Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: ZvUC1EerAOeXfNhCAYKJBeA3ZfsF5i3DVZWe946oWcM=
Subject key identifier: BB:CA:45:C7:14:09:C8:BB:AF:C0:64:F1:B8:95:67:EC:07:90:75:9A
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 01989411A09D0CD2465FF75E76CEDADF2A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 1317
Signing time: Sun 10 Aug 2025 13:00:39 +0000
Manifest this update: Sun 10 Aug 2025 13:00:39 +0000
Manifest next update: Mon 11 Aug 2025 13:00:39 +0000
Files and hashes: 1: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: SAu92VT6vY4xztrrNVtqRSve8bH1HjhHKMHjXriHHF0=)
2: iViHONOdVrtJaKvFtb1zW5ZiFfE.roa (hash: y//sfFe0FaBOPBIT3c460VOfTsEZyJ671nHpKb/hUio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:a0:9d:0c:d2:46:5f:f7:5e:76:ce:da:df:2a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Aug 10 13:00:39 2025 GMT
Not After : Aug 11 13:00:39 2025 GMT
Subject: CN=bbca45c71409c8bbafc064f1b89567ec0790759a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:02:02:f2:9f:59:9f:14:c2:12:d3:e6:23:
c1:23:10:62:45:a5:4b:04:02:c6:ab:a9:4f:a0:d7:
cf:5f:c9:99:b0:d5:16:94:b8:70:2d:83:18:05:f1:
34:ce:4c:f4:85:40:06:c3:f1:32:8e:74:2b:0e:38:
e2:4a:ef:11:d3:ea:61:e0:94:05:2c:d6:15:ef:62:
fe:91:d4:08:16:8b:a5:e4:6f:11:6b:7a:1d:61:e1:
13:9f:7d:54:27:2a:73:91:e7:9e:bf:33:b9:60:c8:
64:f8:46:dd:6b:f3:4b:7b:fb:22:d6:16:dd:90:1a:
40:b4:eb:d0:76:3f:cc:94:81:7d:ed:b6:a3:f9:7f:
85:55:9a:92:97:45:cc:e3:eb:86:c6:6b:67:e7:cd:
b8:b1:d8:b6:34:73:9f:78:d4:2c:f9:6c:39:39:61:
76:d7:c0:76:dc:f4:0d:55:d3:c0:dc:f1:8b:b6:fd:
98:43:c2:0c:89:e8:00:94:08:5b:db:63:46:0a:f8:
f4:75:a5:7d:80:58:56:cc:03:c4:bd:b2:61:69:26:
00:ad:72:66:a1:24:94:b0:bd:19:e1:c1:89:21:64:
b1:87:d6:8b:e9:55:88:51:e0:26:ae:d5:d3:77:2c:
9f:f3:63:fd:fa:03:ff:1e:37:5b:16:ac:40:11:f8:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CA:45:C7:14:09:C8:BB:AF:C0:64:F1:B8:95:67:EC:07:90:75:9A
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e8:3e:f5:a8:10:40:1f:26:76:4a:03:26:27:33:6b:ff:31:
97:08:24:99:c8:85:54:53:7d:12:95:9f:1d:25:fb:1a:22:56:
50:02:77:32:11:8b:7c:de:82:eb:5d:8c:9a:7c:4a:7d:1b:30:
9c:a3:2f:b3:a5:cd:34:15:4a:7c:1d:1c:b6:cd:59:b1:67:67:
f1:5c:0e:ab:52:13:d1:fe:56:e2:93:86:01:36:a7:75:99:ee:
ad:82:3a:09:62:45:f0:c7:21:6d:2c:18:4a:77:6d:86:98:72:
90:3b:d2:61:cd:9b:7a:04:7d:59:9b:a8:75:22:25:d8:35:72:
55:f7:fc:0f:f9:1f:bb:94:cd:e1:ff:26:9e:c3:b1:ba:64:a5:
8e:f4:73:6d:75:18:94:b7:66:e6:98:8a:b4:6a:df:1a:c2:08:
06:ce:f4:ae:b3:f8:01:9d:fc:91:63:76:cf:3b:b4:7e:c0:ca:
aa:0a:12:18:84:09:b5:3d:55:a1:a4:df:54:5a:2e:f2:06:99:
a4:34:8e:d2:36:f4:eb:fe:0e:bf:30:ec:55:b4:4e:d2:29:5a:
2a:67:d5:3e:20:ab:43:41:8b:13:80:61:4e:a0:1d:02:b2:db:
7d:a6:2b:d5:ba:74:6f:8a:22:6d:b4:4e:a3:68:e0:fa:5c:98:
e5:b1:a3:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEaCdDNJGX/deds7a3yqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjJiNDFmZDM2NjE0ODM1ZTMzZmMwODgxZGIyNDYzOGIz
YTc4N2IwHhcNMjUwODEwMTMwMDM5WhcNMjUwODExMTMwMDM5WjAzMTEwLwYDVQQD
EyhiYmNhNDVjNzE0MDljOGJiYWZjMDY0ZjFiODk1NjdlYzA3OTA3NTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKECAvKfWZ8UwhLT5iPBIxBiRaVL
BALGq6lPoNfPX8mZsNUWlLhwLYMYBfE0zkz0hUAGw/EyjnQrDjjiSu8R0+ph4JQF
LNYV72L+kdQIFoul5G8Ra3odYeETn31UJypzkeeevzO5YMhk+Ebda/NLe/si1hbd
kBpAtOvQdj/MlIF97baj+X+FVZqSl0XM4+uGxmtn5824sdi2NHOfeNQs+Ww5OWF2
18B23PQNVdPA3PGLtv2YQ8IMiegAlAhb22NGCvj0daV9gFhWzAPEvbJhaSYArXJm
oSSUsL0Z4cGJIWSxh9aL6VWIUeAmrtXTdyyf82P9+gP/HjdbFqxAEfjO8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvKRccUCci7r8Bk8biVZ+wHkHWaMB8GA1UdIwQY
MBaAFHDytB/TZhSDXjP8CIHbJGOLOnh7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYt
MGEzNWI3ZWQ2M2M3LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYtMGEzNWI3ZWQ2M2M3
LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOg+9agQ
QB8mdkoDJicza/8xlwgkmciFVFN9EpWfHSX7GiJWUAJ3MhGLfN6C612MmnxKfRsw
nKMvs6XNNBVKfB0cts1ZsWdn8VwOq1IT0f5W4pOGATandZnurYI6CWJF8MchbSwY
SndthphykDvSYc2begR9WZuodSIl2DVyVff8D/kfu5TN4f8mnsOxumSljvRzbXUY
lLdm5piKtGrfGsIIBs70rrP4AZ38kWN2zzu0fsDKqgoSGIQJtT1VoaTfVFou8gaZ
pDSO0jb06/4OvzDsVbRO0ilaKmfVPiCrQ0GLE4BhTqAdArLbfaYr1bp0b4oibbRO
o2jg+lyY5bGjCQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:50 2025 by rpki-client