Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: 2Ys8uQ/HFUlM8LTbgn5rpkMB0WYbTN68wxHeIJlRhPM=
Subject key identifier: 63:E2:75:47:36:50:02:B9:D7:60:58:AC:AF:F8:29:FB:ED:7B:DC:6C
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 0198887B25EDC50D31B9E0BBE6017CDC9273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 1328
Signing time: Fri 08 Aug 2025 07:00:28 +0000
Manifest this update: Fri 08 Aug 2025 07:00:28 +0000
Manifest next update: Sat 09 Aug 2025 07:00:28 +0000
Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=)
2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=)
3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=)
4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=)
5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=)
6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: qORqJR+BO8lOy3PVPFIhBVpnilK0cZZRZ1NvmMpKZBU=)
7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=)
8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=)
9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:25:ed:c5:0d:31:b9:e0:bb:e6:01:7c:dc:92:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Aug 8 07:00:28 2025 GMT
Not After : Aug 9 07:00:28 2025 GMT
Subject: CN=63e27547365002b9d76058acaff829fbed7bdc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:9e:e7:75:9f:6c:9a:db:d3:5a:50:87:84:
55:50:22:59:e5:1f:2a:56:e4:f0:7e:59:b8:4b:5f:
69:c6:46:86:89:76:60:38:43:de:e1:8a:fc:b3:b7:
eb:f2:24:62:35:e4:7c:65:15:d9:6f:96:80:21:b5:
63:39:0d:85:aa:fb:fc:01:ac:4c:50:09:61:91:41:
a1:e0:bb:05:75:ef:6e:3f:1f:b9:24:21:76:18:1c:
9b:80:55:ab:18:d2:de:eb:67:cf:79:01:17:33:d4:
ec:f9:37:24:cd:a8:a0:f7:e8:64:b0:19:b8:70:ea:
0e:0b:49:8a:5d:f8:d0:21:0a:80:8a:d9:72:a0:cd:
c4:c4:21:6a:4d:4c:e8:b4:83:95:b7:5d:3f:01:72:
5e:47:3e:3e:62:b0:e4:45:2a:d1:7b:e3:ec:e5:51:
c5:6e:06:9c:d1:c9:13:5f:f9:f9:a9:22:44:43:65:
72:ee:a4:3b:22:bd:fc:75:7d:af:97:16:47:9c:30:
c4:77:d4:ee:16:bc:c9:2d:97:85:db:08:2e:09:33:
cd:af:f6:56:6e:e1:d4:cc:83:84:5e:59:f5:1e:71:
08:1c:e5:ae:4b:de:16:66:df:6d:65:a1:b4:9a:d6:
14:18:71:f2:18:18:02:43:d6:e1:f3:23:b0:33:75:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E2:75:47:36:50:02:B9:D7:60:58:AC:AF:F8:29:FB:ED:7B:DC:6C
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:db:4b:e3:75:dc:3f:64:f8:25:09:b0:8e:2c:32:3a:22:90:
b4:23:f8:4c:3a:b6:2b:f4:42:b4:9b:34:7c:9c:b7:18:bd:5a:
be:40:bf:4e:98:07:97:23:cd:55:a8:e7:3b:c3:fe:99:ab:51:
a4:1f:bb:0d:c8:0f:08:67:bc:e0:f6:48:b2:62:1e:c8:40:3a:
7d:05:fa:dd:29:57:9f:ac:44:73:0b:d0:37:11:d3:3c:cb:e9:
d1:7d:ec:0a:59:eb:f6:01:0c:41:d3:9c:c4:18:3c:63:6e:49:
39:9b:b2:10:47:4d:bb:aa:4b:26:fc:59:e5:f8:64:8f:c2:0a:
b6:24:97:e7:d9:47:41:9f:3f:03:53:d9:58:d6:9c:ae:7b:66:
a1:b8:d3:af:c0:99:5d:9a:08:6d:20:ba:97:cf:39:a1:b9:c9:
f2:56:74:28:51:86:d9:57:66:53:32:dd:87:73:cb:ba:1f:4c:
10:3e:7f:69:5c:0d:eb:5b:9e:09:be:21:40:39:a4:d4:12:51:
e6:2a:cf:d0:ce:10:3f:50:56:05:83:0a:99:bb:cf:e2:a7:e6:
c9:09:ee:e3:35:03:14:04:f3:b8:c3:ba:b3:40:c6:3c:3f:8b:
26:e4:3c:ec:17:8d:7e:46:e8:3a:43:e6:1d:cc:d7:b1:13:c7:
99:fa:e8:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIeyXtxQ0xueC75gF83JJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1
ZDBmNTUwHhcNMjUwODA4MDcwMDI4WhcNMjUwODA5MDcwMDI4WjAzMTEwLwYDVQQD
Eyg2M2UyNzU0NzM2NTAwMmI5ZDc2MDU4YWNhZmY4MjlmYmVkN2JkYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs6e53WfbJrb01pQh4RVUCJZ5R8q
VuTwflm4S19pxkaGiXZgOEPe4Yr8s7fr8iRiNeR8ZRXZb5aAIbVjOQ2Fqvv8AaxM
UAlhkUGh4LsFde9uPx+5JCF2GBybgFWrGNLe62fPeQEXM9Ts+Tckzaig9+hksBm4
cOoOC0mKXfjQIQqAitlyoM3ExCFqTUzotIOVt10/AXJeRz4+YrDkRSrRe+Ps5VHF
bgac0ckTX/n5qSJEQ2Vy7qQ7Ir38dX2vlxZHnDDEd9TuFrzJLZeF2wguCTPNr/ZW
buHUzIOEXln1HnEIHOWuS94WZt9tZaG0mtYUGHHyGBgCQ9bh8yOwM3WVEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPidUc2UAK512BYrK/4Kfvte9xsMB8GA1UdIwQY
MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt
YWI3OWEzNzg5ZjhmLzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm
LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAttL43Xc
P2T4JQmwjiwyOiKQtCP4TDq2K/RCtJs0fJy3GL1avkC/TpgHlyPNVajnO8P+matR
pB+7DcgPCGe84PZIsmIeyEA6fQX63SlXn6xEcwvQNxHTPMvp0X3sClnr9gEMQdOc
xBg8Y25JOZuyEEdNu6pLJvxZ5fhkj8IKtiSX59lHQZ8/A1PZWNacrntmobjTr8CZ
XZoIbSC6l885obnJ8lZ0KFGG2VdmUzLdh3PLuh9MED5/aVwN61ueCb4hQDmk1BJR
5irP0M4QP1BWBYMKmbvP4qfmyQnu4zUDFATzuMO6s0DGPD+LJuQ87BeNfkboOkPm
HczXsRPHmfromQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:02 2025 by rpki-client