Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: rlA3Frh+SmFUPPAGjaPzYzN3UScVKcqcGbnWvzkkry4=
Subject key identifier: 60:0B:74:A9:B5:33:24:75:76:07:87:B7:BE:E2:E7:6F:B5:B3:3D:3E
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 01974D44CE0F9819D37916BC680B5420572A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 032D
Signing time: Sun 08 Jun 2025 02:00:44 +0000
Manifest this update: Sun 08 Jun 2025 02:00:44 +0000
Manifest next update: Mon 09 Jun 2025 02:00:44 +0000
Files and hashes: 1: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: C0jk/pGM5vgRJJnQsK4HuJPDhscpMOHSO13p93ElakQ=)
2: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (hash: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:ce:0f:98:19:d3:79:16:bc:68:0b:54:20:57:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Jun 8 02:00:44 2025 GMT
Not After : Jun 9 02:00:44 2025 GMT
Subject: CN=600b74a9b5332475760787b7bee2e76fb5b33d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:05:88:1e:1a:99:a4:44:5b:43:1a:e7:ff:
d8:79:d0:fe:1e:bc:29:7d:81:da:24:0e:d4:dc:59:
ea:73:15:f7:fb:5f:0a:e5:2e:31:37:38:c8:2e:7f:
a6:be:4b:97:10:70:6e:10:1c:f6:52:e0:79:17:49:
42:9d:90:96:94:8e:4a:de:d9:1c:ea:76:89:f9:e9:
28:0f:d5:e3:72:84:2e:d5:3f:a0:d2:75:90:f1:ea:
d2:ac:4f:9b:0d:cb:5e:bb:2c:8b:9c:71:84:af:c8:
f9:29:53:85:4d:0d:4f:7d:de:17:23:50:11:b8:30:
20:00:51:b6:eb:fe:67:7f:8f:20:02:71:94:11:53:
27:ad:cd:95:b9:b3:42:db:7d:85:ab:88:5b:c3:63:
16:e0:dd:93:f9:a2:1e:93:86:cd:92:96:7b:e4:d4:
e8:10:2c:46:cb:66:a5:d9:39:2d:49:26:6a:ad:20:
10:53:df:69:96:d1:68:90:38:97:ca:8b:5c:b3:69:
37:38:1d:ad:09:53:7a:7c:32:1f:45:da:4d:b2:69:
ca:ab:50:24:c8:2e:90:f3:54:3a:ad:51:05:6b:69:
de:2f:39:5a:0d:43:57:40:a6:de:a2:a6:99:90:c7:
b1:51:43:b7:3f:36:a4:18:99:18:37:e9:69:d8:47:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:74:A9:B5:33:24:75:76:07:87:B7:BE:E2:E7:6F:B5:B3:3D:3E
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6b:2d:9f:46:51:9d:22:26:ef:df:08:d3:d7:1b:06:03:2c:
c3:ac:b2:10:18:0d:53:0b:1b:8b:e0:98:9d:f5:d4:35:f2:b5:
a3:31:61:ac:dd:39:95:f1:52:5b:b2:75:23:d8:bf:8d:8a:8e:
31:2c:7e:2e:6b:42:cc:b6:f2:7b:b5:2d:b4:68:cd:c2:c4:eb:
49:2a:09:38:e9:35:53:6a:08:16:cd:35:6b:65:73:ad:8e:6b:
a7:4c:f5:54:fd:b8:e7:04:c7:15:d2:2e:60:61:0c:ce:57:81:
88:bb:52:61:82:91:5f:5f:56:01:35:d3:e8:b0:63:90:3c:9e:
32:1a:87:12:c7:69:67:bd:c3:5b:09:06:a2:24:8a:42:f0:30:
a3:dd:3a:d8:3d:cc:d3:7d:1b:d4:03:c2:c9:d3:2c:4d:af:b0:
9b:7c:39:04:75:45:dc:73:2d:98:e9:be:0f:13:81:5d:73:c0:
f8:c3:2b:ac:6b:b8:dc:92:4a:25:ab:7f:aa:04:f7:0b:e0:b2:
80:96:c0:3f:89:7d:ee:81:c2:82:c8:a4:77:c5:74:bc:eb:ca:
86:93:d1:5d:5b:0a:f0:ae:35:27:71:fb:eb:f7:6a:c7:c4:95:
e4:25:8e:f3:25:67:e8:9f:bb:f5:17:b6:c2:8e:ff:d6:69:e2:
56:92:d8:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRM4PmBnTeRa8aAtUIFcqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NWFmODFiOTllYmY0ODJmM2M2YjUzNTFlMjllMjhhMmUy
MGIzOTgwHhcNMjUwNjA4MDIwMDQ0WhcNMjUwNjA5MDIwMDQ0WjAzMTEwLwYDVQQD
Eyg2MDBiNzRhOWI1MzMyNDc1NzYwNzg3YjdiZWUyZTc2ZmI1YjMzZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6sFiB4amaREW0Ma5//YedD+Hrwp
fYHaJA7U3FnqcxX3+18K5S4xNzjILn+mvkuXEHBuEBz2UuB5F0lCnZCWlI5K3tkc
6naJ+ekoD9XjcoQu1T+g0nWQ8erSrE+bDcteuyyLnHGEr8j5KVOFTQ1Pfd4XI1AR
uDAgAFG26/5nf48gAnGUEVMnrc2VubNC232Fq4hbw2MW4N2T+aIek4bNkpZ75NTo
ECxGy2al2TktSSZqrSAQU99pltFokDiXyotcs2k3OB2tCVN6fDIfRdpNsmnKq1Ak
yC6Q81Q6rVEFa2neLzlaDUNXQKbeoqaZkMexUUO3PzakGJkYN+lp2EdM6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGALdKm1MyR1dgeHt77i52+1sz0+MB8GA1UdIwQY
MBaAFAha+BuZ6/SC88a1NR4p4oouILOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQt
YzI4ZDE0YzdiNzMxLzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQtYzI4ZDE0YzdiNzMx
LzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmstn0ZR
nSIm798I09cbBgMsw6yyEBgNUwsbi+CYnfXUNfK1ozFhrN05lfFSW7J1I9i/jYqO
MSx+LmtCzLbye7UttGjNwsTrSSoJOOk1U2oIFs01a2VzrY5rp0z1VP245wTHFdIu
YGEMzleBiLtSYYKRX19WATXT6LBjkDyeMhqHEsdpZ73DWwkGoiSKQvAwo9062D3M
030b1APCydMsTa+wm3w5BHVF3HMtmOm+DxOBXXPA+MMrrGu43JJKJat/qgT3C+Cy
gJbAP4l97oHCgsikd8V0vOvKhpPRXVsK8K41J3H76/dqx8SV5CWO8yVn6J+79Re2
wo7/1mniVpLYXw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:26:32 2025 by rpki-client