Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: galKZQ2H0jK7dxIqU4xP5EJpjtAPzPEi0CgHK6HY7S8=
Subject key identifier: E0:DF:76:75:EE:38:19:A2:06:0F:23:C1:C9:26:32:28:78:7E:F0:4C
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 019873E2108C0F4F503D2CF5ECA1A7F66D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 1342
Signing time: Mon 04 Aug 2025 07:00:51 +0000
Manifest this update: Mon 04 Aug 2025 07:00:51 +0000
Manifest next update: Tue 05 Aug 2025 07:00:51 +0000
Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: T/UdWsoYwfmyvaAOMbayppHKyqWedS/FU+fc32IkmTI=)
2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=)
3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:10:8c:0f:4f:50:3d:2c:f5:ec:a1:a7:f6:6d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Aug 4 07:00:51 2025 GMT
Not After : Aug 5 07:00:51 2025 GMT
Subject: CN=e0df7675ee3819a2060f23c1c9263228787ef04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:31:5c:10:d2:12:75:60:42:cb:81:75:14:
43:57:83:4c:9e:b6:f1:69:f8:77:e0:7a:f2:8e:9b:
bb:93:3c:74:7a:12:c6:ed:c6:d8:cd:cb:70:56:08:
88:26:fb:8a:84:34:75:a8:78:2f:b6:11:2c:dc:30:
9c:05:66:9c:57:d5:8e:80:81:a5:41:58:29:28:d3:
25:ab:49:7d:9f:96:9a:20:2a:51:ea:27:11:14:36:
3c:b7:5b:9e:ee:e8:e1:60:4b:51:f3:14:d9:94:0b:
32:6c:38:c7:ae:1b:cf:a3:e0:3e:8e:fa:91:a8:9b:
da:46:23:29:d9:c0:52:c9:44:c5:55:35:98:df:f0:
45:7a:83:68:01:4f:8c:c2:32:5b:5d:3f:c2:bb:22:
43:43:84:c3:cd:34:32:ce:17:11:4e:c9:92:d9:93:
58:c2:53:1f:e9:d7:87:c2:3f:83:75:35:35:cb:29:
f1:ac:8a:3a:ce:3f:a7:af:f3:69:55:5b:2d:d8:9f:
3d:6a:09:2f:99:c5:b4:f1:4d:63:7e:8c:fc:cd:f1:
91:27:cd:e5:5b:68:3f:66:08:49:da:b6:90:e2:5c:
ce:9e:b0:41:23:79:92:7c:7e:1f:28:18:0d:6d:c1:
40:39:54:01:c0:1e:66:dc:4b:2a:a6:8b:b8:32:ce:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:76:75:EE:38:19:A2:06:0F:23:C1:C9:26:32:28:78:7E:F0:4C
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ef:05:0b:18:28:08:61:5a:6c:c6:d9:a7:92:2c:03:4b:24:
34:d5:95:db:d7:6e:4b:d6:a7:14:3f:e0:a9:48:53:dc:af:0e:
6b:11:fd:2b:4a:bb:60:8f:5d:d9:f5:f6:96:01:07:66:8a:cc:
8b:e5:99:db:e8:fe:d0:56:44:4e:27:b3:bd:7f:3d:c0:a0:c3:
8f:c3:8c:2e:14:bb:a4:23:72:4a:e0:99:c9:80:b7:fa:16:fb:
53:7f:cc:d0:ec:b0:ab:74:46:f7:7e:9e:16:4b:d1:e8:38:d6:
8a:f1:59:c3:0d:ce:34:67:79:ac:ff:2e:d4:66:88:b5:d2:d2:
52:61:87:24:1e:de:2a:f1:b4:cf:62:4b:1d:16:64:17:ef:df:
be:de:42:90:a6:80:8f:76:74:16:61:46:7c:8a:68:d7:07:81:
8e:3f:49:10:5d:58:35:db:bc:f3:f3:c9:f4:fa:07:e8:94:2d:
a6:0f:99:ee:cc:09:e2:ee:79:58:72:a4:88:42:6f:f8:7f:fe:
84:24:97:44:fe:e1:50:59:f3:ed:5a:56:b8:98:c7:bc:dd:fd:
bb:c8:8a:22:ac:ce:1f:7d:6a:db:1e:80:28:6f:75:3d:b4:1a:
27:0b:7b:53:2b:08:2b:8b:8f:ba:90:6f:77:48:56:5f:47:8e:
03:83:8f:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4hCMD09QPSz17KGn9m2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5Yzc0NmY2N2I3YWM1NmVhNmRkODU5NTFlYzAyMmNiYmQ2
N2FmMDYwHhcNMjUwODA0MDcwMDUxWhcNMjUwODA1MDcwMDUxWjAzMTEwLwYDVQQD
EyhlMGRmNzY3NWVlMzgxOWEyMDYwZjIzYzFjOTI2MzIyODc4N2VmMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxAxXBDSEnVgQsuBdRRDV4NMnrbx
afh34Hryjpu7kzx0ehLG7cbYzctwVgiIJvuKhDR1qHgvthEs3DCcBWacV9WOgIGl
QVgpKNMlq0l9n5aaICpR6icRFDY8t1ue7ujhYEtR8xTZlAsybDjHrhvPo+A+jvqR
qJvaRiMp2cBSyUTFVTWY3/BFeoNoAU+MwjJbXT/CuyJDQ4TDzTQyzhcRTsmS2ZNY
wlMf6deHwj+DdTU1yynxrIo6zj+nr/NpVVst2J89agkvmcW08U1jfoz8zfGRJ83l
W2g/ZghJ2raQ4lzOnrBBI3mSfH4fKBgNbcFAOVQBwB5m3Esqpou4Ms51GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODfdnXuOBmiBg8jwckmMih4fvBMMB8GA1UdIwQY
MBaAFAnHRvZ7esVupt2FlR7AIsu9Z68GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQt
YTZmNjExYThhYjkzLzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQtYTZmNjExYThhYjkz
LzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmO8FCxgo
CGFabMbZp5IsA0skNNWV29duS9anFD/gqUhT3K8OaxH9K0q7YI9d2fX2lgEHZorM
i+WZ2+j+0FZETiezvX89wKDDj8OMLhS7pCNySuCZyYC3+hb7U3/M0Oywq3RG936e
FkvR6DjWivFZww3ONGd5rP8u1GaItdLSUmGHJB7eKvG0z2JLHRZkF+/fvt5CkKaA
j3Z0FmFGfIpo1weBjj9JEF1YNdu88/PJ9PoH6JQtpg+Z7swJ4u55WHKkiEJv+H/+
hCSXRP7hUFnz7VpWuJjHvN39u8iKIqzOH31q2x6AKG91PbQaJwt7UysIK4uPupBv
d0hWX0eOA4OPTw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:34 2025 by rpki-client