Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: wQkH6qKnCCvmU6kRt7sSDzanWRIVX2YSouci7Gw5XnE=
Subject key identifier: DB:6A:F2:23:BF:E4:31:E8:F7:C2:71:5F:D9:C4:A0:B3:D1:C3:B0:8E
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 01974A0D0362A5CAE95A0231167621629DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 0F07
Signing time: Sat 07 Jun 2025 11:00:56 +0000
Manifest this update: Sat 07 Jun 2025 11:00:56 +0000
Manifest next update: Sun 08 Jun 2025 11:00:56 +0000
Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: yLuMre9vrEDQ02PgT0rfUcRd+A/Ub9o+ANhEWSyT0ww=)
2: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:03:62:a5:ca:e9:5a:02:31:16:76:21:62:9d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Jun 7 11:00:56 2025 GMT
Not After : Jun 8 11:00:56 2025 GMT
Subject: CN=db6af223bfe431e8f7c2715fd9c4a0b3d1c3b08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:f9:59:ec:f0:f7:22:c9:6c:6a:91:82:7c:
81:67:85:49:2a:f2:66:b8:0c:10:00:fe:79:f5:b4:
14:9f:94:2a:a8:f6:4f:57:bc:fe:0c:4c:06:ca:41:
8d:bb:c7:21:1e:e8:e5:b7:a7:fe:58:bb:86:ba:9d:
ce:8b:d0:4e:a8:57:b0:f1:55:47:02:b1:30:a8:35:
d4:4c:03:35:53:9c:a1:be:14:f0:b7:dc:a0:e5:ca:
c7:7f:60:16:dc:1a:7c:47:76:4c:e5:2a:55:1f:b8:
09:1b:8b:c8:45:10:fa:c4:32:fc:e7:73:1c:1d:1c:
6a:bd:34:ad:4c:7a:dc:e5:e7:fc:15:ad:1b:14:18:
90:42:3f:1d:de:ff:ac:31:55:76:4c:82:1b:e5:c2:
5e:9c:67:4a:04:08:f7:5d:2c:05:2f:04:38:ad:3f:
a3:35:97:25:78:b2:e1:fa:89:6e:9b:52:ec:12:6f:
c2:3a:16:d1:ec:6f:fa:bd:57:e3:16:c9:b3:fe:5d:
ea:7c:7f:e2:59:4d:c2:9e:34:ab:24:5d:4c:24:f9:
d0:0a:6b:07:5e:ab:e2:98:51:59:d5:0d:18:65:ce:
b5:43:d3:47:06:09:0e:b0:97:11:b0:2a:68:c8:5f:
c0:a6:cf:cb:16:3c:ee:35:02:ec:12:e2:23:8f:af:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:F2:23:BF:E4:31:E8:F7:C2:71:5F:D9:C4:A0:B3:D1:C3:B0:8E
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:67:1e:f1:9a:0d:04:db:f0:dd:89:5b:3f:18:3a:1d:96:37:
cc:a3:e8:e5:99:49:d0:44:c0:2c:17:47:c3:82:49:9e:5c:6d:
90:70:18:41:6d:8d:67:4b:4b:c9:51:c2:25:47:0f:49:fe:cd:
de:c0:dc:03:5c:67:ab:9b:6e:ae:86:0d:43:71:33:d8:91:ef:
88:06:7c:b6:ec:c6:22:d4:00:7c:a0:93:8a:38:31:ee:96:0b:
65:40:97:a4:03:62:c7:fd:e5:36:1c:ad:b2:c9:11:78:4d:5e:
04:85:50:5e:90:39:dd:4a:d2:8e:35:85:08:10:75:c0:6b:de:
30:dc:ff:49:aa:cc:11:3c:ae:b4:95:4e:7f:3d:fe:19:7b:64:
f0:09:33:d8:98:07:af:2a:6f:01:b5:f2:0e:bb:ce:3a:0e:cf:
af:87:2b:1f:51:ac:64:c2:d9:81:bb:35:ea:78:40:8a:b7:c9:
50:2f:68:e7:58:3b:c5:f2:84:ee:f7:20:f8:2e:e3:11:f4:03:
ef:fd:f7:54:71:5e:70:70:87:03:60:36:ba:1d:6e:85:9e:6d:
80:00:4f:a3:28:37:47:42:bc:e3:b4:fb:d2:58:02:8f:8c:e5:
b0:1d:35:e9:a0:cf:71:35:77:a3:8c:6f:5b:6a:2f:10:2d:21:
9f:bc:f6:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDQNipcrpWgIxFnYhYp3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw
ODYyMmIwHhcNMjUwNjA3MTEwMDU2WhcNMjUwNjA4MTEwMDU2WjAzMTEwLwYDVQQD
EyhkYjZhZjIyM2JmZTQzMWU4ZjdjMjcxNWZkOWM0YTBiM2QxYzNiMDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69P5Wezw9yLJbGqRgnyBZ4VJKvJm
uAwQAP559bQUn5QqqPZPV7z+DEwGykGNu8chHujlt6f+WLuGup3Oi9BOqFew8VVH
ArEwqDXUTAM1U5yhvhTwt9yg5crHf2AW3Bp8R3ZM5SpVH7gJG4vIRRD6xDL853Mc
HRxqvTStTHrc5ef8Fa0bFBiQQj8d3v+sMVV2TIIb5cJenGdKBAj3XSwFLwQ4rT+j
NZcleLLh+olum1LsEm/COhbR7G/6vVfjFsmz/l3qfH/iWU3CnjSrJF1MJPnQCmsH
XqvimFFZ1Q0YZc61Q9NHBgkOsJcRsCpoyF/Aps/LFjzuNQLsEuIjj6+LKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtq8iO/5DHo98JxX9nEoLPRw7COMB8GA1UdIwQY
MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt
NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5
LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWce8ZoN
BNvw3YlbPxg6HZY3zKPo5ZlJ0ETALBdHw4JJnlxtkHAYQW2NZ0tLyVHCJUcPSf7N
3sDcA1xnq5turoYNQ3Ez2JHviAZ8tuzGItQAfKCTijgx7pYLZUCXpANix/3lNhyt
sskReE1eBIVQXpA53UrSjjWFCBB1wGveMNz/SarMETyutJVOfz3+GXtk8Akz2JgH
rypvAbXyDrvOOg7Pr4crH1GsZMLZgbs16nhAirfJUC9o51g7xfKE7vcg+C7jEfQD
7/33VHFecHCHA2A2uh1uhZ5tgABPoyg3R0K847T70lgCj4zlsB016aDPcTV3o4xv
W2ovEC0hn7z2GQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:29 2025 by rpki-client