Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: wVvIGSKNEExh2ZMiZgYy2D3Q3tAJnUNCWLeuk6y94c4=
Subject key identifier: 92:29:8E:81:7B:11:B2:ED:2F:BD:8B:78:18:54:50:0D:F1:67:3D:00
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 01977187DE2D9A1B622D2DAC37D1B8BE79CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 03:00:18 +0000
Manifest this update: Sun 15 Jun 2025 03:00:18 +0000
Manifest next update: Mon 16 Jun 2025 03:00:18 +0000
Files and hashes: 1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=)
2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: QBMmj76OZG84dYcLK9v0PClbYr7Kqaz8rhp4yF9jOQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:de:2d:9a:1b:62:2d:2d:ac:37:d1:b8:be:79:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Jun 15 03:00:18 2025 GMT
Not After : Jun 16 03:00:18 2025 GMT
Subject: CN=92298e817b11b2ed2fbd8b781854500df1673d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:08:f2:19:ce:2d:58:1c:74:33:54:65:64:c5:
61:95:ac:c5:b6:1b:50:71:71:4b:78:17:e0:6b:36:
e0:1e:af:e6:69:2c:3e:b1:b9:90:6f:50:c1:e1:48:
af:44:41:ef:c0:41:42:5c:f5:ef:be:5b:69:21:11:
0a:95:2d:e8:b3:46:4e:cc:d1:23:ed:f3:b9:9c:77:
b3:29:2d:7d:e9:3b:83:5a:04:9d:9a:e4:80:a9:f0:
25:35:1d:9c:f2:64:de:59:d2:ef:f7:80:86:bc:68:
9c:3e:d8:07:0a:8c:ac:b4:7a:57:ed:b0:68:63:fd:
39:bf:56:0b:d4:c3:7c:8b:d9:a9:22:11:f5:c7:59:
b5:61:34:3e:95:39:da:5f:24:99:6d:d1:e4:0f:dd:
e3:d0:0a:03:c8:f8:89:1a:2a:8e:d3:ff:0b:f7:bc:
0b:24:c7:bc:7a:1d:79:82:0f:30:3c:a0:e4:20:b1:
e8:8d:27:93:f3:37:c9:68:c8:76:9e:04:b5:9b:4a:
32:62:e8:35:31:86:52:eb:ec:7a:01:9d:2f:df:7e:
21:1b:98:31:53:84:cb:4b:dd:8c:ee:dd:5d:40:5d:
83:29:5e:66:99:b1:1b:3e:e5:8b:66:5d:5b:cf:46:
56:d5:8a:cb:7b:b4:01:f3:ff:36:7f:54:1f:a8:13:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:29:8E:81:7B:11:B2:ED:2F:BD:8B:78:18:54:50:0D:F1:67:3D:00
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f7:d5:af:5f:1c:8f:cb:39:fc:61:70:01:54:4a:e1:59:e8:
44:21:39:3d:cd:9f:fd:0a:7e:f2:93:4b:c1:f4:79:1f:10:63:
23:ff:73:5b:78:50:95:ba:74:f6:d5:fc:80:33:65:8b:cd:26:
07:5a:25:e4:cc:0e:a5:df:02:ee:b8:a0:03:0e:f9:62:7f:73:
fb:8d:01:04:36:5c:a7:97:25:6e:88:d5:ae:97:36:63:c4:86:
04:fb:b0:b5:6d:02:7b:a4:ee:95:e0:8d:32:09:61:a5:39:36:
22:32:17:78:60:53:41:cb:11:6e:2e:15:fd:63:0c:a6:94:d7:
04:a4:f7:4f:58:90:f8:b6:b0:99:c3:5c:1e:95:c7:46:10:24:
c4:83:68:d4:58:fd:0e:f0:5d:47:eb:78:0d:1a:50:c6:74:86:
09:f8:4d:64:85:65:a0:70:f7:5b:66:ed:4d:df:fd:1e:b3:70:
51:af:6a:f5:03:55:41:f3:21:93:0a:ea:92:c4:70:7d:38:5c:
83:9f:3a:72:4d:6e:81:5d:b3:9a:47:47:f2:e4:53:ae:ee:47:
1a:f2:0e:a3:bd:b7:86:a0:19:4e:a2:6d:ac:fb:4c:8b:02:7a:
25:f3:9d:e2:05:5c:79:6f:46:a0:f3:2d:6f:93:84:86:ae:6e:
19:12:f6:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxh94tmhtiLS2sN9G4vnnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzBiYzM0YjhmNGZjYmMyYmY1MjNiYmRiZTlhMDQ0YTI0
NDVmYmUwHhcNMjUwNjE1MDMwMDE4WhcNMjUwNjE2MDMwMDE4WjAzMTEwLwYDVQQD
Eyg5MjI5OGU4MTdiMTFiMmVkMmZiZDhiNzgxODU0NTAwZGYxNjczZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wjyGc4tWBx0M1RlZMVhlazFthtQ
cXFLeBfgazbgHq/maSw+sbmQb1DB4UivREHvwEFCXPXvvltpIREKlS3os0ZOzNEj
7fO5nHezKS196TuDWgSdmuSAqfAlNR2c8mTeWdLv94CGvGicPtgHCoystHpX7bBo
Y/05v1YL1MN8i9mpIhH1x1m1YTQ+lTnaXySZbdHkD93j0AoDyPiJGiqO0/8L97wL
JMe8eh15gg8wPKDkILHojSeT8zfJaMh2ngS1m0oyYug1MYZS6+x6AZ0v334hG5gx
U4TLS92M7t1dQF2DKV5mmbEbPuWLZl1bz0ZW1YrLe7QB8/82f1QfqBN5EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIpjoF7EbLtL72LeBhUUA3xZz0AMB8GA1UdIwQY
MBaAFAgwvDS49Py8K/Uju9vpoESiRF++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUt
MDEzYzFmMDFlZGI5LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUtMDEzYzFmMDFlZGI5
LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuffVr18c
j8s5/GFwAVRK4VnoRCE5Pc2f/Qp+8pNLwfR5HxBjI/9zW3hQlbp09tX8gDNli80m
B1ol5MwOpd8C7rigAw75Yn9z+40BBDZcp5clbojVrpc2Y8SGBPuwtW0Ce6TuleCN
MglhpTk2IjIXeGBTQcsRbi4V/WMMppTXBKT3T1iQ+LawmcNcHpXHRhAkxINo1Fj9
DvBdR+t4DRpQxnSGCfhNZIVloHD3W2btTd/9HrNwUa9q9QNVQfMhkwrqksRwfThc
g586ck1ugV2zmkdH8uRTru5HGvIOo723hqAZTqJtrPtMiwJ6JfOd4gVceW9GoPMt
b5OEhq5uGRL2tA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:11:38 2025 by rpki-client