Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: 9zWcbij6K34qPGot3SHARZMDycWT1xscoIEgZ//o3q0=
Subject key identifier: F1:E6:8F:85:9A:C5:42:96:49:69:1A:54:F2:CB:4A:AF:50:5B:A2:75
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 01982B242C801B092D40509457C1B418DA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 15F5
Signing time: Mon 21 Jul 2025 04:00:47 +0000
Manifest this update: Mon 21 Jul 2025 04:00:47 +0000
Manifest next update: Tue 22 Jul 2025 04:00:47 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: sQqUAqnnLh4QPa19IDSq1Upgs6SR7BQdy28mactiuuI=)
2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:24:2c:80:1b:09:2d:40:50:94:57:c1:b4:18:da:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Jul 21 04:00:47 2025 GMT
Not After : Jul 22 04:00:47 2025 GMT
Subject: CN=f1e68f859ac5429649691a54f2cb4aaf505ba275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:be:0e:6b:21:9e:7b:7b:09:c2:1c:3e:e2:
2f:0c:2e:92:34:af:2f:53:45:40:24:93:a6:94:a9:
3d:4e:9b:93:c8:d9:a9:67:80:03:80:a0:4f:9d:56:
18:3c:27:87:8d:d4:a6:6b:22:c4:30:5d:f9:ca:26:
f0:a6:86:53:a4:35:ce:67:18:1e:36:02:da:10:70:
32:4c:a2:ea:68:30:d4:49:e8:4b:51:f7:e2:63:cc:
5a:3f:d2:53:e9:ad:ed:d5:6f:28:fa:38:95:5f:3d:
5c:34:53:9d:59:fe:18:52:ca:47:3d:d5:53:c0:ab:
0f:fb:29:02:e4:c4:05:05:c2:9b:ef:e6:09:f9:6b:
75:2c:61:79:e7:e8:5c:0b:e3:e6:fb:56:9a:04:74:
5a:8e:00:29:a9:08:a0:e0:3b:9a:4d:76:60:cb:3c:
ab:0f:b0:fd:14:33:ea:a0:c9:cb:2c:c3:f4:2b:40:
c9:6c:e5:f4:43:24:24:cc:8e:3a:4d:13:40:12:91:
9f:ce:85:aa:12:6f:cd:02:76:70:bd:ce:8f:19:fb:
be:de:b5:b3:f2:a4:5f:12:cc:08:ca:de:4e:05:72:
88:92:b7:14:8b:0b:e5:73:c3:83:c4:90:74:c3:6f:
ce:dc:52:1d:61:4c:aa:eb:c1:40:73:88:71:b6:a6:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E6:8F:85:9A:C5:42:96:49:69:1A:54:F2:CB:4A:AF:50:5B:A2:75
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:66:a0:68:34:ee:82:e5:f0:1a:6a:61:34:41:bb:57:60:0f:
00:8b:9b:7f:0f:48:20:f3:72:45:26:89:cd:6f:b1:21:35:c9:
e4:eb:23:2e:da:c9:c3:ba:cf:97:60:94:d1:6f:d1:51:12:5e:
26:f4:78:23:f3:54:67:a0:3f:31:18:47:71:94:8d:7e:9e:f9:
58:09:22:c3:d4:12:17:88:c4:18:60:b2:a6:e5:e4:df:e7:68:
36:1a:da:ef:37:bb:1c:4a:56:1c:a6:86:08:7b:d4:83:71:05:
48:6a:12:60:52:10:36:e2:a8:ef:c0:6b:c3:23:c6:13:7e:48:
88:a7:3e:f9:9d:2b:18:21:36:bc:e6:67:16:74:b0:a5:d7:e9:
d5:b2:e4:a2:46:51:d5:60:c3:7e:56:96:5e:e5:05:48:ad:fb:
3b:70:0d:77:8e:6b:e6:b2:3c:a4:19:e6:68:b1:3c:92:1a:34:
15:ac:5b:b2:18:6f:04:55:41:18:9b:7b:fe:5e:2f:fa:a5:6e:
b2:f9:13:84:ae:a9:09:a8:66:16:72:e2:ad:54:ad:20:fe:7f:
a9:a2:73:65:67:76:07:3b:ed:68:69:2c:56:90:eb:25:a2:a1:
e0:a9:5b:c2:a5:6d:4e:f1:d1:99:df:f0:b0:b7:f8:17:9e:f2:
0b:1f:5d:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgrJCyAGwktQFCUV8G0GNp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YmEwMmY2OTk1Y2VjZTZhOWZkMzQ3NWJkMGIxY2YwZGQ4
NTgyNmUwHhcNMjUwNzIxMDQwMDQ3WhcNMjUwNzIyMDQwMDQ3WjAzMTEwLwYDVQQD
EyhmMWU2OGY4NTlhYzU0Mjk2NDk2OTFhNTRmMmNiNGFhZjUwNWJhMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDe+Dmshnnt7CcIcPuIvDC6SNK8v
U0VAJJOmlKk9TpuTyNmpZ4ADgKBPnVYYPCeHjdSmayLEMF35yibwpoZTpDXOZxge
NgLaEHAyTKLqaDDUSehLUffiY8xaP9JT6a3t1W8o+jiVXz1cNFOdWf4YUspHPdVT
wKsP+ykC5MQFBcKb7+YJ+Wt1LGF55+hcC+Pm+1aaBHRajgApqQig4DuaTXZgyzyr
D7D9FDPqoMnLLMP0K0DJbOX0QyQkzI46TRNAEpGfzoWqEm/NAnZwvc6PGfu+3rWz
8qRfEswIyt5OBXKIkrcUiwvlc8ODxJB0w2/O3FIdYUyq68FAc4hxtqYv2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHmj4WaxUKWSWkaVPLLSq9QW6J1MB8GA1UdIwQY
MBaAFAi6AvaZXOzmqf00db0LHPDdhYJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2Ut
OTY1ZmFjOTc3NzIxLzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2UtOTY1ZmFjOTc3NzIx
LzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGagaDTu
guXwGmphNEG7V2APAIubfw9IIPNyRSaJzW+xITXJ5OsjLtrJw7rPl2CU0W/RURJe
JvR4I/NUZ6A/MRhHcZSNfp75WAkiw9QSF4jEGGCypuXk3+doNhra7ze7HEpWHKaG
CHvUg3EFSGoSYFIQNuKo78BrwyPGE35IiKc++Z0rGCE2vOZnFnSwpdfp1bLkokZR
1WDDflaWXuUFSK37O3ANd45r5rI8pBnmaLE8kho0FaxbshhvBFVBGJt7/l4v+qVu
svkThK6pCahmFnLirVStIP5/qaJzZWd2BzvtaGksVpDrJaKh4KlbwqVtTvHRmd/w
sLf4F57yCx9dhA==
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:25:10 2025 by rpki-client