Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File: cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier: A2rD9aWIgsz2xGgLjdEKSWuD5qOiM2JxdmVsru3jzv8=
Subject key identifier: 74:D1:32:89:A8:6D:90:AD:2B:A1:ED:33:05:23:70:D5:B3:FA:B0:CC
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial: 019923A0CC2529CAB3CE19E91CA84D77A229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number: 0AB4
Signing time: Sun 07 Sep 2025 10:02:44 +0000
Manifest this update: Sun 07 Sep 2025 10:02:44 +0000
Manifest next update: Mon 08 Sep 2025 10:02:44 +0000
Files and hashes: 1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: yLdh9MoLV7amv155ZvzjClM8swJf/XABLq7CSnZ5Y/U=)
2: kJep7a3FRkNs3KQgMS6kDueqf3w.roa (hash: dBpCegRmmKMPJmbKSXlcIE1LjID2HAF4dE0zWcCDOWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:cc:25:29:ca:b3:ce:19:e9:1c:a8:4d:77:a2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Validity
Not Before: Sep 7 10:02:44 2025 GMT
Not After : Sep 8 10:02:44 2025 GMT
Subject: CN=74d13289a86d90ad2ba1ed33052370d5b3fab0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:17:1a:40:55:ec:b9:44:94:e2:7d:9c:94:
a1:35:6d:c3:02:ee:3b:fa:58:ac:55:56:30:b2:7f:
a7:a7:74:85:f7:58:90:9f:69:f7:b1:0d:f9:14:81:
02:7a:11:e6:04:a7:fc:ea:01:ae:1b:01:4d:60:9f:
6a:74:d5:18:37:67:5b:48:6e:2a:c0:5f:a0:05:fe:
49:d1:8e:fe:f0:1c:d6:5e:fd:43:f7:0d:51:23:28:
6e:a1:05:bb:61:7a:47:d1:ed:3e:fd:83:61:22:2e:
12:7f:a6:ae:31:b9:7c:9e:68:36:c9:8c:7f:66:c7:
c1:f7:ae:f3:ea:7c:50:e9:de:14:df:f2:0f:05:53:
d0:09:ed:77:e6:d8:03:d2:93:41:18:56:23:d8:67:
4f:e3:d0:61:04:93:e3:f5:c8:bb:2e:c8:9b:1c:c8:
a1:bd:69:00:a7:6b:3b:da:34:24:54:ba:0e:51:98:
0e:cb:17:88:2a:7b:0c:08:f6:d0:a4:45:ef:21:1f:
d3:26:58:f3:b8:d4:b1:1b:62:4f:d2:e3:79:ee:81:
c3:66:ec:ae:03:08:71:fa:16:ce:bb:dc:63:1b:66:
57:47:55:3d:24:54:94:95:10:79:42:ec:68:80:59:
eb:63:3e:3c:43:16:94:76:71:eb:0e:1b:34:e9:9d:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D1:32:89:A8:6D:90:AD:2B:A1:ED:33:05:23:70:D5:B3:FA:B0:CC
X509v3 Authority Key Identifier:
keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:50:7e:b6:10:32:46:d7:b2:b6:ac:af:98:fc:97:aa:07:96:
3c:0b:88:1e:74:83:34:f1:78:78:0c:8d:02:4c:78:49:e9:92:
3a:3f:7a:8c:78:e4:4d:f2:96:5d:6f:22:4e:e8:19:40:ca:5a:
d3:68:f3:bb:97:3e:1e:ba:0d:61:eb:21:a1:9d:78:2c:40:98:
19:c8:67:fd:6e:df:a1:a7:60:bb:f6:a9:bc:56:32:c2:ed:32:
eb:c0:e0:2c:24:36:92:b5:be:18:b2:08:ab:64:8d:b5:9c:7a:
74:93:fa:de:d1:91:b7:1c:c1:b0:d0:86:dc:2b:d9:7c:f1:2c:
67:68:e5:09:55:2c:05:4a:b4:31:15:20:4c:b9:62:73:e1:93:
4f:82:cb:fe:bc:bd:21:cc:d9:f0:a7:69:3b:4e:b2:c4:7a:2b:
b5:84:37:ae:2d:83:ed:45:bb:4c:2c:31:a6:c0:73:22:90:d5:
60:8b:b3:3e:25:9d:b0:36:f7:c0:d9:42:23:84:c7:b0:4e:0a:
c5:f2:91:fe:a5:e5:f5:ad:1b:70:58:28:d1:78:7d:a6:e5:4a:
09:5e:5e:59:8d:a0:d4:08:b9:e2:89:d9:48:7a:f5:ac:d2:72:
47:c6:d3:5c:9f:5b:ed:46:69:43:4c:54:11:22:ba:b7:79:54:
37:0d:ba:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoMwlKcqzzhnpHKhNd6IpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOWY4ZjMyMDgyMTUyMzU5Y2RhZjlhYWJkNGE1NTFmNGZi
NDAyMTMwHhcNMjUwOTA3MTAwMjQ0WhcNMjUwOTA4MTAwMjQ0WjAzMTEwLwYDVQQD
Eyg3NGQxMzI4OWE4NmQ5MGFkMmJhMWVkMzMwNTIzNzBkNWIzZmFiMGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswsXGkBV7LlElOJ9nJShNW3DAu47
+lisVVYwsn+np3SF91iQn2n3sQ35FIECehHmBKf86gGuGwFNYJ9qdNUYN2dbSG4q
wF+gBf5J0Y7+8BzWXv1D9w1RIyhuoQW7YXpH0e0+/YNhIi4Sf6auMbl8nmg2yYx/
ZsfB967z6nxQ6d4U3/IPBVPQCe135tgD0pNBGFYj2GdP49BhBJPj9ci7LsibHMih
vWkAp2s72jQkVLoOUZgOyxeIKnsMCPbQpEXvIR/TJljzuNSxG2JP0uN57oHDZuyu
Awhx+hbOu9xjG2ZXR1U9JFSUlRB5QuxogFnrYz48QxaUdnHrDhs06Z387QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTRMomobZCtK6HtMwUjcNWz+rDMMB8GA1UdIwQY
MBaAFHCfjzIIIVI1nNr5qr1KVR9PtAITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0otUE1nZ2hValdjMnZtcXZVcFZIMC0wQWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mMzc1MzgtN2Y5Zi00MjI4LWEzMWUt
MmRhYjQzYWMwNGIzLzEvY0otUE1nZ2hValdjMnZtcXZVcFZIMC0wQWhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mMzc1MzgtN2Y5Zi00MjI4LWEzMWUtMmRhYjQzYWMwNGIz
LzEvY0otUE1nZ2hValdjMnZtcXZVcFZIMC0wQWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlB+thAy
RteytqyvmPyXqgeWPAuIHnSDNPF4eAyNAkx4SemSOj96jHjkTfKWXW8iTugZQMpa
02jzu5c+HroNYeshoZ14LECYGchn/W7foadgu/apvFYywu0y68DgLCQ2krW+GLII
q2SNtZx6dJP63tGRtxzBsNCG3CvZfPEsZ2jlCVUsBUq0MRUgTLlic+GTT4LL/ry9
IczZ8KdpO06yxHortYQ3ri2D7UW7TCwxpsBzIpDVYIuzPiWdsDb3wNlCI4THsE4K
xfKR/qXl9a0bcFgo0Xh9puVKCV5eWY2g1Ai54onZSHr1rNJyR8bTXJ9b7UZpQ0xU
ESK6t3lUNw26Lg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:45 2025 by rpki-client