Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: d6ti1RHwr9Uc6WOFs3Qu9SGQE9xTXyWwBwNNy60zkJ0=
Subject key identifier: CA:E3:4E:30:48:84:A2:41:D5:8C:5D:5F:ED:61:40:3B:3C:F2:01:82
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 01988CFF05769A34F3878B849E0014F07463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 09C5
Signing time: Sat 09 Aug 2025 04:02:59 +0000
Manifest this update: Sat 09 Aug 2025 04:02:59 +0000
Manifest next update: Sun 10 Aug 2025 04:02:59 +0000
Files and hashes: 1: YJ__Jpr1denKLIU4A4wwpaBEGuM.roa (hash: HQMvWJSgBySt+TDaIiCe+VSZte2lW30WZtz1IJWSvxM=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: jt7Mng/rpan/gvxqVnyiqXLo6bODGJ4yraIV17lJpko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:ff:05:76:9a:34:f3:87:8b:84:9e:00:14:f0:74:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: Aug 9 04:02:59 2025 GMT
Not After : Aug 10 04:02:59 2025 GMT
Subject: CN=cae34e304884a241d58c5d5fed61403b3cf20182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:6e:f4:21:61:65:79:f1:cf:30:a2:38:3c:
1b:52:4d:db:03:a0:a4:96:22:43:bd:11:8a:36:df:
77:27:5a:e5:3c:30:bb:f0:b9:69:89:64:95:b7:b2:
e7:a9:0e:7d:47:61:86:3e:c9:55:1b:3f:ca:8e:7a:
08:a9:c6:9a:b1:93:79:6c:3c:59:b5:8b:00:84:f1:
7c:2c:d0:69:00:2c:6f:a9:db:50:97:bd:f0:f7:6f:
2b:f7:40:a4:1f:87:01:8c:46:29:52:25:13:93:06:
a5:db:2d:51:95:ae:6c:da:40:e8:31:6f:a9:3e:b0:
b9:a6:b4:34:3b:e8:f7:29:12:a0:0f:6e:b3:f8:8b:
db:00:32:c2:cd:ea:05:31:75:bc:d9:34:39:88:63:
df:d6:17:71:cc:7b:e4:b1:38:38:e9:ee:d4:9a:8b:
d6:ea:60:b1:62:15:7d:50:b8:a4:19:77:09:7b:a3:
a8:ac:d9:0f:3f:89:9d:12:7c:e4:1c:f1:a3:8d:41:
c9:8d:2c:75:5f:e7:b4:9b:ea:56:bc:40:fd:74:4d:
2a:f5:46:2d:89:43:a5:6d:8b:95:f1:df:7d:3e:ee:
27:f8:cc:9e:30:16:20:0f:5c:cf:b6:63:83:c8:fd:
d7:20:c6:17:11:45:1f:67:7e:41:b4:3f:19:20:9d:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E3:4E:30:48:84:A2:41:D5:8C:5D:5F:ED:61:40:3B:3C:F2:01:82
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d6:bd:94:2f:66:d4:79:e1:16:1a:7b:30:b2:c1:2a:34:a9:
fa:1c:b2:72:d1:54:5a:0a:36:5a:e5:df:71:1b:18:cf:b7:52:
f0:2d:e6:95:57:f5:6c:eb:11:ce:de:0f:93:3f:ef:8a:ac:c5:
54:97:40:05:74:f2:d9:f6:c7:c6:f8:38:59:fe:f9:09:8a:25:
8c:23:e6:92:25:02:72:14:dd:67:40:1f:f5:9b:cf:2d:cb:23:
45:f6:de:da:65:c2:33:c6:d4:7a:f3:69:c9:e6:10:d3:b5:d7:
8c:bc:8e:14:8a:23:84:02:7b:7c:28:67:b4:c5:1d:35:eb:54:
39:ca:6d:78:46:1d:29:ec:8e:ac:09:8d:f7:5f:1a:72:c6:c7:
08:4d:7d:c9:1f:d8:49:b2:f0:44:b5:6a:d1:93:fe:3f:cd:fe:
c9:7b:18:03:f8:10:47:bf:d1:2f:28:22:83:e0:98:7b:b9:00:
67:ef:e7:20:a6:e5:29:d2:ac:07:4f:b7:9b:96:e4:e7:f0:42:
7c:b1:bd:8a:ab:3d:eb:34:11:9e:85:d6:f4:d4:cd:80:db:fc:
99:a4:42:be:5e:82:a0:dc:23:26:69:38:53:96:da:3b:97:c0:
63:38:19:19:2c:75:30:bc:d2:9e:96:30:63:7c:25:9a:af:ca:
6d:38:f0:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/wV2mjTzh4uEngAU8HRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmQwZTM2ZTFjMjAyMzA0YTM1MTMzYjExNjY2NjI1ZTVk
NmU1ZWYwHhcNMjUwODA5MDQwMjU5WhcNMjUwODEwMDQwMjU5WjAzMTEwLwYDVQQD
EyhjYWUzNGUzMDQ4ODRhMjQxZDU4YzVkNWZlZDYxNDAzYjNjZjIwMTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUhu9CFhZXnxzzCiODwbUk3bA6Ck
liJDvRGKNt93J1rlPDC78LlpiWSVt7LnqQ59R2GGPslVGz/KjnoIqcaasZN5bDxZ
tYsAhPF8LNBpACxvqdtQl73w928r90CkH4cBjEYpUiUTkwal2y1Rla5s2kDoMW+p
PrC5prQ0O+j3KRKgD26z+IvbADLCzeoFMXW82TQ5iGPf1hdxzHvksTg46e7UmovW
6mCxYhV9ULikGXcJe6OorNkPP4mdEnzkHPGjjUHJjSx1X+e0m+pWvED9dE0q9UYt
iUOlbYuV8d99Pu4n+MyeMBYgD1zPtmODyP3XIMYXEUUfZ35BtD8ZIJ3kWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrjTjBIhKJB1YxdX+1hQDs88gGCMB8GA1UdIwQY
MBaAFHK9DjbhwgIwSjUTOxFmZiXl1uXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81MjQ3NmQtYTc5NC00N2Q1LThmNTAt
YWVkYTgyNDY3OGQ0LzEvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81MjQ3NmQtYTc5NC00N2Q1LThmNTAtYWVkYTgyNDY3OGQ0
LzEvY3IwT051SENBakJLTlJNN0VXWm1KZVhXNWU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYta9lC9m
1HnhFhp7MLLBKjSp+hyyctFUWgo2WuXfcRsYz7dS8C3mlVf1bOsRzt4Pkz/viqzF
VJdABXTy2fbHxvg4Wf75CYoljCPmkiUCchTdZ0Af9ZvPLcsjRfbe2mXCM8bUevNp
yeYQ07XXjLyOFIojhAJ7fChntMUdNetUOcpteEYdKeyOrAmN918acsbHCE19yR/Y
SbLwRLVq0ZP+P83+yXsYA/gQR7/RLygig+CYe7kAZ+/nIKblKdKsB0+3m5bk5/BC
fLG9iqs96zQRnoXW9NTNgNv8maRCvl6CoNwjJmk4U5baO5fAYzgZGSx1MLzSnpYw
Y3wlmq/KbTjwpQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:51 2025 by rpki-client