Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: O+FmDEOnaTq8jeM6ipEM2ohyD/dMAIS3p4ygnmeaMkQ=
Subject key identifier: E3:04:38:20:1B:3F:3E:86:C3:6B:A7:A8:3E:7F:78:90:BE:DA:B1:BB
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 019A4E4F7A15F1999B9637F64EF5D610F7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 1724
Signing time: Tue 04 Nov 2025 10:00:22 +0000
Manifest this update: Tue 04 Nov 2025 10:00:22 +0000
Manifest next update: Wed 05 Nov 2025 10:00:22 +0000
Files and hashes: 1: ELVDoYmFaTCtnTMhAqZufMc8mXg.roa (hash: GX/uRjpcUEeVnkiAfonTZ3Q7zJlqdixXVsuNiqh4BrE=)
2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: iRJDwLjrBY3V0QpPB0o+K0gxF83XpdRL7KNriZz7nac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7a:15:f1:99:9b:96:37:f6:4e:f5:d6:10:f7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Nov 4 10:00:22 2025 GMT
Not After : Nov 5 10:00:22 2025 GMT
Subject: CN=e30438201b3f3e86c36ba7a83e7f7890bedab1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:3f:23:24:6d:24:33:72:91:82:06:81:0b:
2a:76:73:07:f6:58:df:de:7d:81:08:b6:48:7a:04:
a1:17:98:d1:5c:6c:60:de:87:d1:8d:76:5b:eb:e9:
19:41:f9:68:d1:4c:e2:73:2f:46:57:72:1d:b7:f0:
71:9a:48:b2:41:e7:be:d4:fd:83:f0:f3:c2:3a:9e:
58:f2:8b:72:f2:77:ae:5a:2b:23:80:fd:6a:c0:3d:
fd:d6:46:6b:b7:70:f7:ac:1b:e9:87:ca:e1:47:ae:
30:8f:2b:d7:42:7c:cc:02:64:5d:23:74:6b:ff:16:
f7:bf:69:5b:21:57:c1:0e:01:05:3e:73:6f:9e:24:
ad:db:b3:66:8e:e5:85:5f:26:68:40:11:54:79:9e:
d2:46:f8:cb:ae:e0:69:0c:34:92:7d:9b:58:ab:38:
5c:9e:25:f1:f7:1e:e1:7c:95:f1:17:d2:23:82:12:
cc:85:0e:88:fc:68:2e:32:37:ca:27:f8:b2:e8:ab:
f2:5c:53:97:29:52:c2:fa:3b:dc:58:e7:fb:6d:ac:
f2:e0:ff:04:0a:09:d5:67:43:69:ad:c0:84:6b:a9:
92:d5:00:3f:c9:75:9c:de:65:85:50:04:86:88:60:
00:a0:14:1e:2c:43:db:9f:60:cc:9a:c4:36:43:8e:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:04:38:20:1B:3F:3E:86:C3:6B:A7:A8:3E:7F:78:90:BE:DA:B1:BB
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e5:1b:f2:ed:8b:0c:a9:c8:03:03:b7:17:4f:06:a0:9c:04:
10:f7:9b:a5:ee:73:a8:d0:97:31:2f:95:97:9f:9e:04:6d:6c:
a3:a2:46:8a:97:eb:12:67:e7:c7:fa:b5:0a:f9:f9:f0:95:dc:
c5:0b:56:b9:3c:81:27:f3:bf:18:ab:b4:7e:5b:38:c0:83:10:
8e:ab:ed:4e:7d:4f:34:e8:f4:6c:65:2f:e0:99:f3:3b:87:45:
cb:97:79:94:ec:b1:a2:3a:d7:fd:8a:29:81:82:2a:8c:81:ec:
d4:36:5a:a9:68:db:39:e4:83:44:8f:77:f7:8c:b6:08:29:60:
e5:48:1b:b7:84:2c:ba:6a:64:43:4e:74:ed:5f:bd:2c:4a:f7:
72:fa:c6:0c:5b:99:57:5e:84:58:23:5b:c1:11:c3:2a:10:45:
4e:d1:ac:b2:b5:26:41:e1:ae:77:11:52:d3:db:ac:5d:99:09:
9d:7e:9e:04:9d:d0:d5:6c:8e:0a:15:6a:53:0c:06:35:62:a7:
de:ec:96:be:e6:c5:33:05:0a:be:2a:90:96:a4:ed:9d:8d:9d:
c2:a6:aa:9d:0f:76:14:fd:b2:49:9e:a0:3e:8a:af:fd:9b:4e:
c7:94:63:2d:52:c0:40:e6:12:00:57:81:0c:05:6e:8d:b5:36:
8f:16:b4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT3oV8Zmbljf2TvXWEPfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTgxZmI1Y2YwZmIzMmM0NTc1Zjg0MTNhY2JkNDFhYTg0
YjgyZjQwHhcNMjUxMTA0MTAwMDIyWhcNMjUxMTA1MTAwMDIyWjAzMTEwLwYDVQQD
EyhlMzA0MzgyMDFiM2YzZTg2YzM2YmE3YTgzZTdmNzg5MGJlZGFiMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0g/IyRtJDNykYIGgQsqdnMH9ljf
3n2BCLZIegShF5jRXGxg3ofRjXZb6+kZQflo0Uzicy9GV3Idt/BxmkiyQee+1P2D
8PPCOp5Y8oty8neuWisjgP1qwD391kZrt3D3rBvph8rhR64wjyvXQnzMAmRdI3Rr
/xb3v2lbIVfBDgEFPnNvniSt27NmjuWFXyZoQBFUeZ7SRvjLruBpDDSSfZtYqzhc
niXx9x7hfJXxF9IjghLMhQ6I/GguMjfKJ/iy6KvyXFOXKVLC+jvcWOf7bazy4P8E
CgnVZ0NprcCEa6mS1QA/yXWc3mWFUASGiGAAoBQeLEPbn2DMmsQ2Q45zuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMEOCAbPz6Gw2unqD5/eJC+2rG7MB8GA1UdIwQY
MBaAFHLoH7XPD7MsRXX4QTrL1BqoS4L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQt
Y2RhNmUxOWZmYjg4LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDY4YTctNWY4Yy00ZjMyLWFiOTQtY2RhNmUxOWZmYjg4
LzEvY3VnZnRjOFBzeXhGZGZoQk9zdlVHcWhMZ3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuUb8u2L
DKnIAwO3F08GoJwEEPebpe5zqNCXMS+Vl5+eBG1so6JGipfrEmfnx/q1Cvn58JXc
xQtWuTyBJ/O/GKu0fls4wIMQjqvtTn1PNOj0bGUv4JnzO4dFy5d5lOyxojrX/Yop
gYIqjIHs1DZaqWjbOeSDRI9394y2CClg5Ugbt4QsumpkQ0507V+9LEr3cvrGDFuZ
V16EWCNbwRHDKhBFTtGssrUmQeGudxFS09usXZkJnX6eBJ3Q1WyOChVqUwwGNWKn
3uyWvubFMwUKviqQlqTtnY2dwqaqnQ92FP2ySZ6gPoqv/ZtOx5RjLVLAQOYSAFeB
DAVujbU2jxa0uw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:13 2025 by rpki-client