Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: rDcYI9w6nIEptDKiSsCTRf2KCPN8u6U2+l8vahv6oOE=
Subject key identifier: 02:81:94:EA:23:19:DA:20:81:D4:BF:05:AD:C6:90:73:5F:C9:E1:D8
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 0198756243C67A819C523EDF04E356AF33DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 161F
Signing time: Mon 04 Aug 2025 14:00:30 +0000
Manifest this update: Mon 04 Aug 2025 14:00:30 +0000
Manifest next update: Tue 05 Aug 2025 14:00:30 +0000
Files and hashes: 1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=)
2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: FoFKfFMWhhFoiDCJww6obV8V2SlCpRI0tk8P0a3XtCA=)
3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:43:c6:7a:81:9c:52:3e:df:04:e3:56:af:33:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Aug 4 14:00:30 2025 GMT
Not After : Aug 5 14:00:30 2025 GMT
Subject: CN=028194ea2319da2081d4bf05adc690735fc9e1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:a8:f3:2e:0f:52:1e:03:d6:f2:ad:7c:5a:
82:4e:2d:c8:be:34:5d:bb:51:62:c4:49:e6:e9:e3:
f2:ff:61:1d:a5:35:c1:30:00:bf:b5:26:43:fa:b3:
b0:b0:23:f4:3c:04:8d:87:f6:b3:8a:d0:f7:58:b4:
ca:fd:18:31:56:47:97:b7:21:69:5b:a3:52:29:7f:
8e:ab:f9:ff:e0:0a:b2:ff:f8:ea:1c:07:bf:6f:86:
d9:e7:d6:70:98:3a:b7:41:80:15:29:1c:01:3d:6e:
a4:ee:4c:17:9a:fe:f6:2b:30:eb:ba:e5:80:42:25:
10:1d:6c:c4:67:3e:7e:c7:dd:c8:08:8c:d5:f3:95:
62:a6:c3:f0:10:fe:5a:ca:08:00:ae:76:0f:2e:04:
ec:12:1e:af:d9:ef:4e:00:bf:e4:11:be:ac:4f:04:
f7:51:66:aa:db:35:33:f1:b4:38:7f:5e:a5:c0:fd:
09:b9:9a:f9:a2:c8:95:82:a2:26:d7:4b:2f:48:eb:
7c:f0:48:45:fa:f8:09:fe:ad:93:cb:58:2a:62:4e:
04:62:88:a1:d5:2b:16:01:0e:c7:cf:8f:2b:e3:86:
94:30:36:0c:21:58:c1:76:7b:86:e3:fa:30:19:df:
d7:14:e0:d1:a1:f8:b8:11:08:99:cd:75:2f:4a:25:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:81:94:EA:23:19:DA:20:81:D4:BF:05:AD:C6:90:73:5F:C9:E1:D8
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:56:61:77:9a:4d:03:19:e2:89:7e:4c:f3:4b:8b:17:5b:84:
c8:50:21:e5:2f:42:45:84:e2:ff:b6:e8:61:d0:e4:7d:02:f3:
05:79:14:0b:63:25:7a:d7:5a:d6:05:dd:f1:b2:16:3a:76:1c:
4d:48:d5:3b:bb:1d:84:f3:20:74:44:db:2d:e3:24:6f:d0:37:
8d:16:1f:8b:91:b0:5d:7f:d4:99:34:b6:de:96:75:75:bd:a0:
07:3d:8f:da:36:78:b3:fd:ff:88:f6:53:94:36:a4:95:77:6a:
5d:4a:89:d3:c3:9a:bc:66:73:5f:54:44:61:32:9c:00:92:64:
e9:59:ee:8a:09:07:01:58:9f:25:e2:fd:2f:e7:89:38:b2:8f:
67:31:6f:0a:cd:aa:25:58:50:67:26:d1:b5:1f:29:cd:3b:e5:
5e:09:6f:4a:0b:c3:56:ac:f0:85:25:ba:25:20:a1:a4:ca:ee:
b0:6b:0c:64:a1:ed:36:39:89:ef:60:73:23:93:41:59:87:b8:
87:11:bb:a7:e2:54:fa:57:af:74:0c:d1:a2:00:b2:84:90:d6:
4c:1a:81:f0:ed:dc:5d:7c:15:8a:3a:b9:00:0a:59:54:84:33:
02:b6:91:68:9d:50:99:19:f4:00:0c:4f:b7:22:9f:7c:65:5b:
61:15:00:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1YkPGeoGcUj7fBONWrzPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjgyYTc5NGIzZjdhYjRjZDZmZWI2YzVmZDZiM2QyNTZh
ZmM0NjEwHhcNMjUwODA0MTQwMDMwWhcNMjUwODA1MTQwMDMwWjAzMTEwLwYDVQQD
EygwMjgxOTRlYTIzMTlkYTIwODFkNGJmMDVhZGM2OTA3MzVmYzllMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXKo8y4PUh4D1vKtfFqCTi3IvjRd
u1FixEnm6ePy/2EdpTXBMAC/tSZD+rOwsCP0PASNh/azitD3WLTK/RgxVkeXtyFp
W6NSKX+Oq/n/4Aqy//jqHAe/b4bZ59ZwmDq3QYAVKRwBPW6k7kwXmv72KzDruuWA
QiUQHWzEZz5+x93ICIzV85VipsPwEP5ayggArnYPLgTsEh6v2e9OAL/kEb6sTwT3
UWaq2zUz8bQ4f16lwP0JuZr5osiVgqIm10svSOt88EhF+vgJ/q2Ty1gqYk4EYoih
1SsWAQ7Hz48r44aUMDYMIVjBdnuG4/owGd/XFODRofi4EQiZzXUvSiXxUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKBlOojGdoggdS/Ba3GkHNfyeHYMB8GA1UdIwQY
MBaAFPwoKnlLP3q0zW/rbF/Ws9JWr8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzIt
ZDMzMjZjNTliY2QyLzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzItZDMzMjZjNTliY2Qy
LzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVZhd5pN
AxniiX5M80uLF1uEyFAh5S9CRYTi/7boYdDkfQLzBXkUC2Mletda1gXd8bIWOnYc
TUjVO7sdhPMgdETbLeMkb9A3jRYfi5GwXX/UmTS23pZ1db2gBz2P2jZ4s/3/iPZT
lDaklXdqXUqJ08OavGZzX1REYTKcAJJk6VnuigkHAVifJeL9L+eJOLKPZzFvCs2q
JVhQZybRtR8pzTvlXglvSgvDVqzwhSW6JSChpMrusGsMZKHtNjmJ72BzI5NBWYe4
hxG7p+JU+levdAzRogCyhJDWTBqB8O3cXXwVijq5AApZVIQzAraRaJ1QmRn0AAxP
tyKffGVbYRUAKg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:30:14 2025 by rpki-client