Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
File: cRc4aXP7-IqGfIKohnsFD8pgsBE.mft (raw, json)
Hash identifier: qHQZREr0m13dNVRg/I7rzg6D5Oi7ToH7fLYJ+Y/s9eA=
Subject key identifier: CC:B1:35:C0:3D:11:09:62:74:EA:97:CF:79:49:B7:90:2C:58:59:55
Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011
Certificate serial: 01976961333ABCFE58768B1C6D41703297D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 13:01:07 +0000
Manifest this update: Fri 13 Jun 2025 13:01:07 +0000
Manifest next update: Sat 14 Jun 2025 13:01:07 +0000
Files and hashes: 1: __J8knmzK0D7LeHPBcfH9mDXmDA.roa (hash: KGCws32qTez6CiaSk45QNDqYkcqePM9SEByg+MzKHwo=)
2: cRc4aXP7-IqGfIKohnsFD8pgsBE.crl (hash: wf+4D51GY0OZXbl4j1O1YGnkl/3wXpZqBL7qxO2xhYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:33:3a:bc:fe:58:76:8b:1c:6d:41:70:32:97:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011
Validity
Not Before: Jun 13 13:01:07 2025 GMT
Not After : Jun 14 13:01:07 2025 GMT
Subject: CN=ccb135c03d11096274ea97cf7949b7902c585955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:32:2b:e6:78:34:1b:b0:9d:56:26:09:b8:
3d:95:98:99:3c:aa:82:a2:6b:c7:04:d2:7c:62:e3:
d8:e7:41:4e:55:95:96:8f:1d:bc:34:34:f0:b4:5d:
cc:06:04:99:be:c8:26:45:c2:7b:86:1b:8c:fe:da:
c0:79:7f:39:35:59:f0:bf:ba:08:b8:b9:66:f7:88:
64:b4:75:cc:8d:2c:f9:14:c2:d8:5e:55:d4:f5:65:
c3:f6:44:d5:9b:18:79:cd:2c:01:c4:93:d9:c9:e9:
3e:68:df:2c:97:90:b1:82:6b:57:06:7d:66:5c:65:
4a:4a:df:00:d8:b2:86:4c:59:26:29:75:c4:3b:e1:
2f:bb:e8:01:a8:47:66:61:aa:23:e3:70:c0:96:4b:
39:b3:be:b1:2c:2e:9a:bc:f8:46:02:04:e1:21:d9:
a6:3c:8e:36:a6:b5:5a:46:71:db:9c:d3:9d:6a:60:
60:50:ba:e4:49:f6:64:38:de:5d:4c:cd:db:47:61:
cc:92:9f:33:2a:b4:89:74:dc:12:e7:a0:a0:6c:aa:
c9:96:1c:1c:cf:3a:e4:08:3a:c2:f9:7c:87:c3:c0:
c4:2c:7c:6d:eb:0f:23:e0:55:27:38:38:77:45:be:
88:da:eb:16:3f:0d:13:ba:6a:c1:63:39:a9:9b:ca:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B1:35:C0:3D:11:09:62:74:EA:97:CF:79:49:B7:90:2C:58:59:55
X509v3 Authority Key Identifier:
keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:96:f3:92:3e:98:fd:59:71:f9:0e:8b:86:a1:8b:a0:06:ba:
b2:83:80:ff:f9:96:86:d2:97:98:1c:e5:dd:87:ce:6a:2d:f8:
8b:2b:b8:e5:27:73:11:a0:7a:7b:e7:72:6d:c5:c1:b4:9b:1f:
98:72:25:27:74:cb:06:df:07:68:8d:ce:b1:61:f3:43:52:9e:
7a:8c:a7:85:11:62:70:2c:3d:33:9a:d8:be:ba:06:11:bb:53:
60:d2:80:b2:81:fb:c7:7a:a7:b7:b9:05:92:1f:71:d4:3b:56:
3c:2d:5c:14:3b:31:81:cc:f1:4a:1a:b8:53:6e:a9:b2:82:4e:
06:55:e0:3c:63:65:61:05:2a:4b:4b:b0:7a:28:12:4c:c2:70:
ee:24:05:72:33:09:4c:f7:ba:0c:ce:3f:f5:f3:e8:95:df:7e:
ea:1f:a2:1c:5f:37:5a:32:51:36:1d:a9:72:fd:7b:85:55:3e:
6d:c9:db:e9:c3:97:7f:07:00:b8:a7:8a:8a:bb:0d:5c:df:e2:
fa:f1:b6:77:68:a2:63:85:44:eb:00:4e:05:79:e3:a1:35:48:
08:8c:7a:35:2f:47:6d:b5:94:1c:28:89:30:e7:f3:c0:58:75:
f2:23:03:94:70:15:ed:34:69:1e:f1:34:77:1d:4b:77:03:8e:
d6:e9:70:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYTM6vP5YdoscbUFwMpfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTczODY5NzNmYmY4OGE4NjdjODJhODg2N2IwNTBmY2E2
MGIwMTEwHhcNMjUwNjEzMTMwMTA3WhcNMjUwNjE0MTMwMTA3WjAzMTEwLwYDVQQD
EyhjY2IxMzVjMDNkMTEwOTYyNzRlYTk3Y2Y3OTQ5Yjc5MDJjNTg1OTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+4yK+Z4NBuwnVYmCbg9lZiZPKqC
omvHBNJ8YuPY50FOVZWWjx28NDTwtF3MBgSZvsgmRcJ7hhuM/trAeX85NVnwv7oI
uLlm94hktHXMjSz5FMLYXlXU9WXD9kTVmxh5zSwBxJPZyek+aN8sl5CxgmtXBn1m
XGVKSt8A2LKGTFkmKXXEO+Evu+gBqEdmYaoj43DAlks5s76xLC6avPhGAgThIdmm
PI42prVaRnHbnNOdamBgULrkSfZkON5dTM3bR2HMkp8zKrSJdNwS56CgbKrJlhwc
zzrkCDrC+XyHw8DELHxt6w8j4FUnODh3Rb6I2usWPw0TumrBYzmpm8rCxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyxNcA9EQlidOqXz3lJt5AsWFlVMB8GA1UdIwQY
MBaAFHEXOGlz+/iKhnyCqIZ7BQ/KYLARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYt
OWYzMDNlYTY3ZTY1LzEvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYtOWYzMDNlYTY3ZTY1
LzEvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJbzkj6Y
/Vlx+Q6LhqGLoAa6soOA//mWhtKXmBzl3YfOai34iyu45SdzEaB6e+dybcXBtJsf
mHIlJ3TLBt8HaI3OsWHzQ1KeeoynhRFicCw9M5rYvroGEbtTYNKAsoH7x3qnt7kF
kh9x1DtWPC1cFDsxgczxShq4U26psoJOBlXgPGNlYQUqS0uweigSTMJw7iQFcjMJ
TPe6DM4/9fPold9+6h+iHF83WjJRNh2pcv17hVU+bcnb6cOXfwcAuKeKirsNXN/i
+vG2d2iiY4VE6wBOBXnjoTVICIx6NS9HbbWUHCiJMOfzwFh18iMDlHAV7TRpHvE0
dx1LdwOO1ulwmQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:58 2025 by rpki-client