Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: tt1fp+2FoWEHZMeUOxQBIuirdXt7fXs7ULYA1oLg2Wg=
Subject key identifier: 96:E4:E2:94:99:31:48:24:B2:FE:97:94:7A:8D:73:6A:80:42:80:BB
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 01977451F805FE56D24BA074209CAED367C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 088B
Signing time: Sun 15 Jun 2025 16:00:18 +0000
Manifest this update: Sun 15 Jun 2025 16:00:18 +0000
Manifest next update: Mon 16 Jun 2025 16:00:18 +0000
Files and hashes: 1: 24PmMpD-bHbUV8mxF_RlzuSRjLU.roa (hash: ohLVMvfqoqKO1xPsU0QfK7dKJZtv+ZBmQ14II/YiXms=)
2: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: EN6Sp5z2sDHt+P2sotg/dlOCmpkZKNKmSx2ncxHgUKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:51:f8:05:fe:56:d2:4b:a0:74:20:9c:ae:d3:67:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Jun 15 16:00:18 2025 GMT
Not After : Jun 16 16:00:18 2025 GMT
Subject: CN=96e4e29499314824b2fe97947a8d736a804280bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:f0:9e:9e:00:eb:e8:7e:e6:41:e7:c4:38:
aa:8d:b7:33:d6:dd:e8:2a:4f:a1:ce:af:e0:0a:8e:
c1:9c:ec:09:f4:9f:be:86:06:f6:4c:6d:06:51:8f:
88:d1:ba:1c:4c:f5:58:65:20:05:5f:f6:56:cb:43:
c1:10:0e:c2:50:9f:79:ac:58:3b:66:1e:2a:a5:19:
a7:fb:62:41:b5:9b:7f:3e:92:ca:dc:ae:e9:55:ee:
b7:02:d8:a0:36:89:4d:ee:32:31:98:60:fb:62:1f:
68:f8:95:30:1e:d9:72:2b:35:23:ca:76:00:03:35:
90:ab:ab:06:0a:0e:7b:b1:f0:ca:94:99:d7:4e:33:
64:a7:d0:da:4d:16:4c:36:cf:fb:8b:c2:34:6f:ad:
bb:6e:9a:ca:19:ff:d3:93:33:e7:bc:42:f0:a0:a2:
f4:4b:5b:fc:9f:90:13:ea:d3:34:4e:3f:0b:0b:35:
bb:af:7e:8f:45:0f:ca:bd:35:5c:81:c0:60:e3:2a:
96:ff:04:89:88:04:03:63:9a:66:05:cf:3e:4f:ea:
ff:bd:34:fc:c6:fd:41:29:39:22:3b:7b:42:10:14:
8d:15:84:96:55:4f:fd:2e:0f:9a:08:7d:8c:9a:55:
be:c9:2c:c4:72:96:8c:94:dd:5a:c7:e1:6a:c4:64:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E4:E2:94:99:31:48:24:B2:FE:97:94:7A:8D:73:6A:80:42:80:BB
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:62:70:a7:98:75:8c:b1:4d:37:61:b3:f1:a4:02:d6:79:2e:
b3:f0:05:41:7b:40:b5:14:0b:ed:db:77:2b:a5:b2:b3:41:72:
d8:f1:55:68:81:4c:5c:50:a7:96:94:09:f0:5c:3b:ba:38:13:
4c:a4:21:ba:a7:f3:7b:c9:6b:14:2d:a4:a4:7c:98:84:ca:23:
41:63:80:ab:b9:cb:82:0d:12:ab:95:e7:2f:69:a1:a6:b6:6b:
25:46:60:a5:44:1c:3e:47:7a:ad:51:93:91:b7:b8:1c:20:a6:
62:b0:2b:c2:11:b0:8a:d7:4b:9f:ec:cf:27:2e:83:74:e5:ba:
e4:f5:36:30:3b:c9:2f:3e:5f:99:60:6f:2d:d7:fd:63:be:79:
27:62:d6:4c:5e:b6:c5:f2:c8:6b:0c:39:42:65:bb:ba:ef:6f:
20:fb:c4:cb:5c:e0:fd:26:d4:d0:6e:ef:10:32:c4:6b:c6:17:
bd:c7:c3:ea:c3:75:f0:21:f2:2f:8a:74:81:77:7a:c9:ac:b4:
dc:92:2e:94:53:6b:18:bd:df:82:c3:c7:12:72:34:92:51:71:
78:da:e4:14:cd:f1:93:9d:f1:cd:ae:b5:30:70:77:aa:a1:30:
fb:14:3d:4a:94:fe:0d:db:43:e5:63:58:4e:99:4e:f2:45:0a:
55:09:5e:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0UfgF/lbSS6B0IJyu02fHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZDA2ZGQyN2JkOTNhMzgwZGE0Yzc1ZDFhOGJmMDc2ODI4
ZmQ2NGEwHhcNMjUwNjE1MTYwMDE4WhcNMjUwNjE2MTYwMDE4WjAzMTEwLwYDVQQD
Eyg5NmU0ZTI5NDk5MzE0ODI0YjJmZTk3OTQ3YThkNzM2YTgwNDI4MGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1Hwnp4A6+h+5kHnxDiqjbcz1t3o
Kk+hzq/gCo7BnOwJ9J++hgb2TG0GUY+I0bocTPVYZSAFX/ZWy0PBEA7CUJ95rFg7
Zh4qpRmn+2JBtZt/PpLK3K7pVe63AtigNolN7jIxmGD7Yh9o+JUwHtlyKzUjynYA
AzWQq6sGCg57sfDKlJnXTjNkp9DaTRZMNs/7i8I0b627bprKGf/TkzPnvELwoKL0
S1v8n5AT6tM0Tj8LCzW7r36PRQ/KvTVcgcBg4yqW/wSJiAQDY5pmBc8+T+r/vTT8
xv1BKTkiO3tCEBSNFYSWVU/9Lg+aCH2MmlW+ySzEcpaMlN1ax+FqxGRenwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbk4pSZMUgksv6XlHqNc2qAQoC7MB8GA1UdIwQY
MBaAFArQbdJ72To4DaTHXRqL8HaCj9ZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3RCdDBudlpPamdOcE1kZEdvdndkb0tQMWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYjc1ZGItMjViMi00M2RjLWFhMTIt
ZWQwMDFhMjg4OWFkLzEvQ3RCdDBudlpPamdOcE1kZEdvdndkb0tQMWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kYjc1ZGItMjViMi00M2RjLWFhMTItZWQwMDFhMjg4OWFk
LzEvQ3RCdDBudlpPamdOcE1kZEdvdndkb0tQMWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2Jwp5h1
jLFNN2Gz8aQC1nkus/AFQXtAtRQL7dt3K6Wys0Fy2PFVaIFMXFCnlpQJ8Fw7ujgT
TKQhuqfze8lrFC2kpHyYhMojQWOAq7nLgg0Sq5XnL2mhprZrJUZgpUQcPkd6rVGT
kbe4HCCmYrArwhGwitdLn+zPJy6DdOW65PU2MDvJLz5fmWBvLdf9Y755J2LWTF62
xfLIaww5QmW7uu9vIPvEy1zg/SbU0G7vEDLEa8YXvcfD6sN18CHyL4p0gXd6yay0
3JIulFNrGL3fgsPHEnI0klFxeNrkFM3xk53xza61MHB3qqEw+xQ9SpT+DdtD5WNY
TplO8kUKVQleiw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 00:23:17 2025 by rpki-client