Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: PPj7WsIS3Sl3BhP3+3Oj/GFMSuKlfG0sZzC9LNjraY8=
Subject key identifier: B3:19:3D:06:08:CA:E5:DA:66:C9:C3:63:90:F6:46:E2:F8:FE:96:ED
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 01976EF4E9FF49D21F760D6468E69DA51C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 0FD1
Signing time: Sat 14 Jun 2025 15:00:33 +0000
Manifest this update: Sat 14 Jun 2025 15:00:33 +0000
Manifest next update: Sun 15 Jun 2025 15:00:33 +0000
Files and hashes: 1: F6TRgo1Qxqb0z2HOICITaJq6vVA.roa (hash: HB4jpWzWtSDjiUJivZqFCyvc7yAlpLdjecgjjSvTmVc=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: M3u6BuxtX+H89mRYe24iCGVxHUlMSeFivKOqz/Evx2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:e9:ff:49:d2:1f:76:0d:64:68:e6:9d:a5:1c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Jun 14 15:00:33 2025 GMT
Not After : Jun 15 15:00:33 2025 GMT
Subject: CN=b3193d0608cae5da66c9c36390f646e2f8fe96ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:ee:fb:f7:08:ab:37:6c:79:8d:fa:10:04:
ea:8d:e0:ab:a3:13:e1:e9:b0:7a:46:07:49:15:f7:
88:05:9a:f0:6c:20:f3:04:6b:7d:39:e2:f0:1a:8a:
84:c7:8f:34:94:f7:10:43:5e:a2:bf:31:84:aa:10:
ad:b9:af:fd:f5:0a:35:a9:48:f4:b1:06:d7:04:76:
65:75:b0:a9:e6:f3:3f:5a:3a:12:a2:92:63:d9:30:
6d:eb:70:e2:9b:4e:b6:23:ef:dd:76:f5:c5:cd:7b:
13:61:8f:a3:e1:36:8d:c1:18:0b:a0:bf:33:9e:d6:
28:81:9e:17:14:ba:bb:af:11:73:3c:8e:fc:93:1b:
94:e7:02:e9:f6:b0:ce:5b:11:2e:c8:48:69:7b:75:
c2:00:f8:85:cc:5f:33:54:7c:6f:57:ed:2d:4f:2b:
e2:01:11:95:39:22:0b:38:22:fe:65:95:1d:9c:f7:
c3:e9:61:fa:9d:e5:dd:1b:e3:6a:16:f6:30:b4:14:
db:74:58:dc:f7:15:f2:7e:af:01:cb:22:46:5a:3a:
28:a1:95:e9:ce:94:ee:e2:16:cd:c7:c4:17:5c:37:
18:5b:7a:a3:22:e6:d6:11:fa:b7:14:75:04:54:96:
75:f8:77:64:f5:c1:d9:70:b4:d2:b4:40:d1:0a:b6:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:19:3D:06:08:CA:E5:DA:66:C9:C3:63:90:F6:46:E2:F8:FE:96:ED
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:db:f8:1f:ec:0c:44:61:83:67:7d:fe:74:23:56:bc:66:3a:
31:d5:94:1c:af:ed:60:30:b9:6c:f5:73:95:c3:e6:6a:e1:1b:
a3:2f:54:df:6a:bb:38:f2:a0:b1:1c:47:a2:91:ba:6d:17:df:
7c:e5:eb:a3:52:3e:ff:c0:6b:20:05:24:1e:3f:65:55:1a:62:
61:60:03:cd:1c:e8:c2:fd:0b:de:af:8c:78:94:a2:11:b6:66:
d6:bd:ac:e4:e0:61:3e:94:fc:fa:a2:c8:57:88:41:7d:d5:e0:
09:f0:2b:77:95:d9:ee:bf:f8:0e:3c:99:e3:ed:e8:06:83:01:
e9:f1:b7:3f:72:3c:8d:2d:df:57:68:5e:41:b4:eb:a0:17:58:
8a:3f:0d:90:07:2f:c4:16:9f:f8:84:15:ad:2b:94:d9:06:a1:
d8:04:1c:34:58:36:c1:6f:e3:ef:3a:02:97:de:e9:f7:5d:75:
32:14:d9:db:d9:03:ac:09:e2:12:44:0c:5f:d8:d8:1a:a3:d2:
2d:59:6d:84:86:fa:34:ce:82:91:24:c5:5f:50:12:86:1c:39:
2a:82:07:a3:2a:14:96:1d:81:72:ac:fa:7a:17:1a:82:2e:f3:
0b:e3:db:68:bc:e5:6e:0c:73:75:0c:66:9d:34:e4:ab:92:79:
76:43:1b:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9On/SdIfdg1kaOadpRxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxY2VjMjY5Zjg0ZDU2NDFmZjYzYTYzZDFmMzk5N2M4Y2Zk
NGZlMjgwHhcNMjUwNjE0MTUwMDMzWhcNMjUwNjE1MTUwMDMzWjAzMTEwLwYDVQQD
EyhiMzE5M2QwNjA4Y2FlNWRhNjZjOWMzNjM5MGY2NDZlMmY4ZmU5NmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsybu+/cIqzdseY36EATqjeCroxPh
6bB6RgdJFfeIBZrwbCDzBGt9OeLwGoqEx480lPcQQ16ivzGEqhCtua/99Qo1qUj0
sQbXBHZldbCp5vM/WjoSopJj2TBt63Dim062I+/ddvXFzXsTYY+j4TaNwRgLoL8z
ntYogZ4XFLq7rxFzPI78kxuU5wLp9rDOWxEuyEhpe3XCAPiFzF8zVHxvV+0tTyvi
ARGVOSILOCL+ZZUdnPfD6WH6neXdG+NqFvYwtBTbdFjc9xXyfq8ByyJGWjoooZXp
zpTu4hbNx8QXXDcYW3qjIubWEfq3FHUEVJZ1+Hdk9cHZcLTStEDRCrZrAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMZPQYIyuXaZsnDY5D2RuL4/pbtMB8GA1UdIwQY
MBaAFHHOwmn4TVZB/2OmPR85l8jP1P4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUt
YTc2MmU5YzBkZDMyLzEvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUtYTc2MmU5YzBkZDMy
LzEvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdv4H+wM
RGGDZ33+dCNWvGY6MdWUHK/tYDC5bPVzlcPmauEboy9U32q7OPKgsRxHopG6bRff
fOXro1I+/8BrIAUkHj9lVRpiYWADzRzowv0L3q+MeJSiEbZm1r2s5OBhPpT8+qLI
V4hBfdXgCfArd5XZ7r/4DjyZ4+3oBoMB6fG3P3I8jS3fV2heQbTroBdYij8NkAcv
xBaf+IQVrSuU2Qah2AQcNFg2wW/j7zoCl97p9111MhTZ29kDrAniEkQMX9jYGqPS
LVlthIb6NM6CkSTFX1AShhw5KoIHoyoUlh2Bcqz6ehcagi7zC+PbaLzlbgxzdQxm
nTTkq5J5dkMb9g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:43:34 2025 by rpki-client