Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: /TSpI4p8Sj1WWzi5DnG44fZQ6BQR1Wm+/7FLH+S355s=
Subject key identifier: 52:88:1C:4C:4A:4E:98:65:BB:DC:3A:8F:45:D4:CA:51:12:D8:94:89
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 01965F846343914A8578F56D7176CA03074B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 07A5
Signing time: Tue 22 Apr 2025 22:00:33 +0000
Manifest this update: Tue 22 Apr 2025 22:00:33 +0000
Manifest next update: Wed 23 Apr 2025 22:00:33 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: q1ISmqyf2BMp/S29bdaZTk9gO2AC+5pc0indvXHiYP0=)
2: pltDgh5JbbEWSggwVXLGKtobVl8.roa (hash: XwQl2FIwqmmMyr6/rQAaXcZHJoaBjslDK7+U58bsYig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:63:43:91:4a:85:78:f5:6d:71:76:ca:03:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Apr 22 22:00:33 2025 GMT
Not After : Apr 23 22:00:33 2025 GMT
Subject: CN=52881c4c4a4e9865bbdc3a8f45d4ca5112d89489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:7c:10:a2:ae:24:f9:18:fa:cf:c8:fb:c6:
57:56:40:c0:d6:c3:0f:03:b7:39:7e:17:05:c7:17:
b9:7b:60:b7:ff:a9:68:e2:02:96:eb:78:68:b7:fa:
04:58:47:0a:4b:de:c8:e9:03:c1:b8:08:92:2f:42:
7f:14:2d:ce:4b:ae:00:16:bf:1f:c6:30:b9:4f:2b:
04:02:44:32:94:64:49:e0:89:26:c4:fe:89:fd:a3:
f0:6c:9f:76:3a:4e:8b:26:3e:04:c7:9f:f3:2c:a9:
cc:57:d9:4b:99:9a:b8:87:d7:6d:56:f0:16:34:47:
f5:a7:19:d8:54:e5:ff:00:e4:46:66:21:bf:df:8b:
70:bc:21:2e:4f:1b:4e:d3:aa:b6:5b:a0:4a:a8:14:
c2:1b:80:a9:a4:96:b4:fb:32:7c:2f:d8:10:e1:b4:
f8:0a:4c:4d:32:c9:38:0b:31:3f:ed:bc:21:a3:2b:
1a:76:31:98:65:a9:3f:c6:8b:a1:ee:42:a8:0c:77:
b6:3e:9c:42:c7:a0:67:d3:92:66:66:eb:73:b0:b7:
43:67:a8:3c:c7:9c:81:35:e3:3c:2b:7b:05:65:5f:
c0:8d:01:94:44:fe:e1:71:c4:a9:ec:04:e5:fb:7e:
c4:62:a5:30:b6:87:b9:fa:a4:c4:7b:22:27:e1:c4:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:88:1C:4C:4A:4E:98:65:BB:DC:3A:8F:45:D4:CA:51:12:D8:94:89
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:60:17:21:23:f4:b0:b0:37:03:c7:94:0b:e2:51:c7:06:7d:
01:cd:3f:2d:28:46:4e:2a:13:e6:f1:c2:b0:e2:70:d2:c2:d1:
6a:e0:ac:08:53:7a:71:ed:4a:2d:7c:35:50:ed:c6:d6:19:e9:
07:46:ea:9e:29:08:4b:08:34:03:bc:a3:4c:53:4d:b8:92:b4:
5b:b1:aa:83:b3:3c:b4:ca:ab:d3:38:0e:ca:50:ab:a3:d6:3f:
68:b0:36:1d:a9:32:9e:94:66:88:e0:99:69:cc:4d:8d:01:d4:
c3:ce:af:9f:c2:49:74:bd:52:d3:78:7b:78:84:e2:a6:23:57:
bd:06:04:eb:e1:e8:ff:9f:12:67:37:bf:6e:5c:0d:d6:23:91:
2d:7f:11:a9:c6:43:e5:1c:c9:8b:6d:c8:14:4d:e4:ef:ec:22:
1e:b8:85:bd:e9:74:b9:55:29:7b:88:ba:57:01:0e:4a:e8:6e:
bf:34:bc:c4:ea:da:d0:b5:6b:6b:d3:64:7d:c5:9e:d9:ec:fa:
75:27:75:2a:3a:ad:76:12:15:0d:f2:ba:fc:67:87:91:bd:62:
a3:9a:c4:99:d2:95:d3:31:fc:ae:3d:08:41:94:8f:d7:7c:51:
03:b1:92:18:1f:a7:fa:4e:45:a3:75:c7:97:d5:5f:f6:f3:c8:
70:fd:1f:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfhGNDkUqFePVtcXbKAwdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDZmMDMzNTM3YmJkODYzYmJjYTJiNjIwOTJkOGRlMzYx
MWY2NTEwHhcNMjUwNDIyMjIwMDMzWhcNMjUwNDIzMjIwMDMzWjAzMTEwLwYDVQQD
Eyg1Mjg4MWM0YzRhNGU5ODY1YmJkYzNhOGY0NWQ0Y2E1MTEyZDg5NDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13B8EKKuJPkY+s/I+8ZXVkDA1sMP
A7c5fhcFxxe5e2C3/6lo4gKW63hot/oEWEcKS97I6QPBuAiSL0J/FC3OS64AFr8f
xjC5TysEAkQylGRJ4IkmxP6J/aPwbJ92Ok6LJj4Ex5/zLKnMV9lLmZq4h9dtVvAW
NEf1pxnYVOX/AORGZiG/34twvCEuTxtO06q2W6BKqBTCG4CppJa0+zJ8L9gQ4bT4
CkxNMsk4CzE/7bwhoysadjGYZak/xouh7kKoDHe2PpxCx6Bn05JmZutzsLdDZ6g8
x5yBNeM8K3sFZV/AjQGURP7hccSp7ATl+37EYqUwtoe5+qTEeyIn4cS6mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKIHExKTphlu9w6j0XUylES2JSJMB8GA1UdIwQY
MBaAFAoG8DNTe72GO7yitiCS2N42EfZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80Y2QxNmItMmEyMy00OGE5LTllZWIt
MmE0ODEzYTEzMTIwLzEvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80Y2QxNmItMmEyMy00OGE5LTllZWItMmE0ODEzYTEzMTIw
LzEvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmAXISP0
sLA3A8eUC+JRxwZ9Ac0/LShGTioT5vHCsOJw0sLRauCsCFN6ce1KLXw1UO3G1hnp
B0bqnikISwg0A7yjTFNNuJK0W7Gqg7M8tMqr0zgOylCro9Y/aLA2HakynpRmiOCZ
acxNjQHUw86vn8JJdL1S03h7eITipiNXvQYE6+Ho/58SZze/blwN1iORLX8RqcZD
5RzJi23IFE3k7+wiHriFvel0uVUpe4i6VwEOSuhuvzS8xOra0LVra9NkfcWe2ez6
dSd1KjqtdhIVDfK6/GeHkb1io5rEmdKV0zH8rj0IQZSP13xRA7GSGB+n+k5Fo3XH
l9Vf9vPIcP0fxQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:39:48 2025 by rpki-client