Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: JGkS4PgdwtdJoj7tXLmgQUA5FdEhfMRcWTQlH5f2JxM=
Subject key identifier: 3D:0F:49:4A:6D:86:C5:9E:FF:97:16:E9:90:C2:8B:91:F5:C8:46:D7
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 01976DE2DB2C618664ABA70BB9624517E295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 10:01:13 +0000
Manifest this update: Sat 14 Jun 2025 10:01:13 +0000
Manifest next update: Sun 15 Jun 2025 10:01:13 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: qNahlfvuMVY5KFAfNKnKvOJG7CxepBEHBJzzWtiHP9I=)
2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:db:2c:61:86:64:ab:a7:0b:b9:62:45:17:e2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Jun 14 10:01:13 2025 GMT
Not After : Jun 15 10:01:13 2025 GMT
Subject: CN=3d0f494a6d86c59eff9716e990c28b91f5c846d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:83:87:eb:91:3b:25:35:89:08:d8:27:63:
f5:9c:3d:a4:4d:a7:78:88:6b:06:4b:93:1d:ca:0a:
91:4f:cb:67:1e:a5:2e:85:0e:3d:39:5c:7e:bc:6c:
d3:72:72:b8:de:3f:09:d2:02:89:73:27:66:03:ff:
3e:f9:ba:60:1d:5c:8e:27:95:b3:e1:d4:96:00:9c:
9a:8a:81:31:51:37:32:bf:9b:ce:81:7b:e0:8c:51:
f9:79:d3:76:cc:33:b6:3f:6c:61:e5:95:f9:6c:31:
f8:b9:8a:cd:3f:12:5a:6d:e6:07:85:6e:f7:34:b4:
20:73:d3:c1:43:94:27:5c:69:0c:15:62:2d:88:01:
6f:06:1a:95:f9:e1:64:b2:70:89:6b:ce:d6:77:37:
c0:a6:c4:3a:17:f9:56:7a:9b:13:bd:71:d5:fa:c1:
23:29:d0:da:eb:d7:34:10:8a:46:49:dc:9d:fa:6a:
df:ce:26:17:85:f5:57:63:ba:52:1b:9d:d9:94:9c:
2c:81:b0:32:dd:32:fc:f0:15:85:6a:62:0e:82:9d:
85:ba:44:aa:81:69:b3:37:2c:58:a8:99:3d:fa:0e:
fc:41:18:e0:c8:d5:e8:2a:ef:57:01:c6:4a:de:77:
61:54:57:68:a2:2f:6d:a3:7c:47:cb:be:2a:f7:c0:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0F:49:4A:6D:86:C5:9E:FF:97:16:E9:90:C2:8B:91:F5:C8:46:D7
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b5:6e:12:12:4f:0b:2b:7c:47:00:8f:73:26:f8:d3:7a:ac:
ad:a2:63:38:71:10:97:de:20:fa:22:e4:de:79:c5:1b:6c:39:
7c:09:54:29:1f:cc:99:dd:8b:31:a1:2e:82:cb:dc:bb:44:ed:
e7:08:4f:8f:72:55:02:81:98:26:7d:40:4b:14:fb:1e:73:02:
96:f4:30:e6:68:71:50:a4:9b:1b:f1:64:e5:85:4a:e2:07:89:
e2:58:c7:09:96:4d:8f:5d:fb:ff:c6:9c:e0:2a:e5:c6:16:eb:
ad:90:fc:16:70:44:5f:4e:1d:b4:95:06:e4:0a:76:b3:70:f0:
7f:a1:8f:75:61:7c:01:f9:f7:3d:33:80:f3:03:60:ed:fc:7a:
e8:b7:59:a1:04:62:5f:ee:dc:63:cf:65:12:40:c8:25:cc:d2:
df:14:8a:5d:38:8b:f3:ed:8b:87:d0:f3:53:bb:11:98:a1:c4:
bd:4f:dc:c1:e0:38:e7:be:be:2b:5e:f6:42:b1:6b:56:7b:43:
18:00:cc:c1:4f:04:ce:dd:80:aa:9e:e5:09:de:44:43:9d:c6:
03:1a:3f:df:b8:71:6f:b0:51:75:0c:90:70:01:7a:cd:df:d5:
85:4c:36:6f:9b:27:30:ff:87:fc:e5:e6:46:8f:42:53:ae:7d:
23:68:0a:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdt4tssYYZkq6cLuWJFF+KVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YmEwMmY2OTk1Y2VjZTZhOWZkMzQ3NWJkMGIxY2YwZGQ4
NTgyNmUwHhcNMjUwNjE0MTAwMTEzWhcNMjUwNjE1MTAwMTEzWjAzMTEwLwYDVQQD
EygzZDBmNDk0YTZkODZjNTllZmY5NzE2ZTk5MGMyOGI5MWY1Yzg0NmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHmDh+uROyU1iQjYJ2P1nD2kTad4
iGsGS5MdygqRT8tnHqUuhQ49OVx+vGzTcnK43j8J0gKJcydmA/8++bpgHVyOJ5Wz
4dSWAJyaioExUTcyv5vOgXvgjFH5edN2zDO2P2xh5ZX5bDH4uYrNPxJabeYHhW73
NLQgc9PBQ5QnXGkMFWItiAFvBhqV+eFksnCJa87WdzfApsQ6F/lWepsTvXHV+sEj
KdDa69c0EIpGSdyd+mrfziYXhfVXY7pSG53ZlJwsgbAy3TL88BWFamIOgp2FukSq
gWmzNyxYqJk9+g78QRjgyNXoKu9XAcZK3ndhVFdooi9to3xHy74q98AdxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0PSUpthsWe/5cW6ZDCi5H1yEbXMB8GA1UdIwQY
MBaAFAi6AvaZXOzmqf00db0LHPDdhYJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2Ut
OTY1ZmFjOTc3NzIxLzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2UtOTY1ZmFjOTc3NzIx
LzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv7VuEhJP
Cyt8RwCPcyb403qsraJjOHEQl94g+iLk3nnFG2w5fAlUKR/Mmd2LMaEugsvcu0Tt
5whPj3JVAoGYJn1ASxT7HnMClvQw5mhxUKSbG/Fk5YVK4geJ4ljHCZZNj137/8ac
4CrlxhbrrZD8FnBEX04dtJUG5Ap2s3Dwf6GPdWF8Afn3PTOA8wNg7fx66LdZoQRi
X+7cY89lEkDIJczS3xSKXTiL8+2Lh9DzU7sRmKHEvU/cweA4576+K172QrFrVntD
GADMwU8Ezt2Aqp7lCd5EQ53GAxo/37hxb7BRdQyQcAF6zd/VhUw2b5snMP+H/OXm
Ro9CU659I2gK6A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:15 2025 by rpki-client