
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: bm9iFaZKEPPncG2bGVFMWUTz6XbbVTiWzSTc/vjGwUw=
Subject key identifier: CF:C1:60:F6:57:D7:48:50:BA:F3:68:2F:52:47:A6:57:E6:D7:44:84
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 01988B7CCA19E5A29E8BA36A7BB98E82BB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 01C6
Signing time: Fri 08 Aug 2025 21:01:07 +0000
Manifest this update: Fri 08 Aug 2025 21:01:07 +0000
Manifest next update: Sat 09 Aug 2025 21:01:07 +0000
Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: Lnfo7aHM9B0MTQNejPPAlG96Fx/52h4DiiNIY4ZM0Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:ca:19:e5:a2:9e:8b:a3:6a:7b:b9:8e:82:bb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Aug 8 21:01:07 2025 GMT
Not After : Aug 9 21:01:07 2025 GMT
Subject: CN=cfc160f657d74850baf3682f5247a657e6d74484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:70:73:75:db:e5:29:da:92:b9:37:e9:d0:
1b:f8:20:c6:20:9a:18:b4:06:20:4c:39:a2:bb:9c:
2c:78:97:d7:2d:ca:3a:c8:03:90:8a:67:b1:ee:c4:
3b:86:2d:dd:c5:41:77:d1:ff:92:93:2e:13:1d:37:
f8:39:a5:1e:e8:6f:d9:96:33:48:0b:b2:b4:8f:d0:
81:85:1f:64:63:34:de:ce:2e:6f:91:8b:a1:13:e7:
29:35:eb:90:5d:05:65:8f:39:68:ae:53:e3:84:bc:
68:82:f5:e9:cb:d0:9a:e0:d6:66:3f:8d:c8:66:66:
be:08:f5:3e:75:77:43:d3:77:4f:6c:b8:88:dd:49:
67:0e:f1:78:c4:09:5b:2e:32:62:31:5b:8e:77:89:
83:df:b1:0b:b4:bd:e2:f9:98:96:1f:3f:d1:41:96:
e5:53:2f:77:c9:47:90:e7:10:e2:82:8b:46:8f:86:
89:ee:51:89:5a:73:06:44:af:6c:ac:a3:a0:50:ca:
70:d9:8c:94:10:41:8d:d4:ad:e6:11:09:24:fa:10:
94:e3:01:c4:c8:1f:5c:bd:dc:4e:21:96:8f:76:93:
07:3f:a5:3f:5f:e6:98:6b:94:9c:97:38:53:aa:28:
68:2e:87:09:c3:74:d1:c5:85:5d:39:cd:8e:1b:30:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C1:60:F6:57:D7:48:50:BA:F3:68:2F:52:47:A6:57:E6:D7:44:84
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a5:15:34:28:a4:ad:f0:ca:80:6e:f6:db:b7:06:b7:21:47:
f7:51:aa:33:e5:ea:d0:41:c2:4d:ca:e0:a3:1b:b8:41:f7:31:
6d:b3:16:f4:be:0a:bb:8b:46:83:22:da:24:2a:4e:2c:39:9f:
f1:14:fe:95:ab:45:dc:38:0e:7c:31:36:38:af:f2:1f:20:4d:
82:4b:d4:a1:c9:a4:07:73:2c:ff:7a:93:a2:9c:5e:31:10:9e:
ea:01:5b:02:2c:0f:a7:37:10:ac:a5:f6:87:4d:f7:1e:5a:bf:
88:d3:f1:2b:92:41:7c:8b:4a:99:3c:b3:e7:a4:c4:bf:5e:26:
3c:a6:22:1e:ee:3d:52:71:fa:ca:b5:7c:1e:2c:bb:fc:97:de:
0e:3d:15:68:4b:27:56:06:22:4a:98:ae:d1:cf:d7:0b:f4:c2:
fa:2f:3e:32:f0:18:79:bb:00:8a:50:3d:61:06:13:b4:e8:c2:
6d:03:a7:e0:fd:31:49:54:48:27:f4:8c:9f:09:09:fc:9c:80:
84:1a:82:06:07:c2:2b:30:0a:38:b2:e9:85:05:45:47:2d:3d:
8d:88:4c:6c:84:1a:be:e5:03:7e:a8:92:d2:05:95:b7:3b:a8:
3e:6f:4b:a0:d3:79:fe:63:51:b5:1b:ab:15:c6:6d:58:cd:23:
0c:60:82:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfMoZ5aKei6Nqe7mOgrsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMzZlMDRlNTNiOWQzOTY3Y2Y5ZDQxOGU3OGI2MGJiYWQw
NzU4MzEwHhcNMjUwODA4MjEwMTA3WhcNMjUwODA5MjEwMTA3WjAzMTEwLwYDVQQD
EyhjZmMxNjBmNjU3ZDc0ODUwYmFmMzY4MmY1MjQ3YTY1N2U2ZDc0NDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jFwc3Xb5Snakrk36dAb+CDGIJoY
tAYgTDmiu5wseJfXLco6yAOQimex7sQ7hi3dxUF30f+Sky4THTf4OaUe6G/ZljNI
C7K0j9CBhR9kYzTezi5vkYuhE+cpNeuQXQVljzlorlPjhLxogvXpy9Ca4NZmP43I
Zma+CPU+dXdD03dPbLiI3UlnDvF4xAlbLjJiMVuOd4mD37ELtL3i+ZiWHz/RQZbl
Uy93yUeQ5xDigotGj4aJ7lGJWnMGRK9srKOgUMpw2YyUEEGN1K3mEQkk+hCU4wHE
yB9cvdxOIZaPdpMHP6U/X+aYa5SclzhTqihoLocJw3TRxYVdOc2OGzBukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/BYPZX10hQuvNoL1JHplfm10SEMB8GA1UdIwQY
MBaAFHA24E5TudOWfPnUGOeLYLutB1gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEt
ODlkZWYwMDgyZTJhLzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEtODlkZWYwMDgyZTJh
LzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6UVNCik
rfDKgG7227cGtyFH91GqM+Xq0EHCTcrgoxu4QfcxbbMW9L4Ku4tGgyLaJCpOLDmf
8RT+latF3DgOfDE2OK/yHyBNgkvUocmkB3Ms/3qTopxeMRCe6gFbAiwPpzcQrKX2
h033Hlq/iNPxK5JBfItKmTyz56TEv14mPKYiHu49UnH6yrV8Hiy7/JfeDj0VaEsn
VgYiSpiu0c/XC/TC+i8+MvAYebsAilA9YQYTtOjCbQOn4P0xSVRIJ/SMnwkJ/JyA
hBqCBgfCKzAKOLLphQVFRy09jYhMbIQavuUDfqiS0gWVtzuoPm9LoNN5/mNRtRur
FcZtWM0jDGCCDw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:32 2025 by rpki-client