Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
File: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft (raw, json)
Hash identifier: mcfRSS1qnFe9QyVAdRRpn+Qvit4/ObRXsv46pgO/8nU=
Subject key identifier: 80:4A:72:9E:E5:2A:2F:54:BF:DE:5A:CA:98:2E:38:75:6E:6A:B9:28
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial: 01977941C3CEB344336E9A94439C529745F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
Manifest number: 0B09
Signing time: Mon 16 Jun 2025 15:00:42 +0000
Manifest this update: Mon 16 Jun 2025 15:00:42 +0000
Manifest next update: Tue 17 Jun 2025 15:00:42 +0000
Files and hashes: 1: ehG-SCGwvd8yBJatadELhp3bH6w.roa (hash: YkiZ4YuzwJ9yzU2pKOGO15cIT4PrhxRCvMLtPrdtwoE=)
2: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl (hash: mzqY5UpA2v9IhA5ljE6OQ3s0aG4i0LDwa3otLlLG2B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:c3:ce:b3:44:33:6e:9a:94:43:9c:52:97:45:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Validity
Not Before: Jun 16 15:00:42 2025 GMT
Not After : Jun 17 15:00:42 2025 GMT
Subject: CN=804a729ee52a2f54bfde5aca982e38756e6ab928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:84:f8:aa:c7:b7:97:4a:cd:c5:ee:81:57:
a1:f7:df:1b:71:ab:5e:82:dc:c8:e6:4c:5d:3b:ab:
4c:35:4f:5b:86:63:d0:e8:81:50:71:2e:66:65:a5:
8f:7c:8b:32:85:39:b6:55:ee:a2:b5:5b:b3:9a:08:
fe:e9:ed:59:11:f5:f5:d2:3c:22:2e:e6:63:35:5d:
62:b0:2d:84:36:45:c9:5c:29:8f:ba:29:cc:82:f2:
24:98:e3:a2:1a:3a:4d:b2:b9:42:70:c4:11:3d:c5:
34:5f:c2:87:89:20:5f:52:f9:75:f2:ca:c1:dd:f9:
f0:2d:3c:01:f7:1e:0c:eb:0a:00:86:78:8f:58:9c:
07:66:4a:10:ae:a3:07:dd:2e:3c:9a:a3:a6:76:c2:
b6:5a:8f:f4:31:e0:5c:21:2a:98:14:d0:19:7e:c2:
10:77:61:b6:b5:f2:37:ab:ae:76:fb:e2:95:5b:63:
8a:94:2c:e4:83:82:50:5c:58:b8:c8:c8:78:cd:91:
55:69:83:db:fd:0c:17:8e:0a:06:96:af:3e:98:9c:
af:2a:0c:ea:8b:9e:51:59:76:48:6f:c5:7b:d6:59:
01:3f:24:38:6f:af:8c:4a:4d:88:9e:12:c0:d8:75:
df:b6:40:a1:23:d4:a4:b2:79:6d:c1:7f:ef:50:c5:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4A:72:9E:E5:2A:2F:54:BF:DE:5A:CA:98:2E:38:75:6E:6A:B9:28
X509v3 Authority Key Identifier:
keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:75:b8:96:25:ca:0d:fc:ed:d8:93:81:65:3b:9a:62:b1:44:
22:7b:b6:27:ea:72:51:cd:21:0a:6b:66:1a:bf:54:7e:6e:ee:
0a:e5:70:0a:be:33:ff:30:b0:d1:71:53:16:0e:01:fc:06:fa:
e5:c5:08:24:83:9c:b7:34:23:5f:ac:53:b3:94:d8:0d:8f:f4:
28:32:57:86:f8:58:32:0e:31:68:91:4f:24:f6:68:b1:db:c5:
83:7e:87:0a:dd:fd:12:8c:32:02:88:57:b0:12:0c:31:2c:e3:
41:be:1e:0f:25:93:dd:d0:c6:e1:18:c5:f6:28:a2:71:83:1d:
83:fc:82:0c:61:d2:43:86:89:b1:93:10:2e:31:69:fb:1a:ca:
95:c2:e7:0a:bc:45:f5:61:4d:b4:da:69:a7:fe:7c:d9:03:58:
1f:d4:90:24:92:e4:35:40:4c:69:5f:df:95:49:79:0a:1c:3b:
ba:d3:d9:d3:42:bc:b8:8c:1f:54:4c:ad:21:6a:4c:95:e6:2d:
70:99:25:87:10:31:5a:7e:5f:30:ab:57:2d:92:f5:ed:44:94:
85:ea:a1:1a:9d:86:41:1f:90:07:87:a7:e0:01:86:6d:3e:f2:
4a:39:59:b1:03:3f:2d:90:6b:2c:35:a8:42:22:4c:a1:93:c7:
3f:93:25:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5QcPOs0QzbpqUQ5xSl0XyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZjA5YWQ4YWFkM2IzMzU0ODc1YmJlYWVkMDViNjFhNTRh
MDM3MDQwHhcNMjUwNjE2MTUwMDQyWhcNMjUwNjE3MTUwMDQyWjAzMTEwLwYDVQQD
Eyg4MDRhNzI5ZWU1MmEyZjU0YmZkZTVhY2E5ODJlMzg3NTZlNmFiOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYuE+KrHt5dKzcXugVeh998bcate
gtzI5kxdO6tMNU9bhmPQ6IFQcS5mZaWPfIsyhTm2Ve6itVuzmgj+6e1ZEfX10jwi
LuZjNV1isC2ENkXJXCmPuinMgvIkmOOiGjpNsrlCcMQRPcU0X8KHiSBfUvl18srB
3fnwLTwB9x4M6woAhniPWJwHZkoQrqMH3S48mqOmdsK2Wo/0MeBcISqYFNAZfsIQ
d2G2tfI3q652++KVW2OKlCzkg4JQXFi4yMh4zZFVaYPb/QwXjgoGlq8+mJyvKgzq
i55RWXZIb8V71lkBPyQ4b6+MSk2InhLA2HXftkChI9SksnltwX/vUMWu7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBKcp7lKi9Uv95aypguOHVuarkoMB8GA1UdIwQY
MBaAFKfwmtiq07M1SHW76u0FthpUoDcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9DYTJLclRzelZJZGJ2cTdRVzJHbFNnTndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kNTZjMmYtYjk5OS00MGQxLWFkYmYt
OWViZDJmMWFiMzYyLzEvcF9DYTJLclRzelZJZGJ2cTdRVzJHbFNnTndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9kNTZjMmYtYjk5OS00MGQxLWFkYmYtOWViZDJmMWFiMzYy
LzEvcF9DYTJLclRzelZJZGJ2cTdRVzJHbFNnTndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXW4liXK
Dfzt2JOBZTuaYrFEInu2J+pyUc0hCmtmGr9Ufm7uCuVwCr4z/zCw0XFTFg4B/Ab6
5cUIJIOctzQjX6xTs5TYDY/0KDJXhvhYMg4xaJFPJPZosdvFg36HCt39EowyAohX
sBIMMSzjQb4eDyWT3dDG4RjF9iiicYMdg/yCDGHSQ4aJsZMQLjFp+xrKlcLnCrxF
9WFNtNppp/582QNYH9SQJJLkNUBMaV/flUl5Chw7utPZ00K8uIwfVEytIWpMleYt
cJklhxAxWn5fMKtXLZL17USUheqhGp2GQR+QB4en4AGGbT7ySjlZsQM/LZBrLDWo
QiJMoZPHP5MljQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:54:15 2025 by rpki-client