Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier: kG7co9uEv9Vcni5HjKyo5GhwQCvoZqUJQnnr0oLp81M=
Subject key identifier: 0A:84:6C:47:FF:6A:5F:4E:30:38:7F:F5:AA:3E:3D:96:9B:85:E0:82
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial: 01976D3E63EAEED737D68AD8314E7E623AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number: 0F0A
Signing time: Sat 14 Jun 2025 07:01:34 +0000
Manifest this update: Sat 14 Jun 2025 07:01:34 +0000
Manifest next update: Sun 15 Jun 2025 07:01:34 +0000
Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: xXJqT3pRsVFkOASs0uH5JTgJvUxVq0JKGfnk3f+RsL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:63:ea:ee:d7:37:d6:8a:d8:31:4e:7e:62:3a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Validity
Not Before: Jun 14 07:01:34 2025 GMT
Not After : Jun 15 07:01:34 2025 GMT
Subject: CN=0a846c47ff6a5f4e30387ff5aa3e3d969b85e082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:62:ab:33:a3:b0:f2:d7:02:46:d1:6b:ac:
10:7a:31:a6:77:06:37:b0:c4:f9:1b:4d:8b:f2:25:
e1:b4:f3:5a:5d:1c:e1:50:37:12:54:f0:65:f0:19:
74:1f:a3:e0:41:9f:31:68:70:ea:fd:fe:7c:66:d2:
49:29:15:95:37:c5:6e:81:05:48:23:78:59:81:63:
b5:62:a4:34:3b:32:c7:c6:ce:40:ed:e4:b0:3a:36:
88:f2:2e:3e:85:27:cb:20:a2:3c:5b:ad:df:69:51:
51:f0:4f:a9:da:a2:0f:f9:aa:37:1d:c6:d6:94:49:
89:7e:00:1b:85:9d:83:1b:ff:b1:6a:39:ae:fb:da:
88:15:d3:e9:fd:fa:39:09:de:7b:19:87:a2:89:89:
2e:01:30:c6:84:ac:a6:06:45:bc:75:bd:88:ad:79:
c9:d8:e0:41:48:92:1f:72:14:3a:e5:a9:14:30:d6:
e1:e9:a5:02:09:12:dc:68:a4:f9:4f:72:51:9b:53:
0c:24:0b:58:25:bb:f5:ed:f4:3e:43:fd:8d:49:ab:
ae:64:c5:2a:c1:5b:70:52:5c:0b:c2:99:eb:eb:ff:
9d:0e:6e:f2:50:90:fa:34:a4:bf:93:56:8e:1f:8b:
09:b1:9a:ea:ee:37:1e:a3:e5:be:f6:39:d7:cc:ba:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:84:6C:47:FF:6A:5F:4E:30:38:7F:F5:AA:3E:3D:96:9B:85:E0:82
X509v3 Authority Key Identifier:
keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d5:10:fc:be:cb:a4:3a:85:77:45:87:cf:6c:c7:55:a6:34:
d3:a8:1c:f4:01:38:42:83:cf:fc:16:18:3c:36:fd:32:aa:65:
cf:c3:d9:4a:19:49:0b:d8:9d:77:f9:d8:1c:31:e9:17:f7:10:
1f:ea:0e:ab:9c:c6:e8:27:f8:a6:98:cc:5c:29:be:7c:67:ce:
c4:1a:00:e1:5b:65:33:ef:47:52:0a:48:99:8d:c9:fd:82:4e:
85:44:a1:ca:0c:d5:42:02:2c:30:bb:a6:cf:eb:c5:05:9b:89:
9d:74:29:6b:f0:28:90:1e:89:45:c6:d7:58:9b:97:e1:28:68:
57:8e:db:0a:e6:83:4f:0d:5c:b4:13:39:56:88:1c:06:63:38:
d2:7d:58:09:d0:fe:06:3f:01:80:47:75:23:2c:5d:75:31:8f:
b0:b7:4b:35:14:9b:ad:60:83:11:b6:a7:f2:05:64:83:09:41:
66:5a:98:38:86:7c:b0:e2:dc:82:ba:ee:1d:d3:93:bb:1d:ba:
fe:a2:46:74:34:ba:2d:5d:04:ce:08:f5:59:0a:dd:c4:92:48:
79:ff:8c:f6:81:90:5a:2c:91:ed:95:d8:07:e1:33:09:4f:a5:
a5:6a:cd:a4:5e:af:4e:2f:73:cf:99:1d:8a:59:e6:6e:67:e6:
e4:ed:f8:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPmPq7tc31orYMU5+YjrsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwM2Y3ODVlMTQzNDBhYzZhODQwNDg2M2Q3YmY3YWY5NGU1
YWI5YjUwHhcNMjUwNjE0MDcwMTM0WhcNMjUwNjE1MDcwMTM0WjAzMTEwLwYDVQQD
EygwYTg0NmM0N2ZmNmE1ZjRlMzAzODdmZjVhYTNlM2Q5NjliODVlMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxhiqzOjsPLXAkbRa6wQejGmdwY3
sMT5G02L8iXhtPNaXRzhUDcSVPBl8Bl0H6PgQZ8xaHDq/f58ZtJJKRWVN8VugQVI
I3hZgWO1YqQ0OzLHxs5A7eSwOjaI8i4+hSfLIKI8W63faVFR8E+p2qIP+ao3HcbW
lEmJfgAbhZ2DG/+xajmu+9qIFdPp/fo5Cd57GYeiiYkuATDGhKymBkW8db2IrXnJ
2OBBSJIfchQ65akUMNbh6aUCCRLcaKT5T3JRm1MMJAtYJbv17fQ+Q/2NSauuZMUq
wVtwUlwLwpnr6/+dDm7yUJD6NKS/k1aOH4sJsZrq7jceo+W+9jnXzLpHVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqEbEf/al9OMDh/9ao+PZabheCCMB8GA1UdIwQY
MBaAFHA/eF4UNArGqEBIY9e/evlOWrm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMt
NDc2YmNjNDQxNTRkLzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMtNDc2YmNjNDQxNTRk
LzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtUQ/L7L
pDqFd0WHz2zHVaY006gc9AE4QoPP/BYYPDb9Mqplz8PZShlJC9idd/nYHDHpF/cQ
H+oOq5zG6Cf4ppjMXCm+fGfOxBoA4VtlM+9HUgpImY3J/YJOhUShygzVQgIsMLum
z+vFBZuJnXQpa/AokB6JRcbXWJuX4ShoV47bCuaDTw1ctBM5VogcBmM40n1YCdD+
Bj8BgEd1IyxddTGPsLdLNRSbrWCDEban8gVkgwlBZlqYOIZ8sOLcgrruHdOTux26
/qJGdDS6LV0Ezgj1WQrdxJJIef+M9oGQWiyR7ZXYB+EzCU+lpWrNpF6vTi9zz5kd
ilnmbmfm5O34RQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:31:39 2025 by rpki-client