Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json)
Hash identifier: L8EU4Ow1O9etyFcx5Q7p7F05tdoP+5ZQOemOvpPXn9c=
Subject key identifier: 88:01:93:F6:7E:3F:8E:00:42:09:8C:CD:3D:D6:CA:AB:17:F4:AC:C1
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial: 01976C2B6D1132414ED80A522529FAF834ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
Manifest number: 10E2
Signing time: Sat 14 Jun 2025 02:01:14 +0000
Manifest this update: Sat 14 Jun 2025 02:01:14 +0000
Manifest next update: Sun 15 Jun 2025 02:01:14 +0000
Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: rfcV1aVKSiZ+B1bIuC/LE02PNzXb6eKl3JrG58+iyqo=)
2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:6d:11:32:41:4e:d8:0a:52:25:29:fa:f8:34:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Validity
Not Before: Jun 14 02:01:14 2025 GMT
Not After : Jun 15 02:01:14 2025 GMT
Subject: CN=880193f67e3f8e0042098ccd3dd6caab17f4acc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:89:3f:72:a4:65:94:35:82:ab:6e:d0:42:
1e:87:15:b2:03:b8:18:4a:67:fe:cd:cf:04:95:13:
0d:72:fe:88:87:18:26:df:8a:ed:56:81:40:6f:d6:
f3:23:c2:16:b0:0e:71:b6:8d:48:6a:fe:ec:81:39:
ba:8a:99:72:66:0d:8b:50:33:b2:5a:9d:05:88:d6:
70:17:1b:05:92:6c:e8:de:78:da:d5:78:1f:8e:90:
28:0d:73:e2:bc:cd:f5:a8:6d:56:ef:22:b8:3e:41:
07:53:01:db:ae:b3:e6:05:ee:03:db:7f:cd:76:b0:
07:36:74:24:c8:b4:47:88:99:ba:c9:9c:97:fd:8d:
5b:40:74:06:1a:4f:e6:41:7f:3a:15:84:a0:b8:ba:
5f:b1:14:ce:72:74:09:8a:2d:00:09:34:7e:c9:60:
9a:df:29:b7:c4:13:7f:2e:d3:85:09:ec:ee:63:d3:
cd:7a:2e:e7:48:ed:86:2f:81:90:39:02:6a:d6:7f:
1e:50:9d:ea:d7:e2:29:22:82:db:b9:93:6e:ac:23:
e4:67:94:de:29:15:71:4b:61:c5:89:92:ac:1a:11:
13:8a:39:13:42:e9:44:c2:48:e6:7f:c1:00:05:89:
3e:93:d4:cb:e5:9c:7e:48:d5:2e:dd:28:31:8d:7c:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:01:93:F6:7E:3F:8E:00:42:09:8C:CD:3D:D6:CA:AB:17:F4:AC:C1
X509v3 Authority Key Identifier:
keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d0:3e:4c:2e:4f:be:e6:66:47:50:11:99:02:f8:ad:a2:5b:
ce:4b:e0:87:36:6b:8c:e5:b2:38:44:1a:21:aa:f7:9c:67:3a:
62:e5:99:2d:d7:1e:d0:8e:ba:2f:8f:c8:3c:d6:14:45:3a:b2:
ed:8b:23:14:84:63:05:f8:75:cb:f3:3b:a8:ce:09:ce:6c:e3:
f5:7b:63:30:47:bd:18:06:93:fb:21:0a:5f:07:04:a2:f7:03:
9b:b0:8e:cc:21:94:13:f3:86:eb:e6:db:d6:30:4d:d3:6c:58:
69:a8:72:a3:b3:07:1c:2f:10:8a:ba:e8:98:8d:00:c6:97:7a:
74:b1:f5:93:c8:ce:c2:70:f6:91:ad:d7:75:c4:ec:5f:62:5c:
34:ae:97:75:4e:62:26:d4:83:39:8e:45:a0:49:d5:3e:8c:33:
27:1b:00:fd:13:01:a0:f8:e2:29:1a:65:01:94:3e:a1:98:9f:
f5:7b:a4:a6:a6:6f:4d:44:2c:53:ad:72:55:98:49:94:02:2f:
19:0b:50:86:f0:c0:be:64:66:04:35:b1:f9:b0:40:50:03:6d:
9c:7d:04:1e:a3:74:17:77:6d:10:72:90:ae:92:e7:20:bf:b1:
c0:b7:0a:7a:a1:25:97:b5:c0:a8:62:ce:5e:c3:6d:10:dc:13:
48:92:f2:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsK20RMkFO2ApSJSn6+DTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTE4NTkzNzdlYWQ2ZjQ0Zjk0MGViOGQzMWMzZjNiZWNj
NTNiMDUwHhcNMjUwNjE0MDIwMTE0WhcNMjUwNjE1MDIwMTE0WjAzMTEwLwYDVQQD
Eyg4ODAxOTNmNjdlM2Y4ZTAwNDIwOThjY2QzZGQ2Y2FhYjE3ZjRhY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufmJP3KkZZQ1gqtu0EIehxWyA7gY
Smf+zc8ElRMNcv6Ihxgm34rtVoFAb9bzI8IWsA5xto1Iav7sgTm6iplyZg2LUDOy
Wp0FiNZwFxsFkmzo3nja1XgfjpAoDXPivM31qG1W7yK4PkEHUwHbrrPmBe4D23/N
drAHNnQkyLRHiJm6yZyX/Y1bQHQGGk/mQX86FYSguLpfsRTOcnQJii0ACTR+yWCa
3ym3xBN/LtOFCezuY9PNei7nSO2GL4GQOQJq1n8eUJ3q1+IpIoLbuZNurCPkZ5Te
KRVxS2HFiZKsGhETijkTQulEwkjmf8EABYk+k9TL5Zx+SNUu3SgxjXx0vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgBk/Z+P44AQgmMzT3WyqsX9KzBMB8GA1UdIwQY
MBaAFHERhZN36tb0T5QOuNMcPzvsxTsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQt
NzU4Y2E0ZDQ4YmMyLzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQtNzU4Y2E0ZDQ4YmMy
LzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9A+TC5P
vuZmR1ARmQL4raJbzkvghzZrjOWyOEQaIar3nGc6YuWZLdce0I66L4/IPNYURTqy
7YsjFIRjBfh1y/M7qM4Jzmzj9XtjMEe9GAaT+yEKXwcEovcDm7COzCGUE/OG6+bb
1jBN02xYaahyo7MHHC8QirromI0Axpd6dLH1k8jOwnD2ka3XdcTsX2JcNK6XdU5i
JtSDOY5FoEnVPowzJxsA/RMBoPjiKRplAZQ+oZif9XukpqZvTUQsU61yVZhJlAIv
GQtQhvDAvmRmBDWx+bBAUANtnH0EHqN0F3dtEHKQrpLnIL+xwLcKeqEll7XAqGLO
XsNtENwTSJLyJA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:56:40 2025 by rpki-client