Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: p83EQDHavIGyqzZY3munZ5noQLHcjnkoG65WnQzUzbA=
Subject key identifier: 12:EF:C3:C7:74:7D:9B:5F:36:CF:3B:A7:0C:AF:4E:01:71:9A:19:BA
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 0198955B7DD9B20369F835F6140CA341D0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 08CA
Signing time: Sun 10 Aug 2025 19:00:57 +0000
Manifest this update: Sun 10 Aug 2025 19:00:57 +0000
Manifest next update: Mon 11 Aug 2025 19:00:57 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: KlHzEYotWMfauqNN9WcFaCSYvYk2aLsV8xAQqyWbB6o=)
2: pltDgh5JbbEWSggwVXLGKtobVl8.roa (hash: XwQl2FIwqmmMyr6/rQAaXcZHJoaBjslDK7+U58bsYig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:7d:d9:b2:03:69:f8:35:f6:14:0c:a3:41:d0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Aug 10 19:00:57 2025 GMT
Not After : Aug 11 19:00:57 2025 GMT
Subject: CN=12efc3c7747d9b5f36cf3ba70caf4e01719a19ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:2d:4a:70:44:65:7b:54:db:22:8f:51:70:
69:57:8c:be:05:d1:f0:12:25:9d:c8:1b:cc:5f:7a:
2f:b9:cf:37:06:67:8a:72:a4:ae:3f:52:b2:8e:35:
7b:9e:d4:4d:f9:62:c2:d9:6d:a3:fc:fb:d5:fa:68:
33:d5:40:04:98:f8:b3:a9:a0:c2:a4:8f:59:c8:74:
06:03:f7:41:be:f8:67:79:43:40:5a:de:0d:dc:1a:
65:75:f7:7f:da:78:ed:6d:d8:17:e3:23:29:ac:63:
23:8f:a8:45:e4:24:b2:43:2c:d1:4c:cb:d8:b8:43:
7d:4d:75:ff:0b:b0:21:64:46:12:19:ae:ae:5d:71:
99:dd:f3:9e:57:81:98:73:bc:fd:86:ce:63:af:51:
9e:b2:98:1a:46:8d:12:bf:72:73:d7:a6:cd:7a:1f:
75:86:59:bb:9c:7a:78:8d:9e:b0:bd:e0:2a:89:32:
f6:c3:75:d0:03:76:ea:d0:5b:fa:c2:f6:10:4b:21:
32:1c:6b:72:15:bd:74:83:01:07:fe:58:f4:c9:41:
f9:2f:7e:89:02:fe:11:32:85:5d:b7:04:1f:f8:c2:
29:33:2d:c2:90:88:8f:b0:b0:9f:5e:fe:56:35:3d:
3b:21:f8:17:4f:58:53:c0:03:40:ab:fc:8e:32:95:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:C3:C7:74:7D:9B:5F:36:CF:3B:A7:0C:AF:4E:01:71:9A:19:BA
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e6:dd:bf:5f:c4:28:20:ec:e5:4c:38:27:10:cc:fe:9a:52:
3c:16:34:2c:46:f0:d1:4e:14:13:b5:0a:58:e3:97:0d:a4:16:
78:9c:fd:59:95:50:ad:7d:e1:ad:fb:1b:fc:bb:8a:9e:b4:79:
47:f9:74:7f:a7:06:59:5b:4c:2c:5d:79:0a:57:ae:be:e1:8b:
58:f0:e7:38:9a:6a:55:0d:45:b4:d5:34:79:32:bb:e2:d5:b5:
ca:da:a8:63:1d:40:e6:20:b9:7f:0a:c0:97:7f:12:ee:f7:ac:
53:84:51:5d:9c:b6:ab:89:fa:e6:f5:4e:9b:51:36:f2:24:5d:
f7:28:33:94:fe:4d:e2:fa:b5:0d:28:59:61:88:d0:3e:ea:27:
26:c0:a5:b8:ff:6e:7b:7a:46:0f:cd:ee:4f:2e:31:85:92:10:
24:a1:fc:35:e0:e3:51:fb:b0:1c:bf:92:19:58:a4:df:aa:f3:
c7:4a:93:61:d3:1c:7c:12:b4:2a:dc:8e:9d:39:63:f7:bf:ce:
71:62:fd:8f:cb:49:3e:f4:82:6a:2a:f1:28:6a:e2:af:7a:2b:
00:4a:f0:d6:a4:3d:fa:8d:e8:38:a2:53:fe:39:23:2e:06:fe:
6d:ca:e7:6a:8f:a4:73:5a:1b:69:de:78:63:48:f3:dd:7f:63:
35:0c:51:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVW33ZsgNp+DX2FAyjQdDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDZmMDMzNTM3YmJkODYzYmJjYTJiNjIwOTJkOGRlMzYx
MWY2NTEwHhcNMjUwODEwMTkwMDU3WhcNMjUwODExMTkwMDU3WjAzMTEwLwYDVQQD
EygxMmVmYzNjNzc0N2Q5YjVmMzZjZjNiYTcwY2FmNGUwMTcxOWExOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ktSnBEZXtU2yKPUXBpV4y+BdHw
EiWdyBvMX3ovuc83BmeKcqSuP1KyjjV7ntRN+WLC2W2j/PvV+mgz1UAEmPizqaDC
pI9ZyHQGA/dBvvhneUNAWt4N3Bpldfd/2njtbdgX4yMprGMjj6hF5CSyQyzRTMvY
uEN9TXX/C7AhZEYSGa6uXXGZ3fOeV4GYc7z9hs5jr1GespgaRo0Sv3Jz16bNeh91
hlm7nHp4jZ6wveAqiTL2w3XQA3bq0Fv6wvYQSyEyHGtyFb10gwEH/lj0yUH5L36J
Av4RMoVdtwQf+MIpMy3CkIiPsLCfXv5WNT07IfgXT1hTwANAq/yOMpWyPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLvw8d0fZtfNs87pwyvTgFxmhm6MB8GA1UdIwQY
MBaAFAoG8DNTe72GO7yitiCS2N42EfZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80Y2QxNmItMmEyMy00OGE5LTllZWIt
MmE0ODEzYTEzMTIwLzEvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80Y2QxNmItMmEyMy00OGE5LTllZWItMmE0ODEzYTEzMTIw
LzEvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkObdv1/E
KCDs5Uw4JxDM/ppSPBY0LEbw0U4UE7UKWOOXDaQWeJz9WZVQrX3hrfsb/LuKnrR5
R/l0f6cGWVtMLF15CleuvuGLWPDnOJpqVQ1FtNU0eTK74tW1ytqoYx1A5iC5fwrA
l38S7vesU4RRXZy2q4n65vVOm1E28iRd9ygzlP5N4vq1DShZYYjQPuonJsCluP9u
e3pGD83uTy4xhZIQJKH8NeDjUfuwHL+SGVik36rzx0qTYdMcfBK0KtyOnTlj97/O
cWL9j8tJPvSCairxKGrir3orAErw1qQ9+o3oOKJT/jkjLgb+bcrnao+kc1obad54
Y0jz3X9jNQxRRA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:55 2025 by rpki-client