Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: s4sDWQ8mqnQhvfblJ2hjd5SE25QfcPeTIr3dOP6eDI0=
Subject key identifier: EA:08:79:75:BE:AE:3D:75:B6:6F:60:B6:4E:91:21:DF:D5:D5:8B:F0
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 019768BBF9FC160B4445044AD6F5ECB00A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 127A
Signing time: Fri 13 Jun 2025 10:00:38 +0000
Manifest this update: Fri 13 Jun 2025 10:00:38 +0000
Manifest next update: Sat 14 Jun 2025 10:00:38 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: MIpzTSrv5ECaJVbG+IJ3k12JW7tj5+c8LGy8CNKadHQ=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:f9:fc:16:0b:44:45:04:4a:d6:f5:ec:b0:0a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Jun 13 10:00:38 2025 GMT
Not After : Jun 14 10:00:38 2025 GMT
Subject: CN=ea087975beae3d75b66f60b64e9121dfd5d58bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:6c:bd:8e:f1:92:a4:cf:c8:6e:94:eb:95:
99:77:2b:44:89:e9:0a:6e:18:27:5b:10:a6:85:ab:
7a:fb:55:a4:ac:17:a3:61:48:ec:06:2e:6b:7e:44:
d9:4b:0d:ce:42:a2:fe:9b:da:75:ae:07:2d:d1:71:
2a:b4:48:2c:92:fa:31:55:cc:80:4f:da:46:d8:23:
4f:4f:6e:f6:3e:94:a6:5d:ac:3b:44:d8:83:d0:dc:
bc:7f:66:72:6f:58:91:f2:83:50:87:bd:b9:da:64:
0e:54:f8:6d:18:08:bb:a0:e9:50:04:2c:f5:07:f3:
3d:84:be:78:b2:2c:6f:af:0e:ca:e3:ca:38:e8:02:
f8:ee:af:d6:68:c8:8b:fd:b4:2e:fb:6d:9b:60:b3:
39:e8:e3:0c:61:28:cb:3b:36:50:9d:0a:96:7c:f6:
ac:16:e5:78:17:3b:4b:4b:c0:7d:13:54:d7:36:95:
89:40:73:a7:b5:b4:ad:7a:1a:01:52:98:92:15:02:
bd:44:49:6c:15:a6:1e:17:0f:25:2c:9f:95:d1:68:
bc:c9:b2:24:0d:a8:c7:31:21:d5:a3:ab:75:c0:9b:
7a:5f:bf:90:6c:81:c1:ab:5e:26:37:7f:01:82:a4:
b8:4d:c4:9c:3c:7d:6c:8b:be:8a:69:6e:1f:b0:7f:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:08:79:75:BE:AE:3D:75:B6:6F:60:B6:4E:91:21:DF:D5:D5:8B:F0
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2f:af:2c:42:fa:58:30:fe:c7:6b:10:bd:45:0d:99:7f:fa:
e8:7a:7a:b8:0b:b3:35:d2:45:af:21:7e:94:c4:d2:91:19:b1:
c4:ca:1d:af:f4:c4:a8:2c:2e:f3:d2:01:c1:37:b5:b8:4a:92:
10:5d:64:f9:15:5a:23:af:92:d4:92:41:82:14:07:e6:bf:0c:
05:8c:70:96:2a:c5:dd:f7:07:7c:04:75:11:b4:b4:fd:b4:50:
8e:6b:c7:0c:b9:30:60:31:28:03:8b:8f:7e:8a:93:81:86:e0:
52:b4:6e:96:0a:e6:ca:ae:5c:ef:0a:25:e6:b9:29:0a:7f:ce:
1f:a9:e0:02:f7:1a:7c:27:39:38:62:f6:47:e7:c6:62:f1:c1:
3d:da:52:53:63:80:73:ba:77:45:e1:d1:3a:bf:e0:a4:e3:17:
06:2e:ed:e6:88:bf:ef:0b:89:5a:18:bf:bf:8b:01:6b:85:20:
2e:ac:70:ba:9a:c4:77:05:51:0a:fe:51:a5:bd:e5:de:bb:3a:
72:fd:28:3b:ec:61:ef:03:88:8d:57:d8:aa:09:d1:b7:64:08:
30:6f:b4:66:07:72:a6:7c:e2:b9:69:69:8d:24:b0:be:ab:7f:
e1:50:02:2c:05:b9:b6:9c:3d:e0:93:61:02:18:33:56:da:52:
32:20:67:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou/n8FgtERQRK1vXssAogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZGNmNjJjNmI1NDExMTM5YTVkMTMwOWRkOWVkOTI2ZjQz
MTQzMjAwHhcNMjUwNjEzMTAwMDM4WhcNMjUwNjE0MTAwMDM4WjAzMTEwLwYDVQQD
EyhlYTA4Nzk3NWJlYWUzZDc1YjY2ZjYwYjY0ZTkxMjFkZmQ1ZDU4YmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJdsvY7xkqTPyG6U65WZdytEiekK
bhgnWxCmhat6+1WkrBejYUjsBi5rfkTZSw3OQqL+m9p1rgct0XEqtEgskvoxVcyA
T9pG2CNPT272PpSmXaw7RNiD0Ny8f2Zyb1iR8oNQh7252mQOVPhtGAi7oOlQBCz1
B/M9hL54sixvrw7K48o46AL47q/WaMiL/bQu+22bYLM56OMMYSjLOzZQnQqWfPas
FuV4FztLS8B9E1TXNpWJQHOntbStehoBUpiSFQK9RElsFaYeFw8lLJ+V0Wi8ybIk
DajHMSHVo6t1wJt6X7+QbIHBq14mN38BgqS4TcScPH1si76KaW4fsH+1KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoIeXW+rj11tm9gtk6RId/V1YvwMB8GA1UdIwQY
MBaAFArc9ixrVBETml0TCd2e2Sb0MUMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2It
ZjhkNmJkMzBjYzE5LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2ItZjhkNmJkMzBjYzE5
LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXy+vLEL6
WDD+x2sQvUUNmX/66Hp6uAuzNdJFryF+lMTSkRmxxModr/TEqCwu89IBwTe1uEqS
EF1k+RVaI6+S1JJBghQH5r8MBYxwlirF3fcHfAR1EbS0/bRQjmvHDLkwYDEoA4uP
foqTgYbgUrRulgrmyq5c7wol5rkpCn/OH6ngAvcafCc5OGL2R+fGYvHBPdpSU2OA
c7p3ReHROr/gpOMXBi7t5oi/7wuJWhi/v4sBa4UgLqxwuprEdwVRCv5Rpb3l3rs6
cv0oO+xh7wOIjVfYqgnRt2QIMG+0ZgdypnziuWlpjSSwvqt/4VACLAW5tpw94JNh
AhgzVtpSMiBnEw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:49 2025 by rpki-client