Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: ieQPdre6cfku0FkVN6KiQkkvDDRKBy5tq+fLZH+xbT0=
Subject key identifier: 84:D1:6A:D2:C4:9A:C2:48:3C:02:00:87:D2:FF:EE:40:1D:A1:1C:56
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 01987C772286AFE3E2B0D4E43F7EFA439641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 0FE5
Signing time: Tue 05 Aug 2025 23:00:39 +0000
Manifest this update: Tue 05 Aug 2025 23:00:39 +0000
Manifest next update: Wed 06 Aug 2025 23:00:39 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: n0+8wJYyXIPgx3KoHlB4QuylxEu3ZQxtiE2tacUys+Y=)
2: wvWJOusH9NjJmboQYN_96qUtjQA.roa (hash: lhwOpS83eW02+y1JcgzOi5Azi+mkqj4nFLbrmvvJkxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:22:86:af:e3:e2:b0:d4:e4:3f:7e:fa:43:96:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Aug 5 23:00:39 2025 GMT
Not After : Aug 6 23:00:39 2025 GMT
Subject: CN=84d16ad2c49ac2483c020087d2ffee401da11c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:11:1a:b8:c8:23:8c:ff:25:28:9e:d6:c0:
dc:24:0a:da:c4:d7:d2:24:3d:d4:54:7f:45:9e:f7:
07:3a:5a:54:c3:62:b6:01:a9:6f:af:62:82:cd:b4:
36:28:2c:9b:3c:1f:e1:cb:b3:dd:6d:ad:b4:e4:a6:
88:e6:b2:d2:96:05:83:78:a9:02:f5:d9:ed:2b:c6:
fc:9e:63:57:5c:c3:4f:18:c5:40:92:43:7d:45:f9:
e2:79:ca:64:fd:66:49:69:13:bc:5f:6e:5c:4e:e4:
cf:f1:53:e5:35:8c:77:8b:8c:2b:be:c5:8b:da:c5:
56:bc:2f:ca:7b:5f:80:21:99:3c:7d:4a:3c:f9:f7:
63:ec:52:43:09:80:22:2d:15:f0:b6:02:cb:a6:87:
56:cb:b2:56:38:f3:0d:7e:82:78:6a:bb:a7:ac:9c:
53:80:4d:4a:09:04:aa:9d:21:57:1e:af:a9:7c:54:
ff:c1:b3:b7:9e:81:c0:43:3d:7d:70:82:c7:c9:51:
a6:0a:e6:e3:5d:c4:24:96:6c:c1:dd:62:d1:b5:6a:
5b:e7:b2:5e:e0:9a:88:a1:be:b7:b5:f4:c4:27:3c:
42:2b:11:69:c1:2f:b4:4f:a8:da:2e:94:36:e9:c2:
6d:fd:07:af:e3:46:3e:19:8a:dc:3b:36:2d:a9:ac:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D1:6A:D2:C4:9A:C2:48:3C:02:00:87:D2:FF:EE:40:1D:A1:1C:56
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:98:92:15:e3:5a:ef:38:da:71:b3:82:20:56:38:1b:ad:2e:
b2:d0:33:4b:b1:70:b7:7a:9a:65:64:55:42:33:e9:76:91:5f:
8d:eb:0f:1c:8a:ed:84:f7:dd:8f:11:67:d6:0f:75:55:9a:a7:
1c:9c:b6:8a:79:fa:b2:44:57:36:56:ed:97:69:ff:d6:d1:c2:
eb:95:56:7b:d9:71:68:dc:57:49:08:35:52:13:b0:fe:18:ca:
4d:99:81:64:10:7f:11:e0:80:f9:0a:4d:11:2e:34:73:99:e6:
cb:25:e9:a1:87:12:7b:a7:16:dd:9a:9e:1e:46:d5:34:a7:0f:
79:b2:08:4e:da:ca:b7:7b:fc:8a:db:12:4f:28:e5:bb:2c:32:
e8:03:23:2c:0c:99:71:fd:b4:a5:77:dd:43:f1:cb:82:30:74:
27:6e:77:18:7d:d7:0d:f1:b1:06:36:e5:08:b1:7a:dd:3a:05:
ac:b9:90:31:24:d5:49:ef:2d:79:d1:67:7d:47:a8:dc:52:47:
28:4d:1b:7e:3c:08:56:99:1d:84:e8:61:67:95:f7:c9:68:ba:
fc:22:e1:dc:b2:87:eb:34:ad:b8:d8:e0:6a:56:d0:fe:4a:36:
48:f0:09:48:f2:ec:cd:e2:3d:2c:5a:12:53:cd:32:b1:ca:3d:
56:cd:22:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8dyKGr+PisNTkP376Q5ZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDAzZTcxZWY4YzNkOTczY2U3NmQ0MjA0MmY3ZGZhMTg5
MTY4OGIwHhcNMjUwODA1MjMwMDM5WhcNMjUwODA2MjMwMDM5WjAzMTEwLwYDVQQD
Eyg4NGQxNmFkMmM0OWFjMjQ4M2MwMjAwODdkMmZmZWU0MDFkYTExYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqIRGrjII4z/JSie1sDcJAraxNfS
JD3UVH9FnvcHOlpUw2K2Aalvr2KCzbQ2KCybPB/hy7Pdba205KaI5rLSlgWDeKkC
9dntK8b8nmNXXMNPGMVAkkN9Rfniecpk/WZJaRO8X25cTuTP8VPlNYx3i4wrvsWL
2sVWvC/Ke1+AIZk8fUo8+fdj7FJDCYAiLRXwtgLLpodWy7JWOPMNfoJ4arunrJxT
gE1KCQSqnSFXHq+pfFT/wbO3noHAQz19cILHyVGmCubjXcQklmzB3WLRtWpb57Je
4JqIob63tfTEJzxCKxFpwS+0T6jaLpQ26cJt/Qev40Y+GYrcOzYtqazJnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITRatLEmsJIPAIAh9L/7kAdoRxWMB8GA1UdIwQY
MBaAFAtAPnHvjD2XPOdtQgQvffoYkWiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQt
MGM2ODc3N2E0MDE5LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQtMGM2ODc3N2E0MDE5
LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZiSFeNa
7zjacbOCIFY4G60ustAzS7Fwt3qaZWRVQjPpdpFfjesPHIrthPfdjxFn1g91VZqn
HJy2inn6skRXNlbtl2n/1tHC65VWe9lxaNxXSQg1UhOw/hjKTZmBZBB/EeCA+QpN
ES40c5nmyyXpoYcSe6cW3ZqeHkbVNKcPebIITtrKt3v8itsSTyjluywy6AMjLAyZ
cf20pXfdQ/HLgjB0J253GH3XDfGxBjblCLF63ToFrLmQMSTVSe8tedFnfUeo3FJH
KE0bfjwIVpkdhOhhZ5X3yWi6/CLh3LKH6zStuNjgalbQ/ko2SPAJSPLszeI9LFoS
U80ysco9Vs0iMw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:28 2025 by rpki-client