Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: eMQ3zhmG8MtJsUIvdJO8szG4Q36sfCQkIrUxqFTikhw=
Subject key identifier: 66:DE:14:49:C2:D6:0C:27:C5:4D:B2:82:F7:16:CD:1D:E5:99:97:A1
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 01976E878921DE324A4FE21730F5C58E3C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0C34
Signing time: Sat 14 Jun 2025 13:01:05 +0000
Manifest this update: Sat 14 Jun 2025 13:01:05 +0000
Manifest next update: Sun 15 Jun 2025 13:01:05 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=)
3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: dMkbXm26OhGJYok89oMV2Ky4J3FjM9DAvfKAzBJHSfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:89:21:de:32:4a:4f:e2:17:30:f5:c5:8e:3c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Jun 14 13:01:05 2025 GMT
Not After : Jun 15 13:01:05 2025 GMT
Subject: CN=66de1449c2d60c27c54db282f716cd1de59997a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:1d:f6:0b:1d:f0:17:83:ab:ac:fa:f5:d8:
d9:60:bc:e7:f9:7c:e8:2e:8a:79:ca:72:b2:d0:97:
c2:d2:1f:fc:02:de:4c:c7:e6:e3:f9:9f:86:5a:f3:
38:5e:7b:2c:fe:6d:3d:85:a0:46:5a:56:76:55:ad:
0f:c3:69:1e:38:87:27:df:cc:11:8d:71:b9:d7:c9:
f3:9c:01:16:f8:e0:24:66:b9:24:40:0b:7d:f8:71:
b8:3f:78:d4:d6:6d:44:83:63:42:35:74:cc:4e:3b:
ab:64:7f:a3:9e:a3:3c:72:f7:16:ed:34:3a:4f:b9:
62:a4:3a:e6:e1:68:1d:fd:37:a7:75:fc:f0:0e:20:
15:28:18:5f:ab:c4:e5:64:28:6e:39:a8:4a:5f:e2:
d2:9a:5f:06:86:f4:00:30:1e:c8:06:bb:92:5f:8c:
71:5a:60:d3:bb:cc:8e:5f:14:33:2c:7a:4a:5a:89:
f3:7a:2e:eb:5a:91:fd:41:d2:a2:6d:6b:9d:59:f6:
5d:b8:32:7c:c0:22:f6:12:fc:42:ea:cf:12:df:84:
4c:48:0b:9f:8b:52:4c:48:11:17:13:af:1f:7c:20:
4a:5c:d1:e7:3c:c1:1c:ed:aa:2c:04:80:fd:78:cc:
55:79:13:17:77:f5:1d:59:ac:00:17:af:ed:8e:e0:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DE:14:49:C2:D6:0C:27:C5:4D:B2:82:F7:16:CD:1D:E5:99:97:A1
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:db:08:49:fe:89:e2:85:ec:61:e6:e7:7d:32:89:c5:b7:07:
ef:90:86:f6:83:90:89:4e:29:36:1f:0e:e3:bb:42:55:a9:b5:
02:b7:1b:a9:0b:3d:ec:9f:c9:ef:06:57:26:7a:b4:24:df:32:
22:d9:0a:c3:91:4f:81:f1:47:89:24:e1:73:f7:97:93:c1:86:
93:60:66:aa:b8:e1:0b:f6:cb:96:0f:cd:17:e0:15:ed:ae:15:
ac:7f:37:3f:65:21:37:ba:83:a0:01:98:0b:a2:32:f7:46:67:
f3:d2:6d:86:79:6e:65:04:fa:36:fa:34:13:a5:89:8d:92:d2:
8c:a3:0a:9d:2e:b3:1d:85:a3:17:7e:d4:71:34:53:cf:48:ac:
20:a3:9a:ca:64:41:f7:60:30:88:49:37:e2:d9:53:c9:4f:70:
fa:97:01:50:89:ea:da:a9:33:4d:aa:4d:c1:c8:6b:26:53:26:
55:88:49:5f:e3:75:04:2c:cc:41:1d:d3:92:04:d3:d9:16:46:
f8:72:74:aa:48:0c:6a:de:76:60:5f:b6:84:7a:59:e1:1b:a9:
83:97:7c:0b:53:f3:84:53:03:19:1e:7b:de:e4:2d:f0:87:10:
d4:e8:8c:51:de:64:93:68:a6:c6:8e:5b:bf:11:d2:b1:70:eb:
ab:b6:e7:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduh4kh3jJKT+IXMPXFjjxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBk
NTNiNGQwHhcNMjUwNjE0MTMwMTA1WhcNMjUwNjE1MTMwMTA1WjAzMTEwLwYDVQQD
Eyg2NmRlMTQ0OWMyZDYwYzI3YzU0ZGIyODJmNzE2Y2QxZGU1OTk5N2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpQd9gsd8BeDq6z69djZYLzn+Xzo
Lop5ynKy0JfC0h/8At5Mx+bj+Z+GWvM4Xnss/m09haBGWlZ2Va0Pw2keOIcn38wR
jXG518nznAEW+OAkZrkkQAt9+HG4P3jU1m1Eg2NCNXTMTjurZH+jnqM8cvcW7TQ6
T7lipDrm4Wgd/TendfzwDiAVKBhfq8TlZChuOahKX+LSml8GhvQAMB7IBruSX4xx
WmDTu8yOXxQzLHpKWonzei7rWpH9QdKibWudWfZduDJ8wCL2EvxC6s8S34RMSAuf
i1JMSBEXE68ffCBKXNHnPMEc7aosBID9eMxVeRMXd/UdWawAF6/tjuCFTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbeFEnC1gwnxU2ygvcWzR3lmZehMB8GA1UdIwQY
MBaAFHCGEuhwOmYIicoPRXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTkt
MzAwOTdhMjQ2YTljLzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTlj
LzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtsISf6J
4oXsYebnfTKJxbcH75CG9oOQiU4pNh8O47tCVam1ArcbqQs97J/J7wZXJnq0JN8y
ItkKw5FPgfFHiSThc/eXk8GGk2BmqrjhC/bLlg/NF+AV7a4VrH83P2UhN7qDoAGY
C6Iy90Zn89JthnluZQT6Nvo0E6WJjZLSjKMKnS6zHYWjF37UcTRTz0isIKOaymRB
92AwiEk34tlTyU9w+pcBUInq2qkzTapNwchrJlMmVYhJX+N1BCzMQR3TkgTT2RZG
+HJ0qkgMat52YF+2hHpZ4Rupg5d8C1PzhFMDGR573uQt8IcQ1OiMUd5kk2imxo5b
vxHSsXDrq7bn0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:20 2025 by rpki-client