Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: M/Jbeh2b0WG7GyK6g/B24V02EJ3VFJtGK/VrILDmXRk=
Subject key identifier: DF:E9:37:21:53:AF:FA:3C:A3:91:B8:CC:2D:2B:0D:3C:E8:A7:21:8B
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 019921B05AF046F6AF488CDEF7AC8A74A946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 01:00:29 +0000
Manifest this update: Sun 07 Sep 2025 01:00:29 +0000
Manifest next update: Mon 08 Sep 2025 01:00:29 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: n9TenzPamxnOfWBME071B68nYvFqerQZ3LqhBkVnudA=)
2: XITchRD6fktx1wcD-akQf-lrx7Y.roa (hash: n2NJUWPmQKH808gxYEyCrRDNlUi5MnimQGzfm9J+OVg=)
3: gZLT5wUedCmW-PX2sDiQAVKNuT4.roa (hash: Bsg9vymR2URZ/xLntFSerTzkFFeEBNsWgx7gYqyDMPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:5a:f0:46:f6:af:48:8c:de:f7:ac:8a:74:a9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Sep 7 01:00:29 2025 GMT
Not After : Sep 8 01:00:29 2025 GMT
Subject: CN=dfe9372153affa3ca391b8cc2d2b0d3ce8a7218b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:43:b6:51:ca:fc:78:eb:3a:93:59:cf:fc:
c4:f6:c6:36:19:2f:7a:be:7b:2b:ba:6b:46:0a:7a:
45:fd:04:ab:28:a2:16:18:9f:bc:24:86:de:d7:58:
b4:96:d1:bf:32:cf:eb:ed:29:1f:c0:e0:cd:5c:8e:
08:8a:2f:db:3e:4e:37:d4:e4:27:74:c9:9d:0a:95:
6f:00:fe:54:c1:81:32:46:78:59:8a:30:58:ec:0a:
1e:2e:dc:a6:6f:e0:62:df:bc:b5:6a:09:a5:2a:bc:
93:d3:94:f7:1f:d0:c1:8f:4c:fe:ee:20:3a:01:bd:
24:fe:fb:49:26:9d:80:82:6a:34:0d:c6:7e:a9:44:
11:3b:c3:4a:72:33:0f:83:b9:98:a2:1d:21:c4:9a:
cf:b9:27:89:9e:20:2d:25:92:79:46:3d:80:fb:ef:
1f:06:ee:04:fc:d1:0b:43:f3:90:c0:60:2c:a5:22:
8e:13:04:6d:74:47:9d:91:cb:b9:de:1d:0a:3c:16:
30:f5:56:74:b3:ff:57:f7:8a:7f:aa:81:ab:1c:11:
c4:69:33:77:bb:c0:cc:f8:03:53:67:43:d9:3e:7f:
2c:72:38:46:89:30:2e:fd:66:a3:ee:5c:0f:a7:c6:
5f:0f:47:e7:1b:5d:7e:be:c3:a4:22:70:36:87:08:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E9:37:21:53:AF:FA:3C:A3:91:B8:CC:2D:2B:0D:3C:E8:A7:21:8B
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ce:84:08:22:ea:cb:1c:ae:f0:62:db:5d:3d:0e:d4:ef:61:
36:bd:10:0c:05:55:bf:81:8a:60:87:dd:e8:c5:d0:9a:00:cf:
2f:61:4a:b9:f6:b9:68:47:c0:8f:90:f5:10:2c:ec:1c:52:df:
02:7f:57:17:9a:d8:cd:59:05:5a:41:74:71:7c:4c:b0:ae:dc:
ab:05:73:a8:5c:14:82:26:51:7d:bd:f8:62:cc:b3:9d:52:1e:
60:aa:30:b9:74:56:6a:59:d7:dd:73:42:ee:9e:0c:04:46:c9:
fc:af:72:cd:7b:42:ff:5f:51:5d:fb:f4:79:46:ed:e9:aa:2b:
aa:02:f3:c0:a4:fb:9d:4a:7a:6c:fd:4f:f4:82:e8:36:37:cb:
bf:dc:57:c6:29:29:0e:7a:6a:19:89:51:41:f4:4f:ce:40:78:
cb:96:e5:17:04:e2:dd:75:3b:14:15:75:8f:86:ce:0d:6b:04:
5d:d2:10:dc:3e:a8:bc:0f:f6:99:15:f3:d5:61:65:86:83:4c:
84:ea:47:80:b2:87:77:2b:47:1f:da:3a:83:08:90:a0:04:9b:
33:55:09:f5:f1:5d:65:95:b7:34:c7:6f:b8:1b:a3:46:06:cb:
1a:95:67:25:6f:63:ee:92:4d:de:b8:e4:43:ca:e6:48:72:eb:
9b:5f:e1:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsFrwRvavSIze96yKdKlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGNmYWJlNDdlOTI4NWY2NWYxZjJkNjg2YmFhZjE1Yjhi
NDE3NzMwHhcNMjUwOTA3MDEwMDI5WhcNMjUwOTA4MDEwMDI5WjAzMTEwLwYDVQQD
EyhkZmU5MzcyMTUzYWZmYTNjYTM5MWI4Y2MyZDJiMGQzY2U4YTcyMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8BDtlHK/HjrOpNZz/zE9sY2GS96
vnsrumtGCnpF/QSrKKIWGJ+8JIbe11i0ltG/Ms/r7SkfwODNXI4Iii/bPk431OQn
dMmdCpVvAP5UwYEyRnhZijBY7AoeLtymb+Bi37y1agmlKryT05T3H9DBj0z+7iA6
Ab0k/vtJJp2Agmo0DcZ+qUQRO8NKcjMPg7mYoh0hxJrPuSeJniAtJZJ5Rj2A++8f
Bu4E/NELQ/OQwGAspSKOEwRtdEedkcu53h0KPBYw9VZ0s/9X94p/qoGrHBHEaTN3
u8DM+ANTZ0PZPn8scjhGiTAu/Waj7lwPp8ZfD0fnG11+vsOkInA2hwgEcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/pNyFTr/o8o5G4zC0rDTzopyGLMB8GA1UdIwQY
MBaAFAtM+r5H6ShfZfHy1oa6rxW4tBdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xYWJlOGEtNDVhMi00MTU2LTk4ZDct
NjgwNmUzZDRjZTRmLzEvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xYWJlOGEtNDVhMi00MTU2LTk4ZDctNjgwNmUzZDRjZTRm
LzEvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaM6ECCLq
yxyu8GLbXT0O1O9hNr0QDAVVv4GKYIfd6MXQmgDPL2FKufa5aEfAj5D1ECzsHFLf
An9XF5rYzVkFWkF0cXxMsK7cqwVzqFwUgiZRfb34YsyznVIeYKowuXRWalnX3XNC
7p4MBEbJ/K9yzXtC/19RXfv0eUbt6aorqgLzwKT7nUp6bP1P9ILoNjfLv9xXxikp
DnpqGYlRQfRPzkB4y5blFwTi3XU7FBV1j4bODWsEXdIQ3D6ovA/2mRXz1WFlhoNM
hOpHgLKHdytHH9o6gwiQoASbM1UJ9fFdZZW3NMdvuBujRgbLGpVnJW9j7pJN3rjk
Q8rmSHLrm1/hGQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:10 2025 by rpki-client