Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier: gBygfZ8ELMCslHgBpBVWt3/cxwhrqRKSuXA5A3qdzQA=
Subject key identifier: E5:65:51:85:10:C7:7F:48:05:24:12:16:EE:8F:16:AC:8C:EE:67:26
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 01988E4698C86DF43AC87425BD6C2E3E5CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number: 133D
Signing time: Sat 09 Aug 2025 10:00:47 +0000
Manifest this update: Sat 09 Aug 2025 10:00:47 +0000
Manifest next update: Sun 10 Aug 2025 10:00:47 +0000
Files and hashes: 1: HSf-a0eTcicBmzn4zJZRWXp92WE.roa (hash: vvlQV7Jpi0XVGKQA4HOtArKcD3xjeMm171XNaqqkcT0=)
2: a5SThzVTiz_HAgBiI_2C-cBicRU.roa (hash: cXR8rbnSwDhsbHRTW7l3Pqi32yZZ/V3whRHlpIMP7KU=)
3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: h7R1TIAeEyDP5D7NFdiEgZyqVeCt8nbkS9I1Jd1sIec=)
4: e8yOi_zjBd2PptdyDsyc4j2wCEY.roa (hash: gTBImvzLksx7wicV0C8XssUh2BDoKizjYT0J7tkJ1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:98:c8:6d:f4:3a:c8:74:25:bd:6c:2e:3e:5c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Aug 9 10:00:47 2025 GMT
Not After : Aug 10 10:00:47 2025 GMT
Subject: CN=e565518510c77f4805241216ee8f16ac8cee6726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:af:04:d4:0e:98:04:a9:2e:52:0f:da:4c:
85:50:ee:1f:89:76:e0:bb:2e:fb:70:17:34:bf:95:
9e:6d:db:5a:15:15:d6:17:c9:b3:9a:26:3b:c9:31:
0b:ac:83:19:6c:05:a6:10:93:ea:a2:dd:78:a5:a2:
c9:1e:98:ab:f8:d6:29:b8:6c:42:6b:2a:eb:42:8b:
39:a4:f4:ec:c2:12:c1:ee:e0:e7:31:53:54:5c:fb:
fc:78:8b:fb:b0:6f:92:0f:02:bd:34:b6:0e:02:ad:
54:25:69:bf:84:f5:12:37:81:79:7f:f9:a6:91:da:
49:9d:ba:00:f9:1b:01:76:38:75:cd:f2:9f:ea:01:
c6:3c:10:5d:bd:6a:cc:e9:fa:06:0e:34:eb:0a:81:
7d:4d:a0:53:ba:49:55:a9:1f:3e:d7:aa:aa:ee:fe:
1a:21:32:37:15:e9:0f:0e:63:9d:0d:64:48:f0:5b:
4c:a1:32:4b:3c:cb:7d:41:8a:72:d9:9d:5a:b5:53:
0b:e5:c7:a2:48:d1:ed:6a:ce:8e:53:ad:67:41:14:
de:7e:12:ed:0c:47:df:f9:3e:98:a9:4f:48:b2:3c:
56:bb:f1:f8:3d:08:f9:18:34:ce:09:a1:58:d4:37:
1a:0f:35:e8:d3:0b:5a:18:ce:92:f8:82:aa:61:a9:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:65:51:85:10:C7:7F:48:05:24:12:16:EE:8F:16:AC:8C:EE:67:26
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8a:86:bb:ce:42:ba:b1:1f:c4:7b:c2:b4:84:7c:d5:d8:c6:
80:c1:3f:a0:09:e6:be:46:09:25:66:db:51:17:f9:5e:64:47:
3c:a2:a1:cf:92:00:b9:66:48:9a:c5:86:11:38:39:97:8e:20:
9d:c3:72:91:85:d9:97:d3:cf:0c:cc:c3:b0:c0:e2:5c:76:12:
aa:ce:ca:b2:ce:8f:9c:2a:22:bf:82:6d:b6:ff:4e:cf:90:35:
b7:4b:b3:53:73:2b:26:c2:2d:0e:ea:9f:dc:45:e2:66:bc:39:
38:df:dd:6a:49:35:bc:37:2d:10:8e:89:d3:6f:5f:d8:a7:eb:
19:cf:e4:c8:3d:25:92:85:f1:dd:33:23:d0:c1:eb:4c:4f:be:
76:ae:1f:9c:dd:52:b9:e0:77:4e:b8:71:d4:cc:68:43:63:18:
8f:bf:a9:56:f3:51:eb:e4:3d:b4:27:e1:01:8f:fb:56:04:a4:
9c:85:eb:aa:9a:86:62:1f:58:c6:df:18:93:ec:12:ad:19:01:
7a:3e:17:25:29:7d:95:be:27:13:97:4d:74:4c:99:56:39:7b:
4d:62:eb:b1:18:ee:8a:53:49:42:ea:6d:3b:2d:77:71:e9:ad:
09:7b:19:84:30:dc:8d:08:fe:f2:af:59:cc:5a:68:cd:29:b1:
77:26:79:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiORpjIbfQ6yHQlvWwuPlzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTVlZDI3NTAwNTQwOGQyYTg2YTIzMDM3MDE3NDQ0MzBl
ZGEzNGEwHhcNMjUwODA5MTAwMDQ3WhcNMjUwODEwMTAwMDQ3WjAzMTEwLwYDVQQD
EyhlNTY1NTE4NTEwYzc3ZjQ4MDUyNDEyMTZlZThmMTZhYzhjZWU2NzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLKvBNQOmASpLlIP2kyFUO4fiXbg
uy77cBc0v5WebdtaFRXWF8mzmiY7yTELrIMZbAWmEJPqot14paLJHpir+NYpuGxC
ayrrQos5pPTswhLB7uDnMVNUXPv8eIv7sG+SDwK9NLYOAq1UJWm/hPUSN4F5f/mm
kdpJnboA+RsBdjh1zfKf6gHGPBBdvWrM6foGDjTrCoF9TaBTuklVqR8+16qq7v4a
ITI3FekPDmOdDWRI8FtMoTJLPMt9QYpy2Z1atVML5ceiSNHtas6OU61nQRTefhLt
DEff+T6YqU9IsjxWu/H4PQj5GDTOCaFY1DcaDzXo0wtaGM6S+IKqYalbdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVlUYUQx39IBSQSFu6PFqyM7mcmMB8GA1UdIwQY
MBaAFHAV7SdQBUCNKoaiMDcBdEQw7aNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEt
NGRhZDQ4YTE2ZTQyLzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEtNGRhZDQ4YTE2ZTQy
LzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIqGu85C
urEfxHvCtIR81djGgME/oAnmvkYJJWbbURf5XmRHPKKhz5IAuWZImsWGETg5l44g
ncNykYXZl9PPDMzDsMDiXHYSqs7Kss6PnCoiv4Jttv9Oz5A1t0uzU3MrJsItDuqf
3EXiZrw5ON/dakk1vDctEI6J029f2KfrGc/kyD0lkoXx3TMj0MHrTE++dq4fnN1S
ueB3Trhx1MxoQ2MYj7+pVvNR6+Q9tCfhAY/7VgSknIXrqpqGYh9Yxt8Yk+wSrRkB
ej4XJSl9lb4nE5dNdEyZVjl7TWLrsRjuilNJQuptOy13cemtCXsZhDDcjQj+8q9Z
zFpozSmxdyZ5Jg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:10 2025 by rpki-client