Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: gauQNF7pv33tbl+jo3QEiNkNeNKCc+IVCYKZHeOdQaI=
Subject key identifier: B4:B2:81:59:1E:A8:E7:22:A7:06:D4:D7:1C:4D:AB:BA:AC:2E:F0:5E
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 01989F03492901F2004B31BCE700516DFCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 03A3
Signing time: Tue 12 Aug 2025 16:00:49 +0000
Manifest this update: Tue 12 Aug 2025 16:00:49 +0000
Manifest next update: Wed 13 Aug 2025 16:00:49 +0000
Files and hashes: 1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=)
2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: 41/AGcpzlELWB0OoubP5aYEo6FdsQBJT9olr9xPNJ8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:49:29:01:f2:00:4b:31:bc:e7:00:51:6d:fc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Aug 12 16:00:49 2025 GMT
Not After : Aug 13 16:00:49 2025 GMT
Subject: CN=b4b281591ea8e722a706d4d71c4dabbaac2ef05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:20:f6:34:4a:4d:7a:14:c1:1c:c4:e3:3e:
80:a7:1d:8a:f6:bc:74:d7:a9:00:5a:cf:9a:d8:fd:
a8:49:ef:68:a5:f7:c8:6c:a0:f3:0f:82:af:c5:78:
f9:f4:a9:75:ab:aa:24:15:54:2e:d8:17:93:c6:13:
d1:b5:af:af:f4:a0:02:46:e7:6d:36:0f:60:d1:02:
d0:59:97:66:5f:94:d0:a9:78:dc:f8:20:e7:0d:30:
16:9c:41:f0:bd:0a:fc:ba:96:1a:a6:43:55:0f:02:
de:0c:43:44:cf:22:9c:bb:67:4f:61:ec:d8:b9:fe:
d5:6d:64:dd:06:f2:a6:ce:28:b4:90:10:bf:53:f5:
5f:8a:56:2f:df:9f:2e:b6:6d:b3:1a:10:f0:d9:5c:
aa:8f:9f:5d:86:13:80:e0:eb:6c:0a:00:1d:7f:0a:
dc:e9:5b:a6:bc:9a:29:06:d8:40:ff:76:6a:52:cf:
ed:aa:4a:c0:22:a1:94:91:87:81:0d:2d:b4:ea:d6:
67:c4:fe:1e:0c:7c:17:0d:74:b1:b3:cf:9c:91:58:
4a:be:6f:cd:f7:94:c8:97:59:13:93:e2:3d:8f:fd:
9d:89:f4:63:cf:fa:62:f7:cb:6b:00:72:e5:ed:0d:
f7:59:59:7f:39:7a:56:90:ab:3d:6f:7e:1c:43:80:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B2:81:59:1E:A8:E7:22:A7:06:D4:D7:1C:4D:AB:BA:AC:2E:F0:5E
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:14:38:a6:f6:95:90:e9:d3:76:0c:ff:d1:d6:91:4a:e7:55:
ce:35:a9:0a:0b:14:0d:15:03:7b:fd:0d:9c:66:95:19:f7:e0:
b1:9a:da:f6:f4:b4:29:6d:44:d8:79:76:91:8b:3e:1b:59:7f:
0d:aa:44:2a:e8:c9:23:8c:00:70:a8:e7:5d:60:5e:cb:b6:2d:
0c:6c:0c:f4:48:79:54:9a:85:d5:35:1b:7d:13:4a:4b:a8:04:
20:9b:86:80:34:68:40:c1:c6:63:51:df:9f:7b:e7:d6:10:43:
7a:3e:14:d0:e6:29:0f:39:cc:d4:03:72:44:fa:6c:4e:55:a3:
d3:75:a5:d5:62:34:ff:41:e8:0a:ef:65:f1:e7:57:6c:61:83:
d5:2c:c0:b7:66:d9:57:d1:21:5e:f8:89:01:d3:26:86:71:46:
17:c1:81:ed:f5:a6:b2:45:c7:f2:59:c6:d1:5c:b1:7b:81:56:
bc:6c:df:2b:1a:41:d8:14:9f:6b:87:fc:a4:a6:ec:52:4b:3b:
fa:ba:de:01:83:e0:4f:12:49:02:2a:ca:81:ec:a5:24:f4:d2:
84:cc:aa:cf:4b:2f:72:55:61:c1:2e:7e:c8:83:e0:1f:2d:48:
84:09:b4:07:fe:e0:c8:43:80:0b:fd:5f:a7:4e:8c:b8:66:8c:
df:a0:1b:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifA0kpAfIASzG85wBRbfzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzZiOTc3MzY3NjJkNjkwODBiNDNkOWIwMGM2MWFmMWQz
MTFkOGMwHhcNMjUwODEyMTYwMDQ5WhcNMjUwODEzMTYwMDQ5WjAzMTEwLwYDVQQD
EyhiNGIyODE1OTFlYThlNzIyYTcwNmQ0ZDcxYzRkYWJiYWFjMmVmMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvokg9jRKTXoUwRzE4z6Apx2K9rx0
16kAWs+a2P2oSe9opffIbKDzD4KvxXj59Kl1q6okFVQu2BeTxhPRta+v9KACRudt
Ng9g0QLQWZdmX5TQqXjc+CDnDTAWnEHwvQr8upYapkNVDwLeDENEzyKcu2dPYezY
uf7VbWTdBvKmzii0kBC/U/VfilYv358utm2zGhDw2Vyqj59dhhOA4OtsCgAdfwrc
6VumvJopBthA/3ZqUs/tqkrAIqGUkYeBDS206tZnxP4eDHwXDXSxs8+ckVhKvm/N
95TIl1kTk+I9j/2difRjz/pi98trAHLl7Q33WVl/OXpWkKs9b34cQ4AJ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSygVkeqOcipwbU1xxNq7qsLvBeMB8GA1UdIwQY
MBaAFAo2uXc2di1pCAtD2bAMYa8dMR2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjIt
MWEzMjI2ODMyYzkxLzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjItMWEzMjI2ODMyYzkx
LzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhQ4pvaV
kOnTdgz/0daRSudVzjWpCgsUDRUDe/0NnGaVGffgsZra9vS0KW1E2Hl2kYs+G1l/
DapEKujJI4wAcKjnXWBey7YtDGwM9Eh5VJqF1TUbfRNKS6gEIJuGgDRoQMHGY1Hf
n3vn1hBDej4U0OYpDznM1ANyRPpsTlWj03Wl1WI0/0HoCu9l8edXbGGD1SzAt2bZ
V9EhXviJAdMmhnFGF8GB7fWmskXH8lnG0Vyxe4FWvGzfKxpB2BSfa4f8pKbsUks7
+rreAYPgTxJJAirKgeylJPTShMyqz0svclVhwS5+yIPgHy1IhAm0B/7gyEOAC/1f
p06MuGaM36Abwg==
-----END CERTIFICATE-----
Generated at Tue Aug 12 20:33:55 2025 by rpki-client