Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File: CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier: YtH90VOSHqhRcBWeaCJNFneUaBgU/iqt8zmCl23gA3I=
Subject key identifier: 59:E5:BD:5B:4B:F6:B7:60:23:91:A4:CE:E6:9F:6E:CB:70:5E:E2:3A
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 01975EDD1B69C7B998339F233C512F7A27F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number: 1549
Signing time: Wed 11 Jun 2025 12:00:38 +0000
Manifest this update: Wed 11 Jun 2025 12:00:38 +0000
Manifest next update: Thu 12 Jun 2025 12:00:38 +0000
Files and hashes: 1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: 5xVSgvfttCe6Rb5MdoAKWR5xm2e4ZvM25lcPSrgAuqc=)
2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:1b:69:c7:b9:98:33:9f:23:3c:51:2f:7a:27:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: Jun 11 12:00:38 2025 GMT
Not After : Jun 12 12:00:38 2025 GMT
Subject: CN=59e5bd5b4bf6b7602391a4cee69f6ecb705ee23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:ad:b7:6c:79:4b:49:6d:14:99:f4:d5:35:
ba:34:1e:7c:da:4a:55:e7:e7:04:35:21:d8:54:aa:
dd:ba:25:85:28:a9:4c:da:0a:cf:33:1c:54:98:22:
0a:15:80:34:fc:52:35:95:62:65:54:44:9c:a4:62:
be:88:92:6c:7b:1a:4a:41:7c:a8:f0:87:38:47:22:
bc:14:07:43:30:8d:80:71:7a:82:13:78:78:1e:a7:
e0:92:4e:7a:3c:40:76:9f:82:b9:df:a4:6e:9a:ec:
3f:6a:ea:07:0f:26:4b:1c:2b:19:e7:47:2c:4e:79:
3f:ef:c1:bb:21:42:73:cc:ea:6f:c2:f3:20:2f:6f:
cd:ed:75:9e:76:a5:48:a2:28:83:12:07:af:6a:df:
2a:f5:37:e7:9f:38:af:bc:ad:90:a0:78:02:1a:f9:
b4:fc:ed:e4:e0:4a:2f:e1:cc:d3:86:79:83:23:2c:
6c:d1:9a:b9:e4:46:12:6c:15:7b:00:10:44:14:5b:
0d:66:19:ca:a7:fb:d3:5e:e1:7c:33:b1:ba:45:a7:
63:8e:7d:31:e1:e2:7b:92:58:77:64:5f:3e:6a:92:
f6:5c:e3:07:f7:93:7a:ce:1a:c8:11:f1:f8:38:93:
0e:97:89:51:6a:d5:cb:73:9e:64:c8:42:76:52:65:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E5:BD:5B:4B:F6:B7:60:23:91:A4:CE:E6:9F:6E:CB:70:5E:E2:3A
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9a:53:23:15:29:6c:af:e7:ba:c2:35:46:00:30:17:27:48:
11:65:bc:66:a8:b6:40:44:0d:a7:24:c2:11:bf:53:c4:ea:99:
c2:7f:cd:a3:0b:02:f7:78:e8:5a:1c:07:92:ff:e0:82:15:91:
59:41:b6:de:9a:03:3a:3a:52:d0:79:57:b3:44:76:28:b1:c7:
53:07:a6:1a:1a:e3:96:6f:71:5d:85:01:51:b2:61:bf:80:e0:
ec:cb:50:b7:19:56:54:3a:c8:f8:0d:6b:bd:b8:eb:13:65:73:
7b:ce:65:8e:f0:f0:8f:58:d1:0e:4e:86:b9:80:01:25:cd:4c:
c5:a3:59:90:21:e5:ab:0a:5a:e3:fa:58:fa:58:85:8b:a6:03:
d1:62:14:59:34:31:e3:99:ea:f6:5e:49:19:3f:4e:62:7a:ef:
8a:70:e5:29:f5:bc:45:a0:c8:ce:cf:62:5c:3f:ae:e2:de:de:
da:72:9c:99:e1:46:2a:ff:28:1f:b1:48:f9:13:a1:80:ba:5f:
0a:0a:18:1f:a4:93:c2:2f:88:da:c9:4e:08:29:8c:4b:53:c8:
b3:f6:ed:85:a2:70:4d:3a:46:64:fe:f0:65:47:d1:5b:52:3f:
28:db:d1:fb:f7:70:c1:fb:d9:20:ce:a3:ab:01:eb:4a:d5:b2:
c5:8b:0e:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZde3Rtpx7mYM58jPFEveif2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjZhZjQyNWFiM2QzOWQ3MzM3YzJiMTI1ZDM5NTkzYWQ5
MWMxZDEwHhcNMjUwNjExMTIwMDM4WhcNMjUwNjEyMTIwMDM4WjAzMTEwLwYDVQQD
Eyg1OWU1YmQ1YjRiZjZiNzYwMjM5MWE0Y2VlNjlmNmVjYjcwNWVlMjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurutt2x5S0ltFJn01TW6NB582kpV
5+cENSHYVKrduiWFKKlM2grPMxxUmCIKFYA0/FI1lWJlVEScpGK+iJJsexpKQXyo
8Ic4RyK8FAdDMI2AcXqCE3h4Hqfgkk56PEB2n4K536Rumuw/auoHDyZLHCsZ50cs
Tnk/78G7IUJzzOpvwvMgL2/N7XWedqVIoiiDEgevat8q9TfnnzivvK2QoHgCGvm0
/O3k4Eov4czThnmDIyxs0Zq55EYSbBV7ABBEFFsNZhnKp/vTXuF8M7G6Radjjn0x
4eJ7klh3ZF8+apL2XOMH95N6zhrIEfH4OJMOl4lRatXLc55kyEJ2UmX3fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnlvVtL9rdgI5GkzuafbstwXuI6MB8GA1UdIwQY
MBaAFAhmr0Jas9OdczfCsSXTlZOtkcHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMt
YjdlYjEyOTk4YjM1LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMtYjdlYjEyOTk4YjM1
LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJpTIxUp
bK/nusI1RgAwFydIEWW8Zqi2QEQNpyTCEb9TxOqZwn/NowsC93joWhwHkv/gghWR
WUG23poDOjpS0HlXs0R2KLHHUwemGhrjlm9xXYUBUbJhv4Dg7MtQtxlWVDrI+A1r
vbjrE2Vze85ljvDwj1jRDk6GuYABJc1MxaNZkCHlqwpa4/pY+liFi6YD0WIUWTQx
45nq9l5JGT9OYnrvinDlKfW8RaDIzs9iXD+u4t7e2nKcmeFGKv8oH7FI+ROhgLpf
CgoYH6STwi+I2slOCCmMS1PIs/bthaJwTTpGZP7wZUfRW1I/KNvR+/dwwfvZIM6j
qwHrStWyxYsOqw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:37:37 2025 by rpki-client