Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: vYKe09M0UXUVjXCkGbkHxLXCOeBE6ZpXwNYWTWttf6w=
Subject key identifier: C6:28:AA:8D:24:E9:68:3E:05:4D:FA:A1:DA:4F:BB:06:83:F4:9C:1B
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 0198752BB4A083A71183622E6B69EB0FC562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 13:00:55 +0000
Manifest this update: Mon 04 Aug 2025 13:00:55 +0000
Manifest next update: Tue 05 Aug 2025 13:00:55 +0000
Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: Mok+cIg/WAUoHLqllzyMJzMKK4db/BsfOlJvIHhDW0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:b4:a0:83:a7:11:83:62:2e:6b:69:eb:0f:c5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Aug 4 13:00:55 2025 GMT
Not After : Aug 5 13:00:55 2025 GMT
Subject: CN=c628aa8d24e9683e054dfaa1da4fbb0683f49c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:07:9f:d9:e3:2e:8e:bc:6b:43:9c:a0:75:
19:10:79:86:45:e7:f0:c8:3c:a1:2c:6e:e7:40:3e:
03:9e:ef:da:06:6f:51:b3:4e:98:6e:92:94:58:12:
8f:12:75:7a:76:6d:85:22:11:a7:79:f1:23:6e:0d:
c8:90:24:db:d0:a0:a2:d1:bb:f7:e9:ef:39:05:ff:
55:e5:6a:82:55:95:3e:37:b4:8a:bf:26:ba:de:5f:
f9:c0:5c:63:2a:77:f4:a4:37:c8:a1:b5:0a:27:15:
5b:b0:f0:8f:9f:e4:3f:99:2d:da:1f:81:73:b5:48:
b9:96:8a:20:f5:34:bf:91:ba:58:3f:20:38:cb:38:
d7:56:ac:9a:13:d8:4e:ff:7d:db:fb:bd:15:82:0f:
f7:a3:a5:a5:3a:9c:2a:4b:20:7d:67:ab:1b:31:9b:
be:9f:8f:97:8e:4e:e4:22:18:31:60:a3:3f:fc:a3:
3d:4b:00:b9:29:bb:56:fc:28:fb:9f:f5:d2:0c:38:
0a:7b:20:e4:51:7f:0a:c6:ef:0d:1f:f2:c4:e0:fd:
2e:46:81:35:f7:20:58:49:ea:96:08:31:d7:e6:b9:
6d:db:fc:bb:a9:9c:8e:5a:08:6c:b7:be:08:15:ff:
d1:91:ea:e9:af:9e:60:6b:aa:ee:40:1d:7e:67:8d:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:AA:8D:24:E9:68:3E:05:4D:FA:A1:DA:4F:BB:06:83:F4:9C:1B
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7f:08:27:73:bb:63:57:66:4a:7f:d3:40:bf:b8:e1:a7:40:
6a:9e:c6:fe:cc:c5:b6:50:0e:07:48:9a:ed:ce:2f:36:ee:e9:
77:eb:31:45:f1:e0:c3:65:92:c4:94:86:02:00:4a:48:d8:00:
60:cf:d9:52:9d:7f:a2:68:4d:a1:28:13:5d:f5:31:a1:cd:48:
7a:b2:0a:0b:eb:bf:38:bd:ef:a5:0c:97:85:f9:d7:b4:62:98:
e3:2f:28:2a:ed:f9:98:2c:10:ce:c7:df:b8:51:7a:aa:f4:ab:
06:eb:be:11:6c:eb:e4:70:c8:79:57:39:39:44:b0:2a:95:8a:
b6:22:d7:28:79:36:b0:5e:83:58:3d:c9:76:89:24:16:cf:83:
05:00:44:56:a3:ff:f2:42:1d:f9:3d:2c:b8:73:da:fa:51:67:
1c:03:61:c1:1b:87:a2:49:0f:08:31:f3:f5:c7:3e:74:10:c7:
1f:8e:e8:77:7e:4b:ac:9f:df:ee:da:6b:c6:1b:b8:3c:9b:27:
7f:ca:40:85:8a:f5:cb:52:fb:a0:a0:cb:f1:76:4c:e7:f8:49:
be:ae:5e:70:3b:98:96:00:fe:e5:5f:78:74:80:63:8e:a5:32:
eb:dd:05:58:85:2c:fc:20:c7:9b:72:42:4a:aa:d5:97:e3:48:
af:ba:91:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1K7Sgg6cRg2Iua2nrD8ViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYWQzNTNjYzFhMGQxNmQ1ZThlMTRhMzc1NzVhNmYzZDYw
NTYzZjgwHhcNMjUwODA0MTMwMDU1WhcNMjUwODA1MTMwMDU1WjAzMTEwLwYDVQQD
EyhjNjI4YWE4ZDI0ZTk2ODNlMDU0ZGZhYTFkYTRmYmIwNjgzZjQ5YzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHUHn9njLo68a0OcoHUZEHmGRefw
yDyhLG7nQD4Dnu/aBm9Rs06YbpKUWBKPEnV6dm2FIhGnefEjbg3IkCTb0KCi0bv3
6e85Bf9V5WqCVZU+N7SKvya63l/5wFxjKnf0pDfIobUKJxVbsPCPn+Q/mS3aH4Fz
tUi5loog9TS/kbpYPyA4yzjXVqyaE9hO/33b+70Vgg/3o6WlOpwqSyB9Z6sbMZu+
n4+Xjk7kIhgxYKM//KM9SwC5KbtW/Cj7n/XSDDgKeyDkUX8Kxu8NH/LE4P0uRoE1
9yBYSeqWCDHX5rlt2/y7qZyOWghst74IFf/Rkerpr55ga6ruQB1+Z42sUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYoqo0k6Wg+BU36odpPuwaD9JwbMB8GA1UdIwQY
MBaAFHCtNTzBoNFtXo4Uo3V1pvPWBWP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1Zjkt
MTUwNGVhNTNlMjU1LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1ZjktMTUwNGVhNTNlMjU1
LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPn8IJ3O7
Y1dmSn/TQL+44adAap7G/szFtlAOB0ia7c4vNu7pd+sxRfHgw2WSxJSGAgBKSNgA
YM/ZUp1/omhNoSgTXfUxoc1IerIKC+u/OL3vpQyXhfnXtGKY4y8oKu35mCwQzsff
uFF6qvSrBuu+EWzr5HDIeVc5OUSwKpWKtiLXKHk2sF6DWD3JdokkFs+DBQBEVqP/
8kId+T0suHPa+lFnHANhwRuHokkPCDHz9cc+dBDHH47od35LrJ/f7tprxhu4PJsn
f8pAhYr1y1L7oKDL8XZM5/hJvq5ecDuYlgD+5V94dIBjjqUy690FWIUs/CDHm3JC
SqrVl+NIr7qRWg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:22:13 2025 by rpki-client