Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier: TMkAl7avgo+hcjWqiJwjGRklbnnhEbG4W2MaAJyMd6E=
Subject key identifier: 4C:D4:3A:70:BD:9D:8B:27:5B:73:4C:35:44:99:9A:65:E3:E1:C7:B5
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 019897EE2B363833241A4AC090305A364E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 07:00:24 +0000
Manifest this update: Mon 11 Aug 2025 07:00:24 +0000
Manifest next update: Tue 12 Aug 2025 07:00:24 +0000
Files and hashes: 1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=)
2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: uEg8cZH6G1O4MYcobQhQxgWFBOvEiaQYTHrEShve4PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:2b:36:38:33:24:1a:4a:c0:90:30:5a:36:4e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: Aug 11 07:00:24 2025 GMT
Not After : Aug 12 07:00:24 2025 GMT
Subject: CN=4cd43a70bd9d8b275b734c3544999a65e3e1c7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:6b:30:46:40:0f:85:24:7b:a1:f5:73:2d:
ac:34:46:a2:9b:38:ee:aa:2d:d0:45:77:1a:00:98:
1a:82:74:11:cb:cb:61:11:4e:1f:7b:c0:fc:4c:e6:
da:72:37:3f:bd:90:7c:56:3c:62:a6:db:ac:f9:e9:
28:1b:ac:4e:6b:ca:7e:76:8c:4c:45:09:2f:d2:58:
a0:bd:b6:9d:16:60:d2:ae:b0:fe:31:e2:ce:ba:43:
62:69:1c:34:ad:6c:87:fb:07:af:79:cc:ec:e5:d4:
22:b9:17:f3:ea:a9:6a:f1:32:69:8a:66:ce:65:14:
ec:23:3d:52:a4:40:3d:9b:2e:80:cb:23:1c:c3:37:
84:78:53:8c:84:fc:f8:e5:8e:0e:35:3a:96:df:ec:
a2:b5:7d:09:9f:b9:55:13:2a:68:e7:2b:26:37:4b:
ab:9b:32:1a:40:6d:3b:29:23:c9:64:af:2c:60:f2:
60:d5:48:4a:82:0c:2b:47:33:77:a2:eb:f3:58:8a:
7a:b6:34:09:b9:07:ff:73:7c:3d:3b:f8:6e:73:95:
1a:93:37:d6:d7:81:5c:1a:90:b7:5e:71:b1:74:f2:
04:c0:b1:63:7d:f1:ab:db:16:33:d1:91:da:da:ab:
0a:54:15:16:d5:c0:14:cf:77:79:5a:8b:27:48:ee:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D4:3A:70:BD:9D:8B:27:5B:73:4C:35:44:99:9A:65:E3:E1:C7:B5
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:05:ed:89:a4:94:62:b5:02:ea:3c:ce:2c:58:cc:1a:dc:98:
d3:f4:7f:a7:e7:3b:20:f1:89:e3:70:ea:41:24:32:a9:15:60:
17:41:1e:19:88:8e:79:79:85:43:ea:b9:63:69:07:72:90:e3:
65:21:b5:68:c1:a2:ad:62:19:bc:59:ea:ae:aa:22:e3:8c:6b:
23:1e:cd:56:c7:e5:15:07:c9:64:56:bb:3f:7e:78:95:b1:2a:
43:5d:75:a8:7e:66:be:98:06:c4:cb:ba:12:ca:e6:85:b1:cb:
45:53:90:1f:87:72:0f:76:74:0e:82:09:1e:28:88:7e:f6:9d:
e1:78:75:4c:74:71:e2:c1:c0:da:75:04:c2:ff:ab:f1:52:0a:
25:fd:25:43:8f:89:b3:eb:02:d0:ef:5b:eb:98:1d:3f:2d:f1:
e9:a6:d5:53:7e:51:e4:19:49:1d:8d:3c:b2:74:68:9d:31:c0:
7d:1e:4b:50:da:59:c7:f0:55:4c:7a:5e:e7:91:71:25:66:f0:
63:09:85:83:83:85:c3:1d:44:41:5a:b3:68:63:39:16:a3:a2:
4e:48:fc:f9:d1:07:63:da:da:73:56:97:57:68:a8:3a:9e:c4:
8e:53:06:d6:cf:ba:c2:64:47:09:4a:61:50:aa:a0:d4:a9:a8:
cc:b5:ed:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiX7is2ODMkGkrAkDBaNk4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczY2JjMTQ3ZWFkZDgxNTQ4MTUxZjM1MTBlMmRlMDlkODY4
YWM2Y2MwHhcNMjUwODExMDcwMDI0WhcNMjUwODEyMDcwMDI0WjAzMTEwLwYDVQQD
Eyg0Y2Q0M2E3MGJkOWQ4YjI3NWI3MzRjMzU0NDk5OWE2NWUzZTFjN2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyZrMEZAD4Uke6H1cy2sNEaimzju
qi3QRXcaAJgagnQRy8thEU4fe8D8TObacjc/vZB8Vjxiptus+ekoG6xOa8p+doxM
RQkv0ligvbadFmDSrrD+MeLOukNiaRw0rWyH+weveczs5dQiuRfz6qlq8TJpimbO
ZRTsIz1SpEA9my6AyyMcwzeEeFOMhPz45Y4ONTqW3+yitX0Jn7lVEypo5ysmN0ur
mzIaQG07KSPJZK8sYPJg1UhKggwrRzN3ouvzWIp6tjQJuQf/c3w9O/huc5UakzfW
14FcGpC3XnGxdPIEwLFjffGr2xYz0ZHa2qsKVBUW1cAUz3d5WosnSO5d/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzUOnC9nYsnW3NMNUSZmmXj4ce1MB8GA1UdIwQY
MBaAFHPLwUfq3YFUgVHzUQ4t4J2GisbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNjMwNGItNmM1OS00ZjVmLWI2NDYt
NWYwZDkxZjRmOTA4LzEvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNjMwNGItNmM1OS00ZjVmLWI2NDYtNWYwZDkxZjRmOTA4
LzEvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwXtiaSU
YrUC6jzOLFjMGtyY0/R/p+c7IPGJ43DqQSQyqRVgF0EeGYiOeXmFQ+q5Y2kHcpDj
ZSG1aMGirWIZvFnqrqoi44xrIx7NVsflFQfJZFa7P354lbEqQ111qH5mvpgGxMu6
EsrmhbHLRVOQH4dyD3Z0DoIJHiiIfvad4Xh1THRx4sHA2nUEwv+r8VIKJf0lQ4+J
s+sC0O9b65gdPy3x6abVU35R5BlJHY08snRonTHAfR5LUNpZx/BVTHpe55FxJWbw
YwmFg4OFwx1EQVqzaGM5FqOiTkj8+dEHY9rac1aXV2ioOp7EjlMG1s+6wmRHCUph
UKqg1KmozLXtkQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:19 2025 by rpki-client