Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: eiCBEk2GcifoM5BTIAKl8CXmUxeZHU+QwzAF11o6iRM=
Subject key identifier: 1D:42:4B:49:1E:F5:65:BC:5F:18:7F:35:6B:B4:FC:68:68:3A:EC:68
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 019769299830A1C607E816015B8A38493E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 0FBE
Signing time: Fri 13 Jun 2025 12:00:22 +0000
Manifest this update: Fri 13 Jun 2025 12:00:22 +0000
Manifest next update: Sat 14 Jun 2025 12:00:22 +0000
Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: 57yfZbit11ixiJNzu8fAJzyls7e1KBEk+/PAGj+5ylI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:98:30:a1:c6:07:e8:16:01:5b:8a:38:49:3e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jun 13 12:00:22 2025 GMT
Not After : Jun 14 12:00:22 2025 GMT
Subject: CN=1d424b491ef565bc5f187f356bb4fc68683aec68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:f6:3c:21:f4:8d:b6:03:4e:07:90:28:5a:
64:dd:e8:30:9c:f9:63:e3:3f:2c:ab:9d:16:af:6d:
5b:80:e5:bc:dc:57:46:17:ef:8a:ce:f0:5f:68:7d:
ec:bc:e5:90:d7:48:d7:27:20:3c:ee:d8:b5:5a:7a:
49:71:47:a4:ed:db:6c:f4:ef:e9:11:eb:eb:ab:80:
d1:98:89:c1:da:b4:92:c8:d0:6a:57:f3:fb:9e:31:
c9:c2:09:6e:b2:05:23:51:09:93:f5:35:1c:55:67:
70:32:4c:29:a4:e0:41:36:7e:4c:06:fd:2f:5b:c1:
8f:6b:26:25:c8:4f:96:58:89:3c:4d:50:57:e0:84:
f6:ac:63:20:fe:19:ce:97:8e:f6:77:42:b9:dc:47:
9a:9f:95:4f:0e:a0:6c:2e:17:a3:bf:57:36:b8:fe:
ed:63:66:61:69:00:f8:bd:63:ee:1e:6a:30:2c:6c:
ce:7e:5e:47:f1:d4:73:16:25:a9:01:4a:d2:12:99:
4c:78:17:5d:2a:a8:12:30:7c:77:61:ca:a1:e1:74:
93:13:b6:6d:bf:38:fb:08:5e:6a:5f:0f:d7:90:32:
e1:45:de:95:06:6c:02:72:fc:cf:90:0a:2e:1d:b3:
ec:24:d9:c0:49:a0:23:44:68:04:f4:bb:61:d6:fa:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:42:4B:49:1E:F5:65:BC:5F:18:7F:35:6B:B4:FC:68:68:3A:EC:68
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:53:db:23:8a:c8:eb:32:af:4a:97:d7:e3:96:13:70:dc:bd:
f7:82:8b:ce:67:1a:90:a0:d0:c4:4a:c6:df:2d:d1:06:b8:15:
01:99:1b:00:8f:0d:96:9a:cd:a3:7b:4f:30:40:f3:de:cb:39:
4d:c8:b7:9c:73:57:50:1f:cf:b6:03:20:be:7d:09:d2:23:72:
95:e1:5f:ae:75:b4:d1:b0:50:0a:29:5a:ed:d5:60:0e:cd:e4:
f3:12:84:d9:6f:4a:97:d7:d2:e1:ff:b6:93:47:0f:fe:63:26:
c0:15:ff:76:03:44:1f:d3:a7:04:57:e1:49:65:b7:45:55:de:
8c:0b:c0:42:47:aa:ed:2d:08:f3:55:fb:c7:1b:e7:84:7d:9a:
a4:fd:e6:d5:78:4d:18:af:af:0a:fd:d1:50:09:91:63:b9:e4:
87:91:76:0f:2f:54:44:cc:e7:90:c0:19:f7:dc:bf:76:60:f2:
c5:d1:ba:1e:2b:14:ed:b3:28:e2:36:80:d4:9e:dc:5c:0b:07:
2f:b6:3f:b2:78:99:98:76:8c:63:42:aa:d7:e9:a8:8a:ae:66:
03:ab:0b:d3:55:a4:20:a0:ec:c9:2f:ae:c2:f7:7c:98:1d:20:
90:a6:e3:4f:61:96:91:70:e2:d1:54:5b:5f:3b:64:9f:6b:a9:
10:a5:f7:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKZgwocYH6BYBW4o4ST4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy
OWVhMWYwHhcNMjUwNjEzMTIwMDIyWhcNMjUwNjE0MTIwMDIyWjAzMTEwLwYDVQQD
EygxZDQyNGI0OTFlZjU2NWJjNWYxODdmMzU2YmI0ZmM2ODY4M2FlYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+/2PCH0jbYDTgeQKFpk3egwnPlj
4z8sq50Wr21bgOW83FdGF++KzvBfaH3svOWQ10jXJyA87ti1WnpJcUek7dts9O/p
Eevrq4DRmInB2rSSyNBqV/P7njHJwglusgUjUQmT9TUcVWdwMkwppOBBNn5MBv0v
W8GPayYlyE+WWIk8TVBX4IT2rGMg/hnOl472d0K53Eean5VPDqBsLhejv1c2uP7t
Y2ZhaQD4vWPuHmowLGzOfl5H8dRzFiWpAUrSEplMeBddKqgSMHx3Ycqh4XSTE7Zt
vzj7CF5qXw/XkDLhRd6VBmwCcvzPkAouHbPsJNnASaAjRGgE9Lth1voLFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1CS0ke9WW8Xxh/NWu0/GhoOuxoMB8GA1UdIwQY
MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt
ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1
LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVPbI4rI
6zKvSpfX45YTcNy994KLzmcakKDQxErG3y3RBrgVAZkbAI8NlprNo3tPMEDz3ss5
Tci3nHNXUB/PtgMgvn0J0iNyleFfrnW00bBQCila7dVgDs3k8xKE2W9Kl9fS4f+2
k0cP/mMmwBX/dgNEH9OnBFfhSWW3RVXejAvAQkeq7S0I81X7xxvnhH2apP3m1XhN
GK+vCv3RUAmRY7nkh5F2Dy9URMznkMAZ99y/dmDyxdG6HisU7bMo4jaA1J7cXAsH
L7Y/sniZmHaMY0Kq1+moiq5mA6sL01WkIKDsyS+uwvd8mB0gkKbjT2GWkXDi0VRb
Xztkn2upEKX3fw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:06 2025 by rpki-client