Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: DnMkK3kEDHyBpi5E0G75ZZndtKw/uU7NQQZPjjqfCAQ=
Subject key identifier: D9:33:38:89:E9:29:33:C5:86:61:10:6C:B1:B4:E2:A1:52:20:51:87
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 019745F95DA21F0CAF4F32944FE3FF34C694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 01BE
Signing time: Fri 06 Jun 2025 16:00:59 +0000
Manifest this update: Fri 06 Jun 2025 16:00:59 +0000
Manifest next update: Sat 07 Jun 2025 16:00:59 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: WLw7ZdoHHofcv/v/YexDnsqvYv/sm30RAcjP3Cm4JGY=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:5d:a2:1f:0c:af:4f:32:94:4f:e3:ff:34:c6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Jun 6 16:00:59 2025 GMT
Not After : Jun 7 16:00:59 2025 GMT
Subject: CN=d9333889e92933c58661106cb1b4e2a152205187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:86:30:6b:50:64:28:e4:dc:aa:a5:c6:b9:
7b:33:2f:c2:4c:4c:28:77:cb:57:25:5a:c2:f4:69:
3c:6e:2e:4b:9b:13:04:08:21:89:8f:49:21:4f:66:
31:91:df:ae:e2:46:84:53:7c:4e:22:da:d5:82:83:
40:80:ad:86:4c:31:f3:a1:23:6b:bc:35:69:71:75:
5e:ca:7e:61:3c:f1:94:82:e3:17:7e:5e:33:d4:27:
29:19:3e:ef:9d:df:57:5b:b0:84:86:27:f6:7f:89:
08:24:05:57:aa:b6:de:dd:b5:25:60:97:43:f8:78:
b3:18:d6:64:45:e0:d4:c1:02:df:d9:6f:84:e8:bf:
88:ac:fd:18:76:67:05:5b:70:2e:4d:b7:e3:4c:31:
e7:8f:12:1c:48:60:a1:88:3b:ef:5f:5a:f7:cd:43:
de:c3:a9:ac:69:e0:c0:fe:58:7f:32:a9:1b:7c:08:
de:5c:ec:61:fc:5b:8a:21:22:2b:0d:3d:83:9e:61:
5d:3b:4a:e1:5f:be:44:3c:bb:11:2d:f9:c8:6b:95:
7a:ee:66:66:56:3e:c9:eb:d1:93:93:1d:2c:a8:f7:
5d:11:0b:e0:58:87:06:55:79:30:d9:a8:67:0a:15:
ba:b5:d2:5c:ed:6e:38:48:f9:74:c8:bd:2b:60:0c:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:33:38:89:E9:29:33:C5:86:61:10:6C:B1:B4:E2:A1:52:20:51:87
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c0:8b:7c:f6:00:1f:a3:e1:81:bf:10:88:6a:86:83:55:d6:
06:fb:74:93:93:15:f6:47:8f:7c:08:9b:b2:ec:f3:76:2b:d2:
ff:1d:d1:6b:cf:82:5e:91:8e:a1:cb:b3:95:82:39:74:5e:7c:
b3:fc:50:99:81:f1:02:f1:12:02:d4:6f:09:f0:8b:81:3d:74:
7e:f8:55:ee:c7:86:16:23:40:49:4a:af:6d:b6:88:4d:43:0e:
04:54:2b:45:10:4c:df:f2:60:df:66:a4:84:31:9d:32:ea:9e:
ac:bd:49:62:09:ad:1f:29:a3:ac:a3:de:16:bf:d2:b1:99:e7:
45:bf:5e:1a:7f:84:80:b5:ca:fe:f1:46:27:55:59:de:70:19:
f3:13:05:68:ec:f4:5e:e0:b1:16:80:ac:b6:f6:d5:52:10:a5:
f2:7d:41:ea:19:a2:46:4a:85:23:0e:b6:b4:63:da:4c:89:9b:
b7:a9:27:a3:1c:36:26:e0:0d:c4:9a:c8:1f:24:71:ec:39:c9:
a8:29:91:80:91:e3:03:54:59:4f:ee:a8:fd:8a:88:96:3d:ce:
27:da:08:b7:b2:3c:6f:06:bd:49:ff:e6:8d:72:6a:32:a1:0b:
48:d7:70:a1:62:b0:78:7f:cf:10:03:aa:92:70:cb:14:02:86:
da:84:3c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+V2iHwyvTzKUT+P/NMaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDcwMjkzMjgwMmMyNzQzZDMzNWY2N2Q0N2E0MjM4YzMz
MjQ1MzMwHhcNMjUwNjA2MTYwMDU5WhcNMjUwNjA3MTYwMDU5WjAzMTEwLwYDVQQD
EyhkOTMzMzg4OWU5MjkzM2M1ODY2MTEwNmNiMWI0ZTJhMTUyMjA1MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleSGMGtQZCjk3Kqlxrl7My/CTEwo
d8tXJVrC9Gk8bi5LmxMECCGJj0khT2Yxkd+u4kaEU3xOItrVgoNAgK2GTDHzoSNr
vDVpcXVeyn5hPPGUguMXfl4z1CcpGT7vnd9XW7CEhif2f4kIJAVXqrbe3bUlYJdD
+HizGNZkReDUwQLf2W+E6L+IrP0YdmcFW3AuTbfjTDHnjxIcSGChiDvvX1r3zUPe
w6msaeDA/lh/MqkbfAjeXOxh/FuKISIrDT2DnmFdO0rhX75EPLsRLfnIa5V67mZm
Vj7J69GTkx0sqPddEQvgWIcGVXkw2ahnChW6tdJc7W44SPl0yL0rYAwU7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkzOInpKTPFhmEQbLG04qFSIFGHMB8GA1UdIwQY
MBaAFAgHApMoAsJ0PTNfZ9R6QjjDMkUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODct
NDgwZmViOTJkNzE4LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODctNDgwZmViOTJkNzE4
LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8CLfPYA
H6Phgb8QiGqGg1XWBvt0k5MV9kePfAibsuzzdivS/x3Ra8+CXpGOocuzlYI5dF58
s/xQmYHxAvESAtRvCfCLgT10fvhV7seGFiNASUqvbbaITUMOBFQrRRBM3/Jg32ak
hDGdMuqerL1JYgmtHymjrKPeFr/SsZnnRb9eGn+EgLXK/vFGJ1VZ3nAZ8xMFaOz0
XuCxFoCstvbVUhCl8n1B6hmiRkqFIw62tGPaTImbt6knoxw2JuANxJrIHyRx7DnJ
qCmRgJHjA1RZT+6o/YqIlj3OJ9oIt7I8bwa9Sf/mjXJqMqELSNdwoWKweH/PEAOq
knDLFAKG2oQ8aw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:31 2025 by rpki-client