
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
File: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft (raw, json)
Hash identifier: RrtR//SFUhF6sW3X7md8AL4IZkb3vdOT4RXLLE17eX4=
Subject key identifier: AE:46:F4:7E:3C:04:72:07:9D:7F:51:5A:E0:94:4B:A1:A9:50:12:5E
Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
Certificate issuer: /CN=72e6826c8628489db041fe78c09ef28b5421e45c
Certificate serial: 01992FA35CBF153388863AF2A6B6B7EC708C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 18:00:59 +0000
Manifest this update: Tue 09 Sep 2025 18:00:59 +0000
Manifest next update: Wed 10 Sep 2025 18:00:59 +0000
Files and hashes: 1: 7Zrn_XBWju-Og5hlhKowGwl2kf8.roa (hash: CHg97u7b8WBMpcTvfGndNn9XQr55QZ9IWb+Xsbuljto=)
2: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl (hash: Qkuv+4206tXfe5yw+T5XZq6E7ULWTMdf8DWkfOuy+Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:5c:bf:15:33:88:86:3a:f2:a6:b6:b7:ec:70:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c
Validity
Not Before: Sep 9 18:00:59 2025 GMT
Not After : Sep 10 18:00:59 2025 GMT
Subject: CN=ae46f47e3c0472079d7f515ae0944ba1a950125e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:ad:fa:d8:e0:5c:66:f9:2f:15:77:44:79:
62:c0:8b:0e:ed:ba:97:89:5f:26:87:74:5b:26:bf:
4d:78:7f:38:63:7d:bc:92:7e:1d:75:4f:9b:f0:3f:
12:bd:2d:3e:2e:c2:cf:d6:94:9a:2a:36:48:8d:39:
62:2c:c9:df:c0:c7:6f:23:1b:f5:98:a5:be:ac:d5:
75:25:1d:85:57:05:22:27:ca:62:48:b0:7d:50:e9:
e5:72:27:2c:d1:78:e2:0f:8b:6c:04:b4:d3:ca:ac:
23:66:af:a8:60:45:55:85:e5:73:28:e5:9f:1b:8c:
07:d6:df:b8:d6:0d:29:0d:ab:37:b4:dd:f5:a6:70:
44:d0:1c:7b:dd:cc:ef:d1:0b:8f:76:74:48:c8:8e:
26:0d:46:36:88:41:d8:61:e9:68:1e:98:89:b0:0d:
ff:ab:d5:87:16:92:af:c7:6d:46:3f:60:91:09:18:
0b:5a:2a:32:f5:d6:84:5d:db:7b:e9:2c:3e:83:b2:
bb:92:3f:19:ab:1f:f1:f9:f0:02:51:54:7d:de:c5:
7b:b4:98:1a:8f:a9:57:5d:98:47:50:90:53:f0:7b:
21:7f:79:e1:1f:bd:e0:77:56:1e:b8:9b:93:ab:2a:
ba:2b:27:a1:24:ed:b6:85:0c:32:a3:02:da:ce:ea:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:F4:7E:3C:04:72:07:9D:7F:51:5A:E0:94:4B:A1:A9:50:12:5E
X509v3 Authority Key Identifier:
keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4d:48:ac:c2:84:8f:be:6d:6f:5c:fd:8b:96:c0:a3:fa:28:
d7:51:1e:7d:83:29:00:06:d4:a7:81:53:6c:55:ba:47:e8:91:
f3:51:de:70:19:c9:eb:f4:bb:59:ce:f8:7a:45:81:25:f3:81:
6a:aa:0b:be:c9:46:f9:f1:f7:d2:51:de:8d:0f:44:d9:7c:b2:
da:25:d7:f3:2e:f5:f8:9f:4a:df:18:37:23:94:26:a1:36:d8:
01:07:7a:b6:34:e7:41:76:e7:53:33:31:62:b5:2a:28:9b:f6:
fa:08:f5:10:89:a4:85:9c:58:c7:d1:bb:7f:65:51:1c:22:f4:
82:26:18:4f:67:47:bb:c1:ad:76:1d:a7:e5:b8:75:f5:d8:5b:
c0:20:e9:ef:a9:d9:03:e0:48:e4:98:fd:4d:1b:93:0f:24:97:
93:3b:0b:7b:c1:b4:75:b7:69:fc:f9:a9:82:f0:6e:b0:3c:cd:
62:6c:9d:c8:62:24:1c:32:5e:e1:98:7c:cb:41:21:4e:da:09:
cb:79:4f:c3:77:46:88:56:8e:7b:43:f6:77:a0:19:44:12:80:
6c:97:b4:e4:6c:dd:5a:20:bc:14:27:69:7a:82:cd:2a:3c:5c:
90:a4:f4:22:e0:27:70:f5:58:4e:0b:9d:48:2d:10:84:11:c9:
af:1b:11:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvo1y/FTOIhjrypra37HCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTY4MjZjODYyODQ4OWRiMDQxZmU3OGMwOWVmMjhiNTQy
MWU0NWMwHhcNMjUwOTA5MTgwMDU5WhcNMjUwOTEwMTgwMDU5WjAzMTEwLwYDVQQD
EyhhZTQ2ZjQ3ZTNjMDQ3MjA3OWQ3ZjUxNWFlMDk0NGJhMWE5NTAxMjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscWt+tjgXGb5LxV3RHliwIsO7bqX
iV8mh3RbJr9NeH84Y328kn4ddU+b8D8SvS0+LsLP1pSaKjZIjTliLMnfwMdvIxv1
mKW+rNV1JR2FVwUiJ8piSLB9UOnlcics0XjiD4tsBLTTyqwjZq+oYEVVheVzKOWf
G4wH1t+41g0pDas3tN31pnBE0Bx73czv0QuPdnRIyI4mDUY2iEHYYeloHpiJsA3/
q9WHFpKvx21GP2CRCRgLWioy9daEXdt76Sw+g7K7kj8Zqx/x+fACUVR93sV7tJga
j6lXXZhHUJBT8Hshf3nhH73gd1YeuJuTqyq6KyehJO22hQwyowLazup5nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5G9H48BHIHnX9RWuCUS6GpUBJeMB8GA1UdIwQY
MBaAFHLmgmyGKEidsEH+eMCe8otUIeRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEt
OTc1YWQwM2Q4OGU2LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEtOTc1YWQwM2Q4OGU2
LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE1IrMKE
j75tb1z9i5bAo/oo11EefYMpAAbUp4FTbFW6R+iR81HecBnJ6/S7Wc74ekWBJfOB
aqoLvslG+fH30lHejQ9E2Xyy2iXX8y71+J9K3xg3I5QmoTbYAQd6tjTnQXbnUzMx
YrUqKJv2+gj1EImkhZxYx9G7f2VRHCL0giYYT2dHu8Gtdh2n5bh19dhbwCDp76nZ
A+BI5Jj9TRuTDySXkzsLe8G0dbdp/PmpgvBusDzNYmydyGIkHDJe4Zh8y0EhTtoJ
y3lPw3dGiFaOe0P2d6AZRBKAbJe05GzdWiC8FCdpeoLNKjxckKT0IuAncPVYTgud
SC0QhBHJrxsRMA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:16:38 2025 by rpki-client