Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: 6JXi5ufQzb6UFu6NCmXmofYRU8JaOD8VtX/2Xb0KFZo=
Subject key identifier: 5A:16:88:96:90:CA:77:AE:B6:1D:A2:9F:44:EC:F9:66:C6:A6:2D:C2
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 01974A4364C7DEC90D53AC1554E2124B806D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 0F36
Signing time: Sat 07 Jun 2025 12:00:19 +0000
Manifest this update: Sat 07 Jun 2025 12:00:19 +0000
Manifest next update: Sun 08 Jun 2025 12:00:19 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: dbwDF6vjvLGgv8CCAMYkAIEUcjEh7n5VOnSfDZcrwAo=)
2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:64:c7:de:c9:0d:53:ac:15:54:e2:12:4b:80:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Jun 7 12:00:19 2025 GMT
Not After : Jun 8 12:00:19 2025 GMT
Subject: CN=5a16889690ca77aeb61da29f44ecf966c6a62dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:39:6f:f7:1a:71:64:a7:64:a8:71:f4:41:
a5:be:90:a2:da:18:88:2f:aa:84:80:a1:80:ad:a0:
78:c9:2c:eb:27:b3:f6:b3:45:82:29:d0:bf:07:0b:
0b:69:0f:7b:fc:80:ae:99:ea:43:04:41:7c:c2:bd:
46:50:37:be:e7:d7:2e:cc:a3:7b:a5:20:49:70:05:
47:ed:0e:67:72:89:7c:67:88:c9:7c:99:b6:c7:2b:
bd:fa:06:2b:75:26:3f:32:16:cf:c2:73:f9:58:58:
7c:f8:e9:12:99:94:2b:be:d9:b5:da:79:7c:c5:54:
fc:5d:5b:08:ee:6f:f3:3f:03:70:fa:43:0a:64:c4:
6c:97:a5:09:42:b4:28:9c:0a:f9:59:61:54:44:04:
74:5e:9c:53:54:72:7f:38:5e:ac:03:46:cf:50:f0:
89:61:19:ab:33:24:83:07:54:f6:89:69:51:a9:6a:
d4:20:1a:9b:b9:ad:71:2b:be:bc:7b:46:21:ec:86:
57:60:c9:35:1f:2f:79:08:be:df:cc:89:b4:75:0d:
97:59:57:9e:44:0f:23:e6:39:5d:d4:53:ec:f9:b1:
d1:fd:4f:21:7d:0d:fa:63:9a:8c:1d:01:0c:18:70:
d8:5f:bc:71:55:ad:be:d0:76:58:19:dc:2c:22:ec:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:88:96:90:CA:77:AE:B6:1D:A2:9F:44:EC:F9:66:C6:A6:2D:C2
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:15:e9:1c:be:f0:6f:78:ef:dd:7b:16:ef:a8:f6:04:38:fa:
6f:e2:d1:4b:33:48:8e:a7:d2:2c:1f:a0:bc:5e:74:04:09:ab:
5f:d3:e8:6f:f2:4f:70:d2:1d:7c:c7:56:62:0d:9a:8f:d1:9d:
2e:6d:4f:fb:9f:31:93:d8:df:19:1e:b3:55:50:62:73:7b:1a:
50:f6:1c:f5:fb:e1:5b:df:e0:d4:82:7d:fc:47:d4:7f:b3:7f:
10:71:76:0c:0a:06:40:26:ef:74:3a:28:93:1b:16:99:39:8b:
fd:ad:41:df:65:b7:6c:8e:d9:7c:26:97:95:77:f2:c0:63:1a:
54:73:c1:b5:56:f7:5c:95:c9:1e:ff:79:0e:1e:de:74:69:c1:
15:b8:e7:12:61:ac:6c:b9:ca:f2:4b:18:8a:08:a4:30:42:18:
02:9d:b5:6b:32:f4:12:b4:e7:96:f5:64:05:df:f0:fa:ae:a8:
29:7d:e2:72:30:05:6b:1d:e5:f8:0a:90:4d:ed:a7:22:be:fe:
1a:4f:b1:28:d9:e4:3f:f1:4e:01:82:00:0c:1a:19:60:11:39:
ae:51:a0:aa:35:82:bb:1f:7d:d2:3a:67:02:7c:a2:b5:0d:ca:
a8:ba:27:54:45:ec:bc:48:be:04:00:5c:19:10:be:e2:49:d3:
f8:21:8f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ2TH3skNU6wVVOISS4BtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjY5NTQzY2E0NzE1OGI3ZTc3NzU4N2FkZWZmZDdlN2M2
OGIwNjEwHhcNMjUwNjA3MTIwMDE5WhcNMjUwNjA4MTIwMDE5WjAzMTEwLwYDVQQD
Eyg1YTE2ODg5NjkwY2E3N2FlYjYxZGEyOWY0NGVjZjk2NmM2YTYyZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL85b/cacWSnZKhx9EGlvpCi2hiI
L6qEgKGAraB4ySzrJ7P2s0WCKdC/BwsLaQ97/ICumepDBEF8wr1GUDe+59cuzKN7
pSBJcAVH7Q5ncol8Z4jJfJm2xyu9+gYrdSY/MhbPwnP5WFh8+OkSmZQrvtm12nl8
xVT8XVsI7m/zPwNw+kMKZMRsl6UJQrQonAr5WWFURAR0XpxTVHJ/OF6sA0bPUPCJ
YRmrMySDB1T2iWlRqWrUIBqbua1xK768e0Yh7IZXYMk1Hy95CL7fzIm0dQ2XWVee
RA8j5jld1FPs+bHR/U8hfQ36Y5qMHQEMGHDYX7xxVa2+0HZYGdwsIuy5OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoWiJaQyneuth2in0Ts+WbGpi3CMB8GA1UdIwQY
MBaAFAgmlUPKRxWLfnd1h63v/X58aLBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgt
NjBmZmRlMGNkN2M3LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgtNjBmZmRlMGNkN2M3
LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhXpHL7w
b3jv3XsW76j2BDj6b+LRSzNIjqfSLB+gvF50BAmrX9Pob/JPcNIdfMdWYg2aj9Gd
Lm1P+58xk9jfGR6zVVBic3saUPYc9fvhW9/g1IJ9/EfUf7N/EHF2DAoGQCbvdDoo
kxsWmTmL/a1B32W3bI7ZfCaXlXfywGMaVHPBtVb3XJXJHv95Dh7edGnBFbjnEmGs
bLnK8ksYigikMEIYAp21azL0ErTnlvVkBd/w+q6oKX3icjAFax3l+AqQTe2nIr7+
Gk+xKNnkP/FOAYIADBoZYBE5rlGgqjWCux990jpnAnyitQ3KqLonVEXsvEi+BABc
GRC+4knT+CGPKg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:48:26 2025 by rpki-client