Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier: C2EvuKgd0Jgmj+U7mdzasdjTFZIG82KJSXSOWvvlvSA=
Subject key identifier: B0:6D:D5:42:54:80:7A:26:EB:19:CC:11:60:28:AE:D0:C2:82:16:70
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 0198C6496612FD933E369957A8B4719A714B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number: 135A
Signing time: Wed 20 Aug 2025 07:02:35 +0000
Manifest this update: Wed 20 Aug 2025 07:02:35 +0000
Manifest next update: Thu 21 Aug 2025 07:02:35 +0000
Files and hashes: 1: HSf-a0eTcicBmzn4zJZRWXp92WE.roa (hash: vvlQV7Jpi0XVGKQA4HOtArKcD3xjeMm171XNaqqkcT0=)
2: a5SThzVTiz_HAgBiI_2C-cBicRU.roa (hash: cXR8rbnSwDhsbHRTW7l3Pqi32yZZ/V3whRHlpIMP7KU=)
3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: BwIBmRO64OiYyoOYzsytiGWRLlS15D+wipSXn+aJmsU=)
4: e8yOi_zjBd2PptdyDsyc4j2wCEY.roa (hash: gTBImvzLksx7wicV0C8XssUh2BDoKizjYT0J7tkJ1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:66:12:fd:93:3e:36:99:57:a8:b4:71:9a:71:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Aug 20 07:02:35 2025 GMT
Not After : Aug 21 07:02:35 2025 GMT
Subject: CN=b06dd54254807a26eb19cc116028aed0c2821670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:2e:c4:8f:11:38:55:3a:09:59:41:72:00:
76:ac:6a:5b:4c:38:41:a4:d2:13:b4:e7:0f:27:86:
3f:a8:a1:b1:23:2e:27:93:d3:30:c1:64:4d:e9:36:
10:20:24:66:3a:16:50:9a:bf:49:01:f7:14:df:c0:
e3:b1:a2:f2:e2:fa:87:f9:e4:59:5a:23:b1:8b:b9:
b4:39:29:b9:d4:fd:7e:c4:e6:01:a5:0d:89:b3:c2:
46:d7:55:5e:a2:26:82:be:be:fb:22:3c:d6:0b:c1:
1c:b0:a3:99:7e:6e:6e:0e:0e:0e:52:3d:28:43:90:
93:b7:95:81:cb:05:f6:22:f6:54:1f:cb:38:eb:55:
a5:89:bb:27:a1:24:f3:b9:30:92:1c:6c:d2:87:95:
f9:4e:2f:a0:46:1d:d0:fb:eb:32:27:ae:c6:6e:bd:
50:33:1b:4f:5e:9d:6c:a1:45:3e:68:d1:fd:2b:ec:
99:bf:0f:6c:19:67:da:fb:e4:27:7d:bc:42:d6:02:
74:67:db:d2:ff:cf:f6:61:1e:8e:61:eb:d9:af:74:
c0:44:2c:cb:60:10:92:0c:26:54:c5:7f:b9:36:ec:
ec:9a:4f:9f:d2:09:9c:53:f2:d2:70:02:ea:f6:fc:
1d:19:de:d1:89:75:02:1d:45:74:95:fa:76:7f:1d:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:D5:42:54:80:7A:26:EB:19:CC:11:60:28:AE:D0:C2:82:16:70
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:58:92:1b:4d:b2:84:d3:c8:f5:eb:f1:67:d6:b2:39:33:8a:
27:06:d5:30:c6:5d:36:f2:30:1c:2a:76:6d:bc:51:a7:16:51:
e6:8a:11:70:ef:f9:0d:fc:fb:e4:56:02:13:2c:9a:ef:ac:ff:
1a:8d:b7:f3:dc:8c:05:47:13:db:6e:25:39:33:9e:1d:f1:67:
9a:80:6f:c9:07:3c:ea:b3:aa:63:f1:c9:fa:90:ba:1e:5f:7d:
51:b5:70:0c:80:64:b0:af:c1:86:27:76:48:34:4e:ee:7f:5c:
99:e7:ae:a0:17:7d:a1:f8:af:15:96:20:5f:3f:56:7e:b6:a8:
5a:6e:32:05:87:9d:d7:c5:55:dc:48:61:10:b3:2b:5f:ce:eb:
6f:55:96:a3:b8:12:35:14:f4:72:09:85:e1:bc:bd:8b:b2:aa:
42:e5:d4:7d:04:c5:fe:a3:ba:2f:3b:f6:f9:9d:b5:13:e8:fd:
0c:43:11:d1:66:26:9f:83:38:85:31:34:2b:bc:b0:ff:c8:e4:
d2:e1:c0:61:d3:2a:a4:c0:f6:f4:c9:63:e1:2b:3b:71:c7:39:
17:fe:ce:e4:ff:36:09:5a:d0:a7:36:94:e9:0c:79:1f:55:c4:
98:88:c7:74:75:c2:a5:47:50:da:f2:ce:42:58:d2:19:8b:04:
31:10:cf:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjGSWYS/ZM+NplXqLRxmnFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTVlZDI3NTAwNTQwOGQyYTg2YTIzMDM3MDE3NDQ0MzBl
ZGEzNGEwHhcNMjUwODIwMDcwMjM1WhcNMjUwODIxMDcwMjM1WjAzMTEwLwYDVQQD
EyhiMDZkZDU0MjU0ODA3YTI2ZWIxOWNjMTE2MDI4YWVkMGMyODIxNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWYuxI8ROFU6CVlBcgB2rGpbTDhB
pNITtOcPJ4Y/qKGxIy4nk9MwwWRN6TYQICRmOhZQmr9JAfcU38DjsaLy4vqH+eRZ
WiOxi7m0OSm51P1+xOYBpQ2Js8JG11VeoiaCvr77IjzWC8EcsKOZfm5uDg4OUj0o
Q5CTt5WBywX2IvZUH8s461WlibsnoSTzuTCSHGzSh5X5Ti+gRh3Q++syJ67Gbr1Q
MxtPXp1soUU+aNH9K+yZvw9sGWfa++QnfbxC1gJ0Z9vS/8/2YR6OYevZr3TARCzL
YBCSDCZUxX+5Nuzsmk+f0gmcU/LScALq9vwdGd7RiXUCHUV0lfp2fx1xOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBt1UJUgHom6xnMEWAortDCghZwMB8GA1UdIwQY
MBaAFHAV7SdQBUCNKoaiMDcBdEQw7aNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEt
NGRhZDQ4YTE2ZTQyLzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEtNGRhZDQ4YTE2ZTQy
LzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxliSG02y
hNPI9evxZ9ayOTOKJwbVMMZdNvIwHCp2bbxRpxZR5ooRcO/5Dfz75FYCEyya76z/
Go2389yMBUcT224lOTOeHfFnmoBvyQc86rOqY/HJ+pC6Hl99UbVwDIBksK/Bhid2
SDRO7n9cmeeuoBd9ofivFZYgXz9WfraoWm4yBYed18VV3EhhELMrX87rb1WWo7gS
NRT0cgmF4by9i7KqQuXUfQTF/qO6Lzv2+Z21E+j9DEMR0WYmn4M4hTE0K7yw/8jk
0uHAYdMqpMD29Mlj4Ss7ccc5F/7O5P82CVrQpzaU6Qx5H1XEmIjHdHXCpUdQ2vLO
QljSGYsEMRDP/Q==
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:21:24 2025 by rpki-client