Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: 3iSqg+js9cxX4MebkUAZNu8CKEepFVxJa9plIJMi6oM=
Subject key identifier: 00:17:1B:B7:01:CE:5B:64:9B:4D:EB:B1:9B:14:18:72:5A:DE:BA:81
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 01976F62C3CAF32D31F1B90A5E06F969E3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 0DD4
Signing time: Sat 14 Jun 2025 17:00:32 +0000
Manifest this update: Sat 14 Jun 2025 17:00:32 +0000
Manifest next update: Sun 15 Jun 2025 17:00:32 +0000
Files and hashes: 1: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: Q9iMRFuyB8llDzb1hDSy+YULG+O/8OkGJ/Q0WaCY5d0=)
2: xhegVBAKk0XT86_ijfwUPQBwbjE.roa (hash: HzUtvDRCwVOU+h+rA3imDZdqrxNmwf2Nw3JBM6GcfyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:c3:ca:f3:2d:31:f1:b9:0a:5e:06:f9:69:e3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Jun 14 17:00:32 2025 GMT
Not After : Jun 15 17:00:32 2025 GMT
Subject: CN=00171bb701ce5b649b4debb19b1418725adeba81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:35:1b:70:6c:6a:ca:4b:43:c3:4f:af:78:
f2:99:8d:74:07:6c:e8:74:d8:4f:c5:ae:9b:4f:1b:
0f:ef:e3:a7:ab:95:06:2f:2c:ea:de:79:ea:5a:54:
d0:3e:10:e4:8e:83:2e:25:64:49:ed:a5:a7:06:28:
54:36:64:4a:b6:9b:c0:5a:40:c9:04:88:a9:e0:4b:
89:99:bb:26:d5:0b:a5:a4:90:51:f5:8e:0a:95:b9:
94:82:36:c5:c7:ca:8f:ed:48:64:8d:a1:d9:ea:d8:
32:da:3a:ea:85:05:2e:ea:b6:ff:22:87:b2:5e:06:
44:9b:64:94:2b:b8:fe:bb:9f:fc:86:04:ee:f8:03:
1a:00:cc:b8:dc:81:02:a5:c9:21:7c:ce:28:f1:b1:
27:43:43:ed:88:1a:8d:29:47:3f:34:b1:eb:3e:b3:
82:a6:38:71:89:31:80:ee:f8:f6:5c:08:25:13:62:
68:ed:37:e9:ec:86:65:6d:64:33:5b:1d:85:c2:d4:
be:6b:1e:04:f9:02:b2:a7:23:b5:d9:d3:31:f5:64:
8f:df:46:85:6b:8b:37:21:ed:ce:c4:0c:90:72:f8:
b7:c7:62:af:7c:6c:ee:c3:3f:23:ca:19:7d:93:cc:
e3:92:8a:2f:70:eb:85:1c:78:a8:52:86:80:37:4c:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:17:1B:B7:01:CE:5B:64:9B:4D:EB:B1:9B:14:18:72:5A:DE:BA:81
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bc:33:99:53:de:8c:55:53:c2:2c:6d:57:b8:a5:eb:ab:81:
f0:13:f0:95:62:cb:36:71:c3:be:7d:aa:d0:53:b2:4e:aa:db:
91:b1:54:f7:92:66:4e:0b:49:a9:28:fe:e6:1e:f0:c7:41:e3:
6a:a1:de:c0:82:e1:2e:af:e9:2f:27:76:4f:bf:71:c1:66:93:
66:2a:46:03:a6:e2:b4:5d:d9:7e:cf:26:a7:aa:72:31:62:10:
46:ff:1a:59:53:44:1d:01:04:74:52:c0:97:dc:a7:37:71:7d:
1e:fc:f7:08:e7:6a:de:7a:67:59:8d:7a:77:68:cc:a1:cf:e6:
6c:62:77:19:8a:b5:5f:c8:54:a6:5d:da:a9:8e:46:e9:47:42:
eb:e3:0b:d6:c1:3b:10:25:28:0d:a8:8d:1b:77:e1:cf:96:74:
a5:d8:38:28:c8:be:7a:3a:54:83:b8:98:63:48:ab:77:a7:0b:
7e:5c:fb:37:ed:a5:c1:36:3d:d9:19:34:21:f1:6a:6d:12:15:
57:21:5b:29:1d:1a:b8:e9:c4:10:b4:d1:ba:48:75:77:41:9c:
7a:ae:4d:bd:ac:6b:72:2a:72:80:09:66:8c:b2:a4:f8:f7:4b:
62:16:60:ca:0a:a2:e2:9e:28:7f:b7:ea:30:5b:db:0e:71:67:
2d:94:c9:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYsPK8y0x8bkKXgb5aeP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjY0ODM1ZjhhYWZlNjE0OTcxZmZhODY4M2Y5Zjc0YmY0
ZDBmZjQwHhcNMjUwNjE0MTcwMDMyWhcNMjUwNjE1MTcwMDMyWjAzMTEwLwYDVQQD
EygwMDE3MWJiNzAxY2U1YjY0OWI0ZGViYjE5YjE0MTg3MjVhZGViYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA81G3BsaspLQ8NPr3jymY10B2zo
dNhPxa6bTxsP7+Onq5UGLyzq3nnqWlTQPhDkjoMuJWRJ7aWnBihUNmRKtpvAWkDJ
BIip4EuJmbsm1QulpJBR9Y4KlbmUgjbFx8qP7UhkjaHZ6tgy2jrqhQUu6rb/Ioey
XgZEm2SUK7j+u5/8hgTu+AMaAMy43IECpckhfM4o8bEnQ0PtiBqNKUc/NLHrPrOC
pjhxiTGA7vj2XAglE2Jo7Tfp7IZlbWQzWx2FwtS+ax4E+QKypyO12dMx9WSP30aF
a4s3Ie3OxAyQcvi3x2KvfGzuwz8jyhl9k8zjkoovcOuFHHioUoaAN0wDjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAXG7cBzltkm03rsZsUGHJa3rqBMB8GA1UdIwQY
MBaAFAhmSDX4qv5hSXH/qGg/n3S/TQ/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0daSU5maXFfbUZKY2Ytb2FELWZkTDlORF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZWYzYjUtYTg0OC00M2Q1LTg3M2Et
MDc1N2E2ZDI4MjI0LzEvQ0daSU5maXFfbUZKY2Ytb2FELWZkTDlORF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jZWYzYjUtYTg0OC00M2Q1LTg3M2EtMDc1N2E2ZDI4MjI0
LzEvQ0daSU5maXFfbUZKY2Ytb2FELWZkTDlORF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrwzmVPe
jFVTwixtV7il66uB8BPwlWLLNnHDvn2q0FOyTqrbkbFU95JmTgtJqSj+5h7wx0Hj
aqHewILhLq/pLyd2T79xwWaTZipGA6bitF3Zfs8mp6pyMWIQRv8aWVNEHQEEdFLA
l9ynN3F9Hvz3COdq3npnWY16d2jMoc/mbGJ3GYq1X8hUpl3aqY5G6UdC6+ML1sE7
ECUoDaiNG3fhz5Z0pdg4KMi+ejpUg7iYY0ird6cLflz7N+2lwTY92Rk0IfFqbRIV
VyFbKR0auOnEELTRukh1d0Gceq5NvaxrcipygAlmjLKk+PdLYhZgygqi4p4of7fq
MFvbDnFnLZTJvg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:28:13 2025 by rpki-client