:16:ee:5b:d1:a0:f6:2b:73:4d:2f:b3:29:70:2d:d6:73:c5:
45:6a:59:6b:c9:ce:a7:8b:f2:63:c5:66:e6:b6:31:92:de:83:
8d:3f:f9:a3:ae:de:f6:dc:c4:2e:58:83:ec:ba:51:88:70:51:
19:16:9c:51:32:8d:fc:ce:7f:8a:82:d8:35:b6:43:ca:fb:1d:
0e:30:3a:04:cf:2b:dd:44:78:be:59:c5:b8:1a:72:7d:0d:76:
52:07:a4:99:22:4f:18:ac:83:c5:81:de:4c:07:a2:99:60:d2:
a0:28:78:25:8c:8e:9d:64:c3:ba:f1:26:5f:ca:9d:11:9f:13:
39:18:d0:75:04:15:11:d6:28:b4:23:dc:5f:2d:6c:26:2b:ad:
e4:d8:bc:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkY5Bpx2T1Lr9tLZnsER7ggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDZiNjVjYmI5NzY2N2FiZGZmOWI4NjFhMjJmOWQwMWQx
ZDQ2Y2IwHhcNMjUwOTA1MDgwMDI1WhcNMjUwOTA2MDgwMDI1WjAzMTEwLwYDVQQD
EyhkZTBmNDM2NGZjMjNiOWViMzZlNDkzZjgwMDRkOTBlODFhZmMzOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhuvdGrRdibEBtNV189zpcCtil22
OL0loRfVHOr4Nu1l176tbQGaKSOrKnBmwxsBod1B3QvTQwaAbGYuy9IkGFGz+Gv7
CzrCBsurlnfNg9cOMY9tyF6dERJCa7GJ7maCnGA2P0YgtETeb0LJZX2JpHmIe4vD
oxdB5wWLL78pfQqtK86Tb8FiovcGs8nJrcMIQRgqbGtQnVozJ+HKlYCQMlAbJdUh
UpexSYDv1Q8OoVZ4BoXXvMU3TH+Gyv6BiOQqJVG6WUwzpTGOUz8aGEoKQchfLBHB
m4SkInSxrfEWUszgCzMQpzaENBQ3RlItE191adKOv+Nu8r9fbCjkWRIt+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4PQ2T8I7nrNuST+ABNkOga/DkjMB8GA1UdIwQY
MBaAFAoGtly7l2Z6vf+bhhoi+dAdHUbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjct
OWY2Njg2ZTQyODAwLzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjctOWY2Njg2ZTQyODAw
LzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK03hGZR8
G2GCv1BDOHDuyJwFQxBheZUaXItpxA2y3sLyVUhM2A/43/HtmCggZ7A53tBqBbXE
Gx9A4NL/Z8elWRYbKYIG7hMQd+dqFyVHsdNnN7yM1dW/1ZfZPK5wR8MoR6Ex1eEd
PYPqG+CKyxbuW9Gg9itzTS+zKXAt1nPFRWpZa8nOp4vyY8Vm5rYxkt6DjT/5o67e
9tzELliD7LpRiHBRGRacUTKN/M5/ioLYNbZDyvsdDjA6BM8r3UR4vlnFuBpyfQ12
UgekmSJPGKyDxYHeTAeimWDSoCh4JYyOnWTDuvEmX8qdEZ8TORjQdQQVEdYotCPc
Xy1sJiut5Ni85w==
-----END CERTIFICATE-----
Generated at Fri Sep 5 09:50:42 2025 by rpki-client