Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier: D03HQMFSEu0BXxawOBiB8bhBfjaGdvX9HNQnaXW8DwY=
Subject key identifier: 75:EE:E0:54:3F:40:2F:03:A1:D9:0E:DF:3E:41:3B:CF:27:9B:99:93
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 019921E7B08FEF3D5FBEFEF488A07E960C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number: C4
Signing time: Sun 07 Sep 2025 02:00:56 +0000
Manifest this update: Sun 07 Sep 2025 02:00:56 +0000
Manifest next update: Mon 08 Sep 2025 02:00:56 +0000
Files and hashes: 1: T0gIBaDZSSA1_Pyt8UpVKwt95_0.roa (hash: nbenz1vYxVFMHFnGvbQUJouQW7ZpPmtwGQgZKKoqSuc=)
2: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: MkV6h/KUBNFCKRP31/wuzeD5pgTrJlhZPkbV/NYjj/o=)
3: l3EQEBZnleFof5yb88UhTSSdRTM.roa (hash: UQRjHQuRnFXbfdwyx6MJct5Sj+7na+HTqU/QptK8INI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:b0:8f:ef:3d:5f:be:fe:f4:88:a0:7e:96:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Sep 7 02:00:56 2025 GMT
Not After : Sep 8 02:00:56 2025 GMT
Subject: CN=75eee0543f402f03a1d90edf3e413bcf279b9993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:06:a5:32:4a:67:51:ff:ba:02:ca:62:1f:
d3:10:6c:58:a0:45:22:c1:7e:2a:2d:a5:b9:4c:1b:
2d:39:26:17:45:dd:42:f3:78:80:d9:92:2c:f4:c9:
ea:57:26:cd:d3:c2:bc:a7:7a:28:20:8f:85:bd:d2:
10:86:3c:e7:cc:56:55:86:04:03:fd:43:c7:39:09:
5f:ea:fc:19:69:89:c6:49:f3:7a:5a:26:10:e8:3b:
46:b2:6b:5f:39:f2:0b:0d:97:f5:86:c2:d6:9a:cd:
c2:49:d5:b5:76:48:01:f1:ba:17:9e:df:2d:e7:94:
1e:fd:1e:c1:d9:dd:e5:25:27:94:6b:ad:88:61:0f:
b0:a2:63:32:e0:89:ba:f8:b3:fa:39:d3:ed:4a:4c:
57:0d:65:4f:dd:15:03:8b:a5:4a:1e:e8:bf:35:f0:
a2:b6:fc:2c:14:fd:e7:7f:fa:49:55:f7:63:d9:90:
84:83:e2:f7:0d:a1:3c:80:80:8c:66:c9:74:c5:b2:
42:a8:2b:43:dc:d3:d3:af:c7:8c:8f:27:28:11:a5:
77:48:81:81:d7:91:4a:8b:ad:3a:77:53:11:e7:01:
91:3d:9d:99:90:24:fa:02:c8:15:77:95:93:a1:f3:
3d:a9:fe:1b:56:f7:26:7e:10:dc:ee:99:1f:84:02:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EE:E0:54:3F:40:2F:03:A1:D9:0E:DF:3E:41:3B:CF:27:9B:99:93
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:52:23:2d:0a:d9:0a:06:24:76:3f:79:38:97:d9:47:96:52:
74:44:aa:d0:24:16:4b:7a:d8:fb:69:d2:99:17:1b:f9:c2:3e:
9a:10:8e:c2:3b:f1:35:a4:3a:89:dd:a7:37:48:0b:24:58:9d:
2b:0c:22:9d:a3:40:53:b3:cd:56:1f:81:e0:df:6e:eb:6a:c6:
bc:b9:e4:46:41:bd:11:cb:73:02:4d:39:e5:2f:63:d1:7d:b7:
09:4d:c3:b4:37:01:00:27:47:20:d0:00:df:bd:9f:2c:83:d7:
d2:82:90:21:b1:45:b2:24:e3:15:91:be:80:85:e2:3e:ef:99:
1f:91:b9:fd:e1:92:a7:12:e8:90:2c:37:15:70:87:ce:9c:a3:
69:23:2d:a8:f3:fd:fc:b4:30:c3:21:89:39:22:73:c2:72:53:
8c:b5:a1:2b:b7:50:3c:c1:fe:8c:93:cf:bb:9a:e1:c0:8a:5f:
ea:48:46:28:9a:70:fb:74:28:89:41:70:da:f0:15:d7:cc:9e:
1c:9a:e9:cf:fc:44:5c:e1:9e:d0:f5:0c:e8:12:ed:61:51:02:
6e:d5:37:1a:f5:0b:dc:38:c6:58:57:eb:8f:ba:a1:2b:04:bf:
28:0e:a1:c6:3f:7e:b2:15:4c:79:1d:b2:e2:48:97:d4:93:60:
ed:e4:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:13 2025 by rpki-client