Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: KQpMSI+cTgEf73uKDDYMozjsH6kQcNudzTyp7WVev7Y=
Subject key identifier: 4B:45:75:FD:B9:82:7D:A6:3A:24:C0:67:24:75:C0:34:10:84:65:DE
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 01974AE885B766C5504A2FCE04F1C3D04460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0812
Signing time: Sat 07 Jun 2025 15:00:41 +0000
Manifest this update: Sat 07 Jun 2025 15:00:41 +0000
Manifest next update: Sun 08 Jun 2025 15:00:41 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: N7YUuLRFK/nMtq2HmX7dKTziSnz1ewqveT4cUx4qa2M=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:85:b7:66:c5:50:4a:2f:ce:04:f1:c3:d0:44:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jun 7 15:00:41 2025 GMT
Not After : Jun 8 15:00:41 2025 GMT
Subject: CN=4b4575fdb9827da63a24c0672475c034108465de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:8d:83:16:61:b3:47:76:e8:43:7f:63:8c:
af:3b:db:7b:40:42:0f:48:88:08:3f:60:27:81:88:
32:78:0d:f2:bd:32:24:88:3e:44:49:f9:ea:e1:d0:
44:7d:84:b5:6f:f8:ad:a1:04:ea:b0:01:5a:17:a6:
8d:a2:68:ec:3b:72:d4:47:56:89:85:88:67:bc:57:
2c:33:a3:15:5b:86:f8:ab:20:d7:4c:60:9c:7c:18:
40:1f:10:b3:6c:f2:f4:22:85:79:fb:b6:74:91:74:
b9:27:53:2c:09:79:85:1b:d7:ee:6a:90:7f:53:09:
7f:34:63:dc:3d:69:87:11:63:f0:ed:3d:eb:ae:3c:
e3:ea:84:2f:d0:21:34:9f:a3:bd:d7:30:03:69:aa:
8a:30:82:ba:de:4e:22:5a:3a:dc:eb:1b:0d:9e:23:
0f:2d:e7:1e:31:cf:5d:a0:a3:76:35:54:21:5d:3e:
51:11:25:66:57:ce:ab:7c:d3:dd:0f:a6:1c:7d:d4:
d1:9e:00:66:41:f6:ac:37:09:08:e3:bb:ea:e8:7f:
6b:41:a7:b8:3e:b8:62:6a:a8:c1:7e:cf:f7:8a:91:
c3:94:45:10:94:d3:c2:be:7f:7d:85:e3:ef:08:7e:
1a:fe:2b:d9:17:6e:f3:23:61:88:87:04:c8:91:56:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:45:75:FD:B9:82:7D:A6:3A:24:C0:67:24:75:C0:34:10:84:65:DE
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:34:e3:c4:42:68:2a:50:d8:b4:42:ac:82:1c:60:2b:f3:71:
8c:61:c2:b3:eb:f7:b5:04:cc:20:25:0c:68:fa:c5:16:c0:2c:
93:8d:a6:45:a5:98:9b:83:94:62:a2:ed:94:81:3c:70:9d:34:
3a:13:e2:8b:29:4e:2b:69:3d:22:94:3e:0e:8f:0b:73:a7:19:
53:1c:42:5a:a8:3d:9e:b7:3a:25:e6:3a:c4:50:53:12:4c:c2:
6e:25:50:10:81:1b:c4:af:2e:65:41:42:35:f6:de:cb:dc:2d:
75:ec:19:d2:1c:9c:1b:53:a2:36:9c:93:00:99:84:c4:1a:d0:
b5:47:cd:dd:83:25:40:6e:e3:c3:21:b9:53:e9:01:64:81:be:
1f:3c:54:5e:01:c6:b7:d5:48:4f:19:75:0b:0c:da:e3:0b:1d:
c7:9f:f4:2b:14:0f:65:fe:1d:15:de:2a:eb:77:e3:09:99:7e:
a8:1c:9b:d8:8b:88:89:00:62:3b:45:ae:3b:8b:03:13:7c:2d:
fc:8d:ef:c0:79:6b:43:a1:fe:6d:1e:5a:27:73:82:ca:a0:4f:
b6:3f:c2:74:a3:a9:e2:e3:9d:d3:7f:ee:6e:2e:b3:83:22:8f:
2c:1c:6d:dc:49:83:ae:0d:05:87:23:58:26:b9:ab:dc:ad:ff:
5b:86:a9:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6IW3ZsVQSi/OBPHD0ERgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmYxZTlmMDk1MGU0ZjM5YzljNWZlZTNmODY4YTI0ZWIz
NjFlZjEwHhcNMjUwNjA3MTUwMDQxWhcNMjUwNjA4MTUwMDQxWjAzMTEwLwYDVQQD
Eyg0YjQ1NzVmZGI5ODI3ZGE2M2EyNGMwNjcyNDc1YzAzNDEwODQ2NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmmNgxZhs0d26EN/Y4yvO9t7QEIP
SIgIP2AngYgyeA3yvTIkiD5ESfnq4dBEfYS1b/itoQTqsAFaF6aNomjsO3LUR1aJ
hYhnvFcsM6MVW4b4qyDXTGCcfBhAHxCzbPL0IoV5+7Z0kXS5J1MsCXmFG9fuapB/
Uwl/NGPcPWmHEWPw7T3rrjzj6oQv0CE0n6O91zADaaqKMIK63k4iWjrc6xsNniMP
LeceMc9doKN2NVQhXT5RESVmV86rfNPdD6YcfdTRngBmQfasNwkI47vq6H9rQae4
PrhiaqjBfs/3ipHDlEUQlNPCvn99hePvCH4a/ivZF27zI2GIhwTIkVbnfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtFdf25gn2mOiTAZyR1wDQQhGXeMB8GA1UdIwQY
MBaAFAtvHp8JUOTznJxf7j+GiiTrNh7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAt
MDgxYmNiYWM0ZGFmLzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAtMDgxYmNiYWM0ZGFm
LzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDTjxEJo
KlDYtEKsghxgK/NxjGHCs+v3tQTMICUMaPrFFsAsk42mRaWYm4OUYqLtlIE8cJ00
OhPiiylOK2k9IpQ+Do8Lc6cZUxxCWqg9nrc6JeY6xFBTEkzCbiVQEIEbxK8uZUFC
Nfbey9wtdewZ0hycG1OiNpyTAJmExBrQtUfN3YMlQG7jwyG5U+kBZIG+HzxUXgHG
t9VITxl1Cwza4wsdx5/0KxQPZf4dFd4q63fjCZl+qByb2IuIiQBiO0WuO4sDE3wt
/I3vwHlrQ6H+bR5aJ3OCyqBPtj/CdKOp4uOd03/ubi6zgyKPLBxt3EmDrg0FhyNY
Jrmr3K3/W4apQw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:20 2025 by rpki-client