Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: RCTyZwyJ3Vb4tFajGmaZJUg8oLmNMCBGjVlSpl0zrsc=
Subject key identifier: 5A:75:F7:BB:05:AF:CC:D8:88:64:DD:CE:E5:E7:97:CA:C2:98:D1:D4
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019780C43408694E626363618C4D5BDA8378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 12E5
Signing time: Wed 18 Jun 2025 02:00:31 +0000
Manifest this update: Wed 18 Jun 2025 02:00:31 +0000
Manifest next update: Thu 19 Jun 2025 02:00:31 +0000
Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: LCD9h1MeqdLl3rRA9S8G2oOXYN2nsMZBbn1XCFjxSnk=)
3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=)
4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=)
5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:c4:34:08:69:4e:62:63:63:61:8c:4d:5b:da:83:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Jun 18 02:00:31 2025 GMT
Not After : Jun 19 02:00:31 2025 GMT
Subject: CN=5a75f7bb05afccd88864ddcee5e797cac298d1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:be:8b:2b:e5:dc:da:0e:dd:5c:9d:06:7e:
f6:b2:83:01:a7:ba:8b:34:0e:ea:50:37:aa:c9:18:
4b:ac:ce:f6:d1:d7:72:65:e7:ca:5a:45:89:75:75:
1a:89:4a:4f:b1:b5:e2:f6:92:ab:7c:e1:ff:ad:12:
f9:62:3b:c4:76:3c:5a:3a:9a:e3:a7:34:98:c2:bf:
0f:5e:0c:ec:3e:d3:76:4e:bd:9d:fa:a5:82:38:a1:
69:5f:b6:14:c4:42:95:74:36:2d:53:da:8e:4c:d6:
49:04:3c:d7:a0:29:05:bc:90:81:76:a6:27:a9:33:
3d:b9:fe:ed:22:4d:03:21:63:29:25:97:15:f5:47:
6a:eb:62:f6:4a:fa:1e:99:73:c5:1e:16:df:3a:9d:
ed:ea:8f:e7:9d:d9:aa:15:2d:d3:67:00:83:7d:49:
81:08:3d:95:73:e3:88:52:08:17:70:15:46:ba:14:
70:61:15:b1:78:28:a3:35:2f:eb:13:8f:47:3b:32:
4d:e1:44:5d:53:8b:e7:0d:63:10:f7:6a:b0:53:70:
32:77:a0:8e:ac:17:9a:9a:77:44:84:f5:95:df:8e:
43:c8:f1:48:fe:c2:bc:a7:a1:ec:1d:3b:b3:a6:42:
ec:5e:4f:e7:a0:f6:59:30:a0:31:03:b2:62:cb:0f:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:75:F7:BB:05:AF:CC:D8:88:64:DD:CE:E5:E7:97:CA:C2:98:D1:D4
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e3:dc:ec:53:25:32:40:c1:35:5c:78:ce:a4:42:2a:1d:96:
c5:7a:ea:cc:e3:92:a0:fe:d3:22:0f:75:71:52:d5:b7:b7:88:
1a:77:de:e6:e6:b8:54:77:7a:f0:d4:db:ea:f6:e3:5e:0d:2f:
4a:36:c2:56:fb:7c:ed:43:e2:32:e3:27:e3:69:0f:05:80:da:
79:f9:95:77:3b:3e:fc:e6:78:f1:ac:0e:dc:6d:db:f3:f0:b3:
ca:07:cf:d4:6a:34:a8:50:b8:b3:84:3c:54:9e:d9:57:4a:64:
6c:12:e9:28:f8:7e:42:61:8a:7d:a5:96:11:ea:f1:bb:b0:ab:
ba:03:49:91:8c:eb:1f:83:d3:48:11:5a:c8:67:b1:1d:2a:20:
b7:88:12:8b:90:c0:40:65:02:23:39:5e:c8:e0:73:ae:db:b0:
3e:e5:df:e3:b4:48:68:f8:dc:49:fd:75:1f:48:f0:08:f0:41:
50:f9:1d:cc:39:fc:49:f3:bc:7b:be:1a:5b:00:59:57:f8:77:
c3:29:b3:a4:53:cc:4d:50:8d:f7:3e:33:ee:4b:bd:c8:b0:91:
de:2e:43:06:7c:47:a1:0b:bf:85:3c:26:93:69:40:8f:8b:07:
3d:15:8d:05:70:b9:09:41:a6:55:1e:bf:59:12:58:c9:60:31:
62:12:00:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAxDQIaU5iY2NhjE1b2oN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx
Y2IzNzgwHhcNMjUwNjE4MDIwMDMxWhcNMjUwNjE5MDIwMDMxWjAzMTEwLwYDVQQD
Eyg1YTc1ZjdiYjA1YWZjY2Q4ODg2NGRkY2VlNWU3OTdjYWMyOThkMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqG+iyvl3NoO3VydBn72soMBp7qL
NA7qUDeqyRhLrM720ddyZefKWkWJdXUaiUpPsbXi9pKrfOH/rRL5YjvEdjxaOprj
pzSYwr8PXgzsPtN2Tr2d+qWCOKFpX7YUxEKVdDYtU9qOTNZJBDzXoCkFvJCBdqYn
qTM9uf7tIk0DIWMpJZcV9Udq62L2SvoemXPFHhbfOp3t6o/nndmqFS3TZwCDfUmB
CD2Vc+OIUggXcBVGuhRwYRWxeCijNS/rE49HOzJN4URdU4vnDWMQ92qwU3Ayd6CO
rBeamndEhPWV345DyPFI/sK8p6HsHTuzpkLsXk/noPZZMKAxA7Jiyw9fbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp197sFr8zYiGTdzuXnl8rCmNHUMB8GA1UdIwQY
MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt
ZWI5NzcxNjRhN2U0LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0
LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuPc7FMl
MkDBNVx4zqRCKh2WxXrqzOOSoP7TIg91cVLVt7eIGnfe5ua4VHd68NTb6vbjXg0v
SjbCVvt87UPiMuMn42kPBYDaefmVdzs+/OZ48awO3G3b8/CzygfP1Go0qFC4s4Q8
VJ7ZV0pkbBLpKPh+QmGKfaWWEerxu7CrugNJkYzrH4PTSBFayGexHSogt4gSi5DA
QGUCIzleyOBzrtuwPuXf47RIaPjcSf11H0jwCPBBUPkdzDn8SfO8e74aWwBZV/h3
wymzpFPMTVCN9z4z7ku9yLCR3i5DBnxHoQu/hTwmk2lAj4sHPRWNBXC5CUGmVR6/
WRJYyWAxYhIABA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 11:27:33 2025 by rpki-client