Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: QGd7jOjXin27RiJ0ew0vfFDHa1BvHqeUd0bcvsp2cHg=
Subject key identifier: CA:77:BA:8C:28:7E:EE:FA:36:21:C4:D1:FC:C0:20:6A:F4:3B:08:18
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 0197790B16BB69439AA14273B8B59ABA6026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0707
Signing time: Mon 16 Jun 2025 14:00:59 +0000
Manifest this update: Mon 16 Jun 2025 14:00:59 +0000
Manifest next update: Tue 17 Jun 2025 14:00:59 +0000
Files and hashes: 1: QZoLuFkftySTBFXm0IVGsdEjWSc.roa (hash: OleeaSAA+3wpsX1eMFtI7iInTKkVtH+3kKO3RFIPMMo=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: C8dmhXKWcF9vhwTygU+da6jSGEl07yZaMyc9ng/1QMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0b:16:bb:69:43:9a:a1:42:73:b8:b5:9a:ba:60:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Jun 16 14:00:59 2025 GMT
Not After : Jun 17 14:00:59 2025 GMT
Subject: CN=ca77ba8c287eeefa3621c4d1fcc0206af43b0818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:c0:9c:c2:74:c6:34:3a:17:99:6e:80:90:
fb:6c:06:27:3d:97:07:ba:25:97:99:c8:a2:34:12:
a0:db:12:4d:4e:46:42:bd:14:d3:22:78:71:41:87:
b6:51:88:07:c6:84:9e:95:11:bc:7e:10:cc:7f:fd:
b2:c5:ce:f8:9e:24:6a:1f:1a:b8:05:20:ac:5c:2b:
cc:7c:7e:56:7a:76:f3:fd:b2:28:84:9b:40:6e:ec:
bd:da:9f:44:f8:09:13:08:76:a7:72:07:47:90:9c:
45:21:81:91:fb:71:69:ad:27:25:7a:2d:cb:47:6c:
27:39:3e:3b:06:88:35:92:5a:92:3c:20:8c:b1:4a:
4d:d4:d8:73:9b:b5:5c:43:42:ba:fe:77:09:cb:b0:
e8:a7:83:e2:51:8c:b0:ec:e9:a4:2b:4b:7b:c9:b5:
b4:a1:99:df:11:04:99:91:90:b6:29:a0:de:43:d7:
48:29:8c:d8:c7:09:79:68:cf:27:96:a1:d7:d4:de:
3f:f5:80:ba:c1:14:6b:06:96:58:7b:7a:39:53:52:
e8:6c:19:5b:9d:b2:ea:4f:78:2e:48:b3:f4:6d:ae:
d6:a9:d1:d7:c4:1e:dc:7e:74:85:33:7e:3a:70:72:
5a:7e:c6:cb:1c:d5:24:9a:9d:79:39:c8:60:5e:a7:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:77:BA:8C:28:7E:EE:FA:36:21:C4:D1:FC:C0:20:6A:F4:3B:08:18
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9f:0a:31:f4:e9:c5:cc:34:4d:f1:0d:85:d2:55:7c:06:2a:
a9:93:b9:62:1b:89:b1:3c:4d:34:8e:c2:25:d5:25:0c:1b:da:
61:aa:e4:89:93:43:ce:6d:d8:93:2d:d3:f4:36:3d:67:0f:c1:
e2:c3:9d:ab:55:30:40:75:42:0f:90:04:9d:6f:5b:84:d1:b0:
07:87:af:f7:ef:81:f8:79:25:0b:87:57:af:f7:45:df:bb:97:
24:84:87:1a:2b:69:79:66:9b:30:d9:e0:f0:a3:79:02:9c:69:
60:8b:92:94:88:63:d8:f4:7a:a0:03:b3:43:d3:16:18:10:a8:
1d:4c:1b:08:45:40:87:a5:32:de:59:00:6d:11:e5:c5:e6:eb:
d6:81:4d:70:ea:3b:49:20:74:dc:11:d6:4f:a1:a1:69:ea:cd:
39:80:23:e8:b6:0a:cb:a7:aa:10:9b:fe:23:d6:6e:c8:b8:dd:
7a:9c:e2:e1:5b:24:31:a5:cd:20:bf:00:77:06:13:73:de:6c:
34:c4:e8:df:7f:06:03:91:fd:60:0d:9f:47:11:4f:92:b7:93:
16:17:81:64:ed:6a:ae:d0:d6:71:85:c0:16:ab:84:9b:8d:c8:
2a:18:95:77:1d:e8:62:d3:65:20:c7:d1:d1:1f:4a:b8:a4:2a:
8e:67:a7:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5Cxa7aUOaoUJzuLWaumAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjhlYzljY2Q2ZDg2MWY1ZjFhZmRhZDAwNDZmMzNjOTEw
M2JhMDYwHhcNMjUwNjE2MTQwMDU5WhcNMjUwNjE3MTQwMDU5WjAzMTEwLwYDVQQD
EyhjYTc3YmE4YzI4N2VlZWZhMzYyMWM0ZDFmY2MwMjA2YWY0M2IwODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkTAnMJ0xjQ6F5lugJD7bAYnPZcH
uiWXmciiNBKg2xJNTkZCvRTTInhxQYe2UYgHxoSelRG8fhDMf/2yxc74niRqHxq4
BSCsXCvMfH5Wenbz/bIohJtAbuy92p9E+AkTCHancgdHkJxFIYGR+3FprSclei3L
R2wnOT47Bog1klqSPCCMsUpN1Nhzm7VcQ0K6/ncJy7Dop4PiUYyw7OmkK0t7ybW0
oZnfEQSZkZC2KaDeQ9dIKYzYxwl5aM8nlqHX1N4/9YC6wRRrBpZYe3o5U1LobBlb
nbLqT3guSLP0ba7WqdHXxB7cfnSFM346cHJafsbLHNUkmp15OchgXqcgPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMp3uowofu76NiHE0fzAIGr0OwgYMB8GA1UdIwQY
MBaAFHAo7JzNbYYfXxr9rQBG8zyRA7oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAt
Y2NkZDA2NTYzYTVmLzEvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAtY2NkZDA2NTYzYTVm
LzEvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO58KMfTp
xcw0TfENhdJVfAYqqZO5YhuJsTxNNI7CJdUlDBvaYarkiZNDzm3Yky3T9DY9Zw/B
4sOdq1UwQHVCD5AEnW9bhNGwB4ev9++B+HklC4dXr/dF37uXJISHGitpeWabMNng
8KN5ApxpYIuSlIhj2PR6oAOzQ9MWGBCoHUwbCEVAh6Uy3lkAbRHlxebr1oFNcOo7
SSB03BHWT6GhaerNOYAj6LYKy6eqEJv+I9ZuyLjdepzi4VskMaXNIL8AdwYTc95s
NMTo338GA5H9YA2fRxFPkreTFheBZO1qrtDWcYXAFquEm43IKhiVdx3oYtNlIMfR
0R9KuKQqjmenKw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:30:03 2025 by rpki-client