Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
File: cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json)
Hash identifier: 0vUKzhaI1Sg53spOIXodlfu173WttsjZOn0/fYI1Fkc=
Subject key identifier: 43:13:8D:26:9A:4D:4D:5F:A0:40:CF:32:AA:B4:0F:C6:35:E3:D0:46
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial: 01988C8F668BDC2F40BF87911A76B8DF7B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
Manifest number: 03F8
Signing time: Sat 09 Aug 2025 02:01:04 +0000
Manifest this update: Sat 09 Aug 2025 02:01:04 +0000
Manifest next update: Sun 10 Aug 2025 02:01:04 +0000
Files and hashes: 1: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: zSrF3tHa5HZM8bBdcCH+b/jlD1Utb0bPCdEOVt05A9U=)
2: zNpNQl9NSaLChe4B635hRjw02-o.roa (hash: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:66:8b:dc:2f:40:bf:87:91:1a:76:b8:df:7b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Validity
Not Before: Aug 9 02:01:04 2025 GMT
Not After : Aug 10 02:01:04 2025 GMT
Subject: CN=43138d269a4d4d5fa040cf32aab40fc635e3d046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:42:67:a3:0e:b0:d6:23:9f:18:be:0e:37:
b7:52:b4:62:70:5a:32:ed:da:f6:0f:d0:6e:70:37:
c4:21:a3:d4:16:5c:c4:4f:db:56:c0:ef:cc:2a:ca:
36:e2:a2:bd:cb:ce:a1:2a:19:60:02:03:db:2e:d1:
f4:a1:03:bd:45:33:90:d2:67:8e:5d:f1:c4:70:23:
a3:6c:7e:ba:13:4a:cb:83:0d:ec:cf:13:e5:84:64:
5b:dd:a4:2e:f2:8b:43:c0:cf:2e:fd:5e:da:fc:5a:
80:7c:2f:dd:b1:01:92:28:20:dd:bd:c0:9f:a3:9b:
87:10:cf:7b:b3:0e:64:c0:5c:f3:b5:de:b4:e8:4e:
3f:14:35:40:06:3f:dc:75:07:05:c0:d3:ae:eb:db:
bd:f3:43:0a:de:3a:b2:79:0b:75:c7:08:3e:94:17:
c9:69:0c:a6:52:1a:63:5c:c1:b7:82:3b:50:27:96:
50:74:a5:d2:b3:3b:f9:a2:ee:c6:f8:aa:d7:2d:04:
4c:1e:f6:53:9d:51:97:3d:da:80:c8:f1:da:41:ae:
a8:43:05:3b:c8:94:b8:e1:46:c1:77:02:25:21:66:
1d:7d:10:b6:97:90:5d:92:1a:fb:71:17:d8:67:a3:
0d:c0:5e:ac:61:3f:ab:32:ea:cf:ae:a0:95:03:f3:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:8D:26:9A:4D:4D:5F:A0:40:CF:32:AA:B4:0F:C6:35:E3:D0:46
X509v3 Authority Key Identifier:
keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5f:9e:a9:43:63:30:1c:4f:16:76:17:87:af:4b:c2:f6:55:
55:69:78:23:5a:ae:17:1f:29:e8:a6:34:5e:5e:5f:93:c6:26:
bc:34:69:c0:e4:d8:9b:26:f1:41:a0:48:25:14:45:b0:38:15:
6b:6b:98:2e:66:4c:39:81:73:21:4c:5e:db:3a:81:ad:d5:6f:
64:10:b1:3e:66:64:8c:f5:f3:a6:f6:32:d3:ca:9a:60:22:24:
55:4c:9d:3b:38:84:e2:48:4d:39:85:58:ee:0f:6f:fe:07:ef:
99:69:17:66:35:17:6b:4b:6b:b4:c2:79:ba:71:21:19:e0:94:
4c:df:d2:3f:cb:c7:0a:7f:df:e6:9e:77:bc:ff:0e:e2:89:c3:
7a:df:8d:8c:f7:20:f2:f3:da:54:75:53:cc:bb:02:c9:c2:02:
4e:c8:bd:e1:9a:93:81:e3:1d:4d:04:17:57:21:c8:a1:a5:21:
26:90:60:80:71:ae:f0:74:a9:df:c2:58:eb:de:17:7e:3f:d5:
27:cb:5e:1e:f5:e4:fb:42:5c:89:ef:42:63:ac:4d:43:c8:01:
f9:8d:d0:9e:ae:fd:76:21:82:5d:09:1b:f4:f6:b4:ca:20:09:
37:fa:5b:20:2a:b9:bb:b8:22:d4:ef:e4:e9:ff:d7:c8:5e:a3:
af:fd:33:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMj2aL3C9Av4eRGna433tJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNDgwODU4ZmRlZWExOTI0YWI4YzYyZWMzZmM3MzJkMzQw
MjBhOWQwHhcNMjUwODA5MDIwMTA0WhcNMjUwODEwMDIwMTA0WjAzMTEwLwYDVQQD
Eyg0MzEzOGQyNjlhNGQ0ZDVmYTA0MGNmMzJhYWI0MGZjNjM1ZTNkMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMZCZ6MOsNYjnxi+Dje3UrRicFoy
7dr2D9BucDfEIaPUFlzET9tWwO/MKso24qK9y86hKhlgAgPbLtH0oQO9RTOQ0meO
XfHEcCOjbH66E0rLgw3szxPlhGRb3aQu8otDwM8u/V7a/FqAfC/dsQGSKCDdvcCf
o5uHEM97sw5kwFzztd606E4/FDVABj/cdQcFwNOu69u980MK3jqyeQt1xwg+lBfJ
aQymUhpjXMG3gjtQJ5ZQdKXSszv5ou7G+KrXLQRMHvZTnVGXPdqAyPHaQa6oQwU7
yJS44UbBdwIlIWYdfRC2l5Bdkhr7cRfYZ6MNwF6sYT+rMurPrqCVA/OM1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMTjSaaTU1foEDPMqq0D8Y149BGMB8GA1UdIwQY
MBaAFHBICFj97qGSSrjGLsP8cy00AgqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTct
Y2EyOGQ5OTYyNDQ2LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTctY2EyOGQ5OTYyNDQ2
LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdl+eqUNj
MBxPFnYXh69LwvZVVWl4I1quFx8p6KY0Xl5fk8YmvDRpwOTYmybxQaBIJRRFsDgV
a2uYLmZMOYFzIUxe2zqBrdVvZBCxPmZkjPXzpvYy08qaYCIkVUydOziE4khNOYVY
7g9v/gfvmWkXZjUXa0trtMJ5unEhGeCUTN/SP8vHCn/f5p53vP8O4onDet+NjPcg
8vPaVHVTzLsCycICTsi94ZqTgeMdTQQXVyHIoaUhJpBggHGu8HSp38JY694Xfj/V
J8teHvXk+0Jcie9CY6xNQ8gB+Y3Qnq79diGCXQkb9Pa0yiAJN/pbICq5u7gi1O/k
6f/XyF6jr/0z6Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:39:10 2025 by rpki-client