Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: k1BKm1XzpGkqaR0vIuAqBC2hBF9QCEDSHKPEHbqNnpc=
Subject key identifier: 0A:EC:75:EE:E5:A7:5B:FA:AF:E5:A3:91:D7:4D:DA:75:54:97:9A:90
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 019873E3A1641179D2FAF5B9D3C2B29924C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:34 +0000
Manifest this update: Mon 04 Aug 2025 07:02:34 +0000
Manifest next update: Tue 05 Aug 2025 07:02:34 +0000
Files and hashes: 1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=)
2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: 9K0ydPCbSa3i2RtBqv5wLWizX3OnuPbzxstSG0Uu28c=)
3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:a1:64:11:79:d2:fa:f5:b9:d3:c2:b2:99:24:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Aug 4 07:02:34 2025 GMT
Not After : Aug 5 07:02:34 2025 GMT
Subject: CN=0aec75eee5a75bfaafe5a391d74dda7554979a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:fa:84:4d:b5:42:41:72:9c:90:69:f0:66:
b9:17:fb:24:b9:84:93:26:0f:b7:88:15:7d:c6:e6:
be:ae:78:a3:61:19:b6:f3:fb:6b:19:4e:39:52:81:
5c:c0:83:2b:58:c7:cd:d1:f6:05:53:4e:98:3b:95:
47:13:b4:9f:43:3c:8d:42:42:f3:c6:fd:ac:e6:1a:
5a:9c:45:df:83:60:f5:e5:a8:7a:ec:3e:36:2d:eb:
00:d0:cc:39:40:7a:a4:fe:94:e1:0c:dc:c3:e9:e2:
8e:02:70:c9:5a:a7:54:12:96:15:5b:6b:f8:9b:34:
88:27:b0:85:14:04:90:36:01:b1:32:05:dd:b4:58:
55:17:14:34:33:a5:68:a8:70:c7:8c:62:28:cb:ac:
5b:68:28:a6:af:d6:fc:7a:0d:11:c0:07:ef:3f:cf:
74:76:42:ab:81:c8:13:11:f7:d8:75:d9:d9:3e:89:
5a:e8:90:40:7c:28:65:3f:97:f2:9f:29:9a:8a:cd:
ef:cd:5e:a9:6f:12:7f:6e:37:c3:b8:05:f2:8a:f7:
c0:dc:57:ca:4d:fa:c6:1c:ef:67:7a:8a:59:67:44:
67:1e:e1:d1:f0:e3:1c:f1:c1:6d:93:dc:86:42:00:
80:57:99:36:ec:da:be:9d:89:59:ef:ca:d7:6b:9f:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EC:75:EE:E5:A7:5B:FA:AF:E5:A3:91:D7:4D:DA:75:54:97:9A:90
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c3:db:b9:59:c9:e8:2d:a4:06:2c:89:78:e5:ff:67:a1:66:
64:84:4b:20:cd:a1:7b:11:49:8b:7f:d8:f4:24:84:8f:f3:ed:
8a:63:ca:a0:3f:0f:29:fb:b6:fd:7b:ba:5b:2f:ad:35:df:ac:
d8:1e:de:a7:df:2f:d2:92:7e:9d:1d:fc:d7:bc:fb:48:7a:48:
cc:74:f8:45:84:ee:55:e5:5f:ba:9e:2c:70:93:a1:11:22:65:
16:bc:5e:07:e7:1d:31:fb:24:93:73:d3:43:29:d1:da:12:88:
31:7d:3f:64:dd:6c:dc:28:31:31:00:a5:f8:0a:2e:bf:65:88:
2d:88:95:b2:0d:41:ff:04:75:57:f4:52:37:33:d7:94:69:8f:
be:6f:aa:61:29:b1:b4:e6:e9:80:b7:4e:1d:30:8b:c8:39:05:
10:d1:2b:2a:fa:c2:b0:43:e6:2f:65:ed:cf:a5:99:c1:a2:41:
03:34:c0:27:2d:cb:6f:bb:d3:ad:e0:bd:f2:1b:0a:d2:bf:cf:
e8:90:e9:60:2e:9d:e5:c7:23:8c:40:d8:2d:d9:b9:89:cd:c6:
13:b8:d0:15:f0:8e:2e:20:7d:e9:ae:eb:7c:2d:23:5b:3e:9e:
dd:13:13:68:5b:df:5e:c6:35:cf:4e:a2:2c:7a:db:49:98:28:
9c:e8:bf:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz46FkEXnS+vW508KymSTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy
NTU1YjcwHhcNMjUwODA0MDcwMjM0WhcNMjUwODA1MDcwMjM0WjAzMTEwLwYDVQQD
EygwYWVjNzVlZWU1YTc1YmZhYWZlNWEzOTFkNzRkZGE3NTU0OTc5YTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt876hE21QkFynJBp8Ga5F/skuYST
Jg+3iBV9xua+rnijYRm28/trGU45UoFcwIMrWMfN0fYFU06YO5VHE7SfQzyNQkLz
xv2s5hpanEXfg2D15ah67D42LesA0Mw5QHqk/pThDNzD6eKOAnDJWqdUEpYVW2v4
mzSIJ7CFFASQNgGxMgXdtFhVFxQ0M6VoqHDHjGIoy6xbaCimr9b8eg0RwAfvP890
dkKrgcgTEffYddnZPola6JBAfChlP5fynymais3vzV6pbxJ/bjfDuAXyivfA3FfK
TfrGHO9neopZZ0RnHuHR8OMc8cFtk9yGQgCAV5k27Nq+nYlZ78rXa59MLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArsde7lp1v6r+WjkddN2nVUl5qQMB8GA1UdIwQY
MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt
ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3
LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcPbuVnJ
6C2kBiyJeOX/Z6FmZIRLIM2hexFJi3/Y9CSEj/PtimPKoD8PKfu2/Xu6Wy+tNd+s
2B7ep98v0pJ+nR3817z7SHpIzHT4RYTuVeVfup4scJOhESJlFrxeB+cdMfskk3PT
QynR2hKIMX0/ZN1s3CgxMQCl+Aouv2WILYiVsg1B/wR1V/RSNzPXlGmPvm+qYSmx
tObpgLdOHTCLyDkFENErKvrCsEPmL2Xtz6WZwaJBAzTAJy3Lb7vTreC98hsK0r/P
6JDpYC6d5ccjjEDYLdm5ic3GE7jQFfCOLiB96a7rfC0jWz6e3RMTaFvfXsY1z06i
LHrbSZgonOi/JA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:30 2025 by rpki-client