Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
File: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json)
Hash identifier: wIUzEYhOud/KT8LLtBkGoEQVIgOxP5Db17lmTpH9lqQ=
Subject key identifier: 21:51:61:1C:0A:1C:68:0E:E2:CA:81:2E:AE:4A:F9:2F:0E:E5:67:61
Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
Certificate issuer: /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Certificate serial: 019873067552D1D5BDB67E63568D52393A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
Manifest number: 0A92
Signing time: Mon 04 Aug 2025 03:00:59 +0000
Manifest this update: Mon 04 Aug 2025 03:00:59 +0000
Manifest next update: Tue 05 Aug 2025 03:00:59 +0000
Files and hashes: 1: CjdcUk3MOW8Rqup07x2jVDEldW4.roa (hash: UaK7I7Eqw7jf6XsvMkrSjnKfCYZKST8b3TEli5jiSHk=)
2: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: MgV0rkr7wNw0sOHI5CpKNvJB6gPw1jN8bPcNbpO1/B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:75:52:d1:d5:bd:b6:7e:63:56:8d:52:39:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Validity
Not Before: Aug 4 03:00:59 2025 GMT
Not After : Aug 5 03:00:59 2025 GMT
Subject: CN=2151611c0a1c680ee2ca812eae4af92f0ee56761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:6e:92:3c:e0:38:f2:75:1a:e1:3c:ef:f8:
55:9b:1f:73:0c:00:8c:db:53:d9:c1:65:1c:97:af:
9f:51:21:7a:26:9a:97:16:d8:91:aa:6c:2a:34:68:
7f:00:e3:11:50:23:df:f3:13:8b:5c:61:30:be:a1:
c3:dc:0d:d0:03:a1:a1:55:5d:0e:94:64:2e:8f:27:
ff:aa:12:04:42:a4:2e:3a:ae:a5:6d:5a:c4:6c:00:
9e:07:e3:5d:65:76:ba:1a:a5:a6:0d:1a:e7:78:ea:
2f:50:26:25:b3:a5:cf:94:2a:c0:98:73:a0:b9:a3:
0b:6c:49:67:0c:74:30:05:74:24:99:d2:d0:a2:8b:
1e:cc:78:e5:3a:a5:ba:e1:e1:27:2b:75:0b:98:8f:
12:99:34:fb:e8:22:ee:71:e1:cc:82:8c:28:5e:41:
fe:5c:e4:c5:32:8e:e0:d7:43:f6:7d:04:be:f9:8e:
d4:c1:05:5d:9c:21:b9:0b:4d:2e:03:bf:6c:7d:26:
22:1b:d0:7c:a8:8a:99:07:37:39:73:6f:6c:e8:90:
91:bd:f9:01:aa:b7:21:88:4f:f9:ba:0c:ad:03:c4:
11:cd:76:ce:20:3b:6c:3d:f0:b3:b6:b2:b2:67:40:
46:2d:61:58:2f:59:78:ae:3e:75:5d:fb:e4:8a:e5:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:51:61:1C:0A:1C:68:0E:E2:CA:81:2E:AE:4A:F9:2F:0E:E5:67:61
X509v3 Authority Key Identifier:
keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:01:8b:e6:e1:c1:85:1f:a2:25:7b:4f:70:24:9b:e8:b6:95:
8c:af:bb:44:58:47:ef:1c:70:1b:77:90:77:6f:39:9e:bf:37:
66:40:4a:e4:e2:93:2f:e0:92:f8:d8:2d:c5:5b:53:c6:3a:11:
41:37:91:26:52:8e:a2:f4:b0:d9:01:55:75:ff:67:17:01:ad:
31:c4:a8:02:41:fc:c5:80:d2:9a:c8:ed:08:3d:05:86:b5:1e:
d0:61:7d:9c:2c:d5:5e:cb:47:73:a5:8f:90:78:f5:e8:ee:0a:
17:ed:c7:3e:32:8e:6d:b9:7b:25:dc:ff:ad:51:23:d1:8e:19:
b0:cf:b5:e1:b4:5d:7b:d2:70:58:7e:5c:44:08:f4:e0:92:64:
59:c2:2b:9b:ca:19:59:32:8e:7c:01:83:94:2d:6e:0c:a2:ff:
9c:18:dc:76:1f:9b:28:b4:c8:75:01:89:14:96:f9:80:50:22:
57:44:dd:b4:36:9a:17:c2:79:89:c6:64:15:d8:7f:f2:c0:7f:
d5:67:93:c6:e1:c8:ba:8c:23:af:47:eb:06:ac:8c:36:55:a5:
54:09:99:cd:2b:12:4f:76:14:01:02:b6:83:88:e8:40:2f:4f:
32:56:9f:a0:51:53:bb:50:0e:ae:7d:64:6f:c2:47:b4:b7:4c:
af:08:09:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBnVS0dW9tn5jVo1SOToEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzlmOWEwMDI3OGU2OWQxYjNkZGRhYTBiZjBjZDE3ZDJl
NjY3MDgwHhcNMjUwODA0MDMwMDU5WhcNMjUwODA1MDMwMDU5WjAzMTEwLwYDVQQD
EygyMTUxNjExYzBhMWM2ODBlZTJjYTgxMmVhZTRhZjkyZjBlZTU2NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoNukjzgOPJ1GuE87/hVmx9zDACM
21PZwWUcl6+fUSF6JpqXFtiRqmwqNGh/AOMRUCPf8xOLXGEwvqHD3A3QA6GhVV0O
lGQujyf/qhIEQqQuOq6lbVrEbACeB+NdZXa6GqWmDRrneOovUCYls6XPlCrAmHOg
uaMLbElnDHQwBXQkmdLQoosezHjlOqW64eEnK3ULmI8SmTT76CLuceHMgowoXkH+
XOTFMo7g10P2fQS++Y7UwQVdnCG5C00uA79sfSYiG9B8qIqZBzc5c29s6JCRvfkB
qrchiE/5ugytA8QRzXbOIDtsPfCztrKyZ0BGLWFYL1l4rj51XfvkiuUNxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFRYRwKHGgO4sqBLq5K+S8O5WdhMB8GA1UdIwQY
MBaAFAo5+aACeOadGz3dqgvwzRfS5mcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2puNW9BSjQ1cDBiUGQycUNfRE5GOUxtWndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hOWFmMGUtZTkxYS00ZjFjLWI3MmMt
MWUyYjFjODdkMzE3LzEvQ2puNW9BSjQ1cDBiUGQycUNfRE5GOUxtWndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9hOWFmMGUtZTkxYS00ZjFjLWI3MmMtMWUyYjFjODdkMzE3
LzEvQ2puNW9BSjQ1cDBiUGQycUNfRE5GOUxtWndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQGL5uHB
hR+iJXtPcCSb6LaVjK+7RFhH7xxwG3eQd285nr83ZkBK5OKTL+CS+NgtxVtTxjoR
QTeRJlKOovSw2QFVdf9nFwGtMcSoAkH8xYDSmsjtCD0FhrUe0GF9nCzVXstHc6WP
kHj16O4KF+3HPjKObbl7Jdz/rVEj0Y4ZsM+14bRde9JwWH5cRAj04JJkWcIrm8oZ
WTKOfAGDlC1uDKL/nBjcdh+bKLTIdQGJFJb5gFAiV0TdtDaaF8J5icZkFdh/8sB/
1WeTxuHIuowjr0frBqyMNlWlVAmZzSsST3YUAQK2g4joQC9PMlafoFFTu1AOrn1k
b8JHtLdMrwgJUA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:29 2025 by rpki-client