Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: PB4uR1w1XbXQzPYcH3xEMmnTyWWv/7WLa6ZbktTNSLY=
Subject key identifier: 16:02:C2:8C:9B:FA:CC:84:DB:80:C6:71:AF:84:C1:01:81:C1:16:5B
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 019769CE622669964E747CCC807F0D9DF404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 0260
Signing time: Fri 13 Jun 2025 15:00:22 +0000
Manifest this update: Fri 13 Jun 2025 15:00:22 +0000
Manifest next update: Sat 14 Jun 2025 15:00:22 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: oV7C739kanBWQyTxphBs22CR0n3/FKlPfL0uPDScViQ=)
2: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (hash: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:62:26:69:96:4e:74:7c:cc:80:7f:0d:9d:f4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Jun 13 15:00:22 2025 GMT
Not After : Jun 14 15:00:22 2025 GMT
Subject: CN=1602c28c9bfacc84db80c671af84c10181c1165b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c1:4c:84:83:ae:30:31:63:4e:4e:38:89:84:
5a:c3:e5:db:3e:37:e8:50:79:79:90:bd:84:86:2e:
d3:1e:6c:63:92:d6:00:b5:fe:57:75:8a:03:74:7f:
e2:f0:53:d1:9b:cf:9a:77:ff:44:bd:27:74:ba:de:
ea:26:a9:6b:cd:8a:f3:39:45:b8:6d:66:14:87:07:
15:ae:29:5d:e2:c3:1a:bb:68:58:0f:18:38:16:59:
07:02:66:70:dd:e9:70:63:00:80:dd:43:30:9a:5a:
79:aa:fb:b5:d3:9d:2b:62:9c:04:20:83:4e:93:1a:
76:e8:55:fd:27:3e:d6:b4:5f:1e:7b:69:b2:68:4c:
76:5a:b3:8a:fb:06:37:67:34:27:a2:f1:b7:f0:65:
6c:72:df:44:0b:9b:65:95:28:c8:f5:d4:36:4f:a3:
fd:27:0b:62:4d:79:1f:68:d2:3c:f5:10:59:c8:5c:
3c:cb:99:d2:0b:62:cf:cb:1a:6e:b6:75:25:a4:2b:
35:98:f6:b0:ca:3b:d8:38:64:f3:61:29:7f:33:c2:
6f:32:cc:ab:22:89:1c:7c:d0:e2:2b:c9:5d:84:87:
2c:f4:b7:bb:6d:fa:7f:4a:6f:de:ce:99:2e:c8:13:
aa:62:49:3f:1a:04:c8:3d:59:a7:49:b7:d1:1c:35:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:C2:8C:9B:FA:CC:84:DB:80:C6:71:AF:84:C1:01:81:C1:16:5B
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:f5:e1:80:67:96:43:6c:b7:6d:16:30:65:b0:e7:48:a1:
37:93:b7:56:f4:e8:bc:46:ca:a3:59:a1:25:03:5d:2c:c1:19:
04:ac:ca:18:dd:bd:9b:a1:90:9a:c1:cb:f1:0c:ae:74:43:74:
c0:d4:3a:8c:14:e9:bc:fc:72:e5:ae:24:51:a0:6e:7f:85:08:
7d:c5:24:f3:47:9b:d6:3a:73:43:ff:f1:35:61:22:8d:7b:8b:
66:5d:db:3f:89:e3:bb:29:cc:9e:81:f2:5a:af:a1:03:5a:3c:
07:5a:a7:bd:89:81:9a:a3:f0:20:35:5b:78:fa:f3:4c:09:74:
3e:41:ed:bf:85:59:60:7e:9e:31:35:7e:89:b2:fd:b8:9b:bd:
16:d0:da:18:ee:3a:b5:41:ca:76:1d:89:fd:48:f9:43:cd:ca:
e5:1d:34:f9:33:56:c3:32:12:ea:af:1a:33:9f:6d:b7:22:41:
60:56:8f:8d:69:1e:c0:f7:eb:c9:b7:d7:97:e9:84:b6:f0:40:
75:e9:f0:c3:d3:68:04:f7:ad:6f:dc:58:b2:ba:a3:f9:23:59:
b6:0c:86:ac:ed:54:e6:d9:ed:b1:4e:50:cd:a8:36:de:17:ab:
a5:71:6b:cc:37:0e:12:a0:14:6b:35:94:f6:5b:0d:f0:76:03:
6e:0d:e7:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzmImaZZOdHzMgH8NnfQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDc0MjYxNmE2ODA0MWY3ZjBmY2QwNzkyZjM4ZTQxMDNh
NzlkYzIwHhcNMjUwNjEzMTUwMDIyWhcNMjUwNjE0MTUwMDIyWjAzMTEwLwYDVQQD
EygxNjAyYzI4YzliZmFjYzg0ZGI4MGM2NzFhZjg0YzEwMTgxYzExNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cFMhIOuMDFjTk44iYRaw+XbPjfo
UHl5kL2Ehi7THmxjktYAtf5XdYoDdH/i8FPRm8+ad/9EvSd0ut7qJqlrzYrzOUW4
bWYUhwcVrild4sMau2hYDxg4FlkHAmZw3elwYwCA3UMwmlp5qvu1050rYpwEIINO
kxp26FX9Jz7WtF8ee2myaEx2WrOK+wY3ZzQnovG38GVsct9EC5tllSjI9dQ2T6P9
JwtiTXkfaNI89RBZyFw8y5nSC2LPyxputnUlpCs1mPawyjvYOGTzYSl/M8JvMsyr
IokcfNDiK8ldhIcs9Le7bfp/Sm/ezpkuyBOqYkk/GgTIPVmnSbfRHDVK9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYCwoyb+syE24DGca+EwQGBwRZbMB8GA1UdIwQY
MBaAFHLXQmFqaAQffw/NB5LzjkEDp53CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUt
YTIwOWI5MGYyN2Q5LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUtYTIwOWI5MGYyN2Q5
LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSf14YBn
lkNst20WMGWw50ihN5O3VvTovEbKo1mhJQNdLMEZBKzKGN29m6GQmsHL8QyudEN0
wNQ6jBTpvPxy5a4kUaBuf4UIfcUk80eb1jpzQ//xNWEijXuLZl3bP4njuynMnoHy
Wq+hA1o8B1qnvYmBmqPwIDVbePrzTAl0PkHtv4VZYH6eMTV+ibL9uJu9FtDaGO46
tUHKdh2J/Uj5Q83K5R00+TNWwzIS6q8aM59ttyJBYFaPjWkewPfrybfXl+mEtvBA
denww9NoBPetb9xYsrqj+SNZtgyGrO1U5tntsU5Qzag23herpXFrzDcOEqAUazWU
9lsN8HYDbg3nQQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:00 2025 by rpki-client