Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: K5IQYS7SeFlp9xGubDvkF7tSvXRmHKGeHxL1QjwW9Ps=
Subject key identifier: C9:4B:41:C2:15:7E:C2:86:9F:D8:62:29:4B:06:4B:76:64:D5:E0:0F
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 019786604D8328C62C677FD8A6BE25ACD41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 1148
Signing time: Thu 19 Jun 2025 04:09:07 +0000
Manifest this update: Thu 19 Jun 2025 04:09:07 +0000
Manifest next update: Fri 20 Jun 2025 04:09:07 +0000
Files and hashes: 1: ZGrcpUqsEOsf7o6fu8OWpNq4gNY.roa (hash: wpQNPwvek3Rp2M6cV1DD/Iu66bw6RcokC6IaW3yHq/w=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: I7BX2CGnlEujD7LmxXEUKTqvGep6Z9j0f5xjXcvIGr4=)
3: gdtLNhs1JQCPzai-VNs9JYZHoWI.roa (hash: ZjSEtnU3HKrgHwmUc/jOdFVfQULcq2id5Yk1K05ZWWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 04:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:60:4d:83:28:c6:2c:67:7f:d8:a6:be:25:ac:d4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Jun 19 04:09:07 2025 GMT
Not After : Jun 20 04:09:07 2025 GMT
Subject: CN=c94b41c2157ec2869fd862294b064b7664d5e00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:37:fb:ea:f4:64:e5:83:39:46:4a:20:f3:
17:e7:75:e2:00:4a:0f:ad:92:76:2f:fb:54:f8:6d:
05:fa:8f:81:4e:62:d7:de:94:e3:94:40:9b:eb:e4:
35:77:93:2d:51:eb:28:ee:d0:aa:55:d1:4e:d1:da:
d8:01:02:6b:79:fa:b4:ec:ed:d1:a9:5e:fb:49:fb:
d1:e8:d1:e7:9d:26:6b:39:d4:03:cb:be:a2:97:2b:
93:a8:29:67:37:78:89:95:9e:3b:4a:cd:1b:61:96:
63:d0:79:53:ed:2c:4b:22:4d:e3:72:b9:4d:2c:3c:
81:a1:4d:6d:77:c0:d8:09:3d:0d:75:b6:36:e4:04:
53:45:35:8f:4b:77:b8:6c:18:ee:cc:b2:5a:31:dd:
5f:89:ed:47:72:84:c0:f6:61:97:a2:a1:6a:3b:70:
3a:39:7a:24:65:87:ec:f6:ee:d1:a2:5e:03:90:bb:
d0:fd:06:0e:22:06:29:b7:af:cf:d5:32:38:f7:c7:
ce:e0:41:cf:bf:5d:a9:b3:11:54:6f:b1:0b:82:a1:
42:e8:5d:eb:72:eb:be:f5:63:90:8f:42:ac:4d:67:
6e:85:5f:81:22:9a:38:28:b3:2a:9b:69:31:a4:aa:
b4:b3:60:35:b3:60:fc:f0:1a:55:ef:34:7d:fa:34:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4B:41:C2:15:7E:C2:86:9F:D8:62:29:4B:06:4B:76:64:D5:E0:0F
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:91:99:a2:84:4a:53:93:2b:f5:17:15:c4:06:55:44:81:
76:70:a5:13:67:da:51:37:28:42:c0:89:bf:01:7d:8f:af:48:
21:b7:86:52:63:18:e7:fa:34:24:66:de:fd:a9:23:5d:f2:53:
0a:c7:5b:4d:cf:87:04:e8:27:77:30:06:41:d9:9a:cc:57:5d:
97:7c:f7:18:71:a1:67:be:9d:63:8e:58:34:34:34:cd:d4:d2:
b5:49:ca:89:43:6d:32:cf:75:17:a0:c3:6c:bd:5a:8d:c4:a6:
96:7f:d8:45:60:92:eb:b6:5f:77:48:d7:40:ac:b6:8b:fb:d0:
e9:6b:45:32:d3:6c:3b:61:6b:3f:d5:3d:91:fe:f7:46:2d:1c:
b2:14:5b:1e:ff:3e:48:07:50:10:82:a4:b6:8b:6d:79:2e:c5:
53:49:dc:58:bb:c3:e1:f1:a5:b4:1f:b3:9a:3c:b2:ca:bb:b5:
13:77:68:c6:56:6c:3f:a3:3f:70:31:b9:6a:81:88:0d:9c:76:
17:ac:90:ab:f3:41:27:6e:a9:b1:ee:2d:9a:ab:6f:8f:54:b1:
a8:a5:ac:62:8f:bd:d6:ae:3b:20:78:dd:83:ea:c7:49:6f:10:
ed:dc:73:0d:2f:cd:a5:02:14:1e:d8:01:2c:23:40:45:f9:b3:
84:c5:22:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeGYE2DKMYsZ3/Ypr4lrNQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNjMzMzg4YTdhNWNmZTlhN2NhMTlmZDc0YzkyMmRjYjEy
NTY5ZDMwHhcNMjUwNjE5MDQwOTA3WhcNMjUwNjIwMDQwOTA3WjAzMTEwLwYDVQQD
EyhjOTRiNDFjMjE1N2VjMjg2OWZkODYyMjk0YjA2NGI3NjY0ZDVlMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t03++r0ZOWDOUZKIPMX53XiAEoP
rZJ2L/tU+G0F+o+BTmLX3pTjlECb6+Q1d5MtUeso7tCqVdFO0drYAQJrefq07O3R
qV77SfvR6NHnnSZrOdQDy76ilyuTqClnN3iJlZ47Ss0bYZZj0HlT7SxLIk3jcrlN
LDyBoU1td8DYCT0NdbY25ARTRTWPS3e4bBjuzLJaMd1fie1HcoTA9mGXoqFqO3A6
OXokZYfs9u7Rol4DkLvQ/QYOIgYpt6/P1TI498fO4EHPv12psxFUb7ELgqFC6F3r
cuu+9WOQj0KsTWduhV+BIpo4KLMqm2kxpKq0s2A1s2D88BpV7zR9+jQp8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlLQcIVfsKGn9hiKUsGS3Zk1eAPMB8GA1UdIwQY
MBaAFHJjM4inpc/pp8oZ/XTJItyxJWnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5Yzct
MTM4Yzg0MTdhZTkzLzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5YzctMTM4Yzg0MTdhZTkz
LzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVICRmaKE
SlOTK/UXFcQGVUSBdnClE2faUTcoQsCJvwF9j69IIbeGUmMY5/o0JGbe/akjXfJT
CsdbTc+HBOgndzAGQdmazFddl3z3GHGhZ76dY45YNDQ0zdTStUnKiUNtMs91F6DD
bL1ajcSmln/YRWCS67Zfd0jXQKy2i/vQ6WtFMtNsO2FrP9U9kf73Ri0cshRbHv8+
SAdQEIKktotteS7FU0ncWLvD4fGltB+zmjyyyru1E3doxlZsP6M/cDG5aoGIDZx2
F6yQq/NBJ26pse4tmqtvj1SxqKWsYo+91q47IHjdg+rHSW8Q7dxzDS/NpQIUHtgB
LCNARfmzhMUiNA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 12:45:27 2025 by rpki-client