Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: V/c2Fon2vxtE1a3PxJUMFa2j6GRp+KH8nrwDzmMfvIQ=
Subject key identifier: 02:97:7D:40:6A:B0:A6:DF:41:00:FC:72:2B:45:5A:58:1E:59:AB:BA
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 01977DC395C44FAB32BA2A4EEF2C8F64BFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 0505
Signing time: Tue 17 Jun 2025 12:00:59 +0000
Manifest this update: Tue 17 Jun 2025 12:00:59 +0000
Manifest next update: Wed 18 Jun 2025 12:00:59 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: AcKGAx4CwyeOIWn2cA42Xw2QirKD4Lop7OdCfghXVKc=)
2: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (hash: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c3:95:c4:4f:ab:32:ba:2a:4e:ef:2c:8f:64:bf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Jun 17 12:00:59 2025 GMT
Not After : Jun 18 12:00:59 2025 GMT
Subject: CN=02977d406ab0a6df4100fc722b455a581e59abba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:df:45:f8:f8:44:4d:b1:2c:95:34:1b:97:cb:
ca:71:61:e0:1e:b9:92:be:05:2b:db:96:30:ee:d6:
f6:d6:d0:67:32:ae:83:ff:df:a0:45:05:fd:27:0b:
1e:0a:38:e7:f0:6f:53:69:ee:43:0b:a1:b1:d0:d2:
e8:0a:13:dd:92:f8:62:a6:aa:77:cd:a3:22:61:b3:
a7:ea:49:9c:66:90:7f:95:98:9a:27:8c:0e:e1:33:
d9:2f:f3:53:3d:dc:a7:a4:ca:28:ed:e3:3a:3d:27:
0e:48:52:f0:b4:17:e6:66:74:13:b2:b4:3a:17:d1:
fc:42:ed:d3:02:bc:f1:92:c7:64:f4:32:b9:27:40:
a9:48:28:68:18:1d:90:82:cc:10:69:b3:7e:bf:c9:
2e:a1:71:42:63:8a:8e:d8:72:13:27:d1:cf:3a:0c:
82:31:13:f8:ef:5b:aa:4b:54:fc:86:c7:28:e3:02:
37:6a:2e:4b:45:99:9b:0b:6d:ee:52:9d:c6:e1:52:
3a:7b:ad:cc:9d:b0:4d:49:e3:ff:52:f7:5d:4a:ba:
b9:1b:ad:b0:8d:73:ac:a2:9e:1c:a8:64:a6:03:8f:
18:ec:15:8d:fe:38:88:11:dd:11:d1:76:27:ef:8a:
ba:1f:e6:41:ad:f8:a4:fc:02:c7:94:20:d1:b9:47:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:97:7D:40:6A:B0:A6:DF:41:00:FC:72:2B:45:5A:58:1E:59:AB:BA
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a4:88:62:8a:16:3e:58:3a:76:66:47:91:01:79:34:9b:83:
28:26:0b:a9:31:da:b1:09:3a:01:00:fe:42:ee:34:5d:67:85:
5f:a7:16:75:45:e8:ab:fa:a8:b6:c8:7a:22:21:32:8a:cc:a3:
d1:47:d5:c0:e5:b6:ae:39:9b:65:98:45:09:f6:5d:42:29:bf:
2e:d2:87:da:ca:1c:84:dc:fa:26:f5:40:e1:c3:47:cd:a4:7e:
d5:81:3c:41:63:25:d5:6d:4c:7d:25:33:d7:60:16:a9:f1:bd:
c3:1f:6b:f4:18:b0:15:e9:e4:77:27:be:83:b7:64:4a:93:61:
d0:76:47:d2:ed:e1:f8:aa:0e:49:77:ab:9d:bf:71:6f:a0:57:
3d:fb:06:aa:18:80:ca:6c:f3:66:e3:64:a3:cd:c9:db:71:53:
f7:53:75:ff:14:48:d7:65:69:2f:4c:31:ea:0a:57:88:21:dc:
06:c7:b8:6e:e9:eb:24:71:34:0d:ad:2c:f3:c3:ba:2c:bb:83:
38:74:3a:12:a2:30:5f:79:bb:b7:4f:fd:02:58:35:c5:6c:21:
15:c6:4e:97:0a:6c:d9:59:c1:ce:b3:13:bf:54:0b:ec:80:0c:
e0:90:50:73:4e:83:04:45:b4:cd:8a:32:42:dc:97:00:bf:a8:
0f:38:51:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9w5XET6syuipO7yyPZL/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMGVjNWZhNjhjZjk5ZWUzZGJiZDE5NDllODIwNDQ1MDNh
MWRmNzIwHhcNMjUwNjE3MTIwMDU5WhcNMjUwNjE4MTIwMDU5WjAzMTEwLwYDVQQD
EygwMjk3N2Q0MDZhYjBhNmRmNDEwMGZjNzIyYjQ1NWE1ODFlNTlhYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t9F+PhETbEslTQbl8vKcWHgHrmS
vgUr25Yw7tb21tBnMq6D/9+gRQX9JwseCjjn8G9Tae5DC6Gx0NLoChPdkvhipqp3
zaMiYbOn6kmcZpB/lZiaJ4wO4TPZL/NTPdynpMoo7eM6PScOSFLwtBfmZnQTsrQ6
F9H8Qu3TArzxksdk9DK5J0CpSChoGB2QgswQabN+v8kuoXFCY4qO2HITJ9HPOgyC
MRP471uqS1T8hsco4wI3ai5LRZmbC23uUp3G4VI6e63MnbBNSeP/UvddSrq5G62w
jXOsop4cqGSmA48Y7BWN/jiIEd0R0XYn74q6H+ZBrfik/ALHlCDRuUdWdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKXfUBqsKbfQQD8citFWlgeWau6MB8GA1UdIwQY
MBaAFHEOxfpoz5nuPbvRlJ6CBEUDod9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODct
OTI3MjJlNGFiMDQ1LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODctOTI3MjJlNGFiMDQ1
LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaSIYooW
Plg6dmZHkQF5NJuDKCYLqTHasQk6AQD+Qu40XWeFX6cWdUXoq/qotsh6IiEyisyj
0UfVwOW2rjmbZZhFCfZdQim/LtKH2sochNz6JvVA4cNHzaR+1YE8QWMl1W1MfSUz
12AWqfG9wx9r9BiwFenkdye+g7dkSpNh0HZH0u3h+KoOSXernb9xb6BXPfsGqhiA
ymzzZuNko83J23FT91N1/xRI12VpL0wx6gpXiCHcBse4bunrJHE0Da0s88O6LLuD
OHQ6EqIwX3m7t0/9Alg1xWwhFcZOlwps2VnBzrMTv1QL7IAM4JBQc06DBEW0zYoy
QtyXAL+oDzhRmg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:38:43 2025 by rpki-client