Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: 6Qso0dwPxAWWXjHi+LB5pNEh2b86jeMyq838n26AnKg=
Subject key identifier: D0:05:0F:AB:A5:AD:08:2F:BF:C3:22:95:65:6B:D2:01:05:75:EB:94
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 0197488C1D13C593B46B16E9B0071BAF6A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0990
Signing time: Sat 07 Jun 2025 04:00:31 +0000
Manifest this update: Sat 07 Jun 2025 04:00:31 +0000
Manifest next update: Sun 08 Jun 2025 04:00:31 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: hlFCkfz6v5L2hhvP4NzJm1Vdwgx9giMOqVI9dvrkXn4=)
2: RymBY7lnNBMXp_yUGm6cXmk9pIY.roa (hash: NXhw0vi4/QtrtywYV0kwabkAShMb2W3sLGUUgAEfvq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:1d:13:c5:93:b4:6b:16:e9:b0:07:1b:af:6a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Jun 7 04:00:31 2025 GMT
Not After : Jun 8 04:00:31 2025 GMT
Subject: CN=d0050faba5ad082fbfc32295656bd2010575eb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:1f:5b:c6:d4:7e:af:c2:c6:9d:bf:81:c0:
a0:f1:dc:64:c5:a8:bd:7b:08:8f:46:78:63:5b:de:
7d:49:13:5f:10:2f:c0:b7:60:c2:72:5f:60:54:39:
8d:d0:a5:90:9e:6d:8f:e7:44:8e:f3:a5:8f:82:f9:
88:e5:be:c0:96:f6:d1:31:47:69:80:df:5a:2a:bb:
bb:09:b7:5f:97:00:46:a1:ec:6d:1d:cd:cf:00:33:
59:d2:41:3d:3c:84:49:92:41:b9:2e:88:dc:68:54:
d7:3a:d6:78:19:be:df:04:73:06:db:08:6f:a1:6d:
d4:f6:08:d7:3f:bf:49:3a:8e:a1:30:69:28:d4:d9:
4c:66:ba:ea:ce:69:22:51:86:61:ed:be:52:11:a9:
ea:33:85:62:ec:af:84:d8:50:71:e2:c0:7f:8e:f1:
22:b6:22:db:1e:ea:30:e1:2c:de:88:ae:3f:90:e8:
c0:8b:81:18:06:d8:16:74:aa:5f:34:e4:c7:10:ef:
11:18:e6:c6:f6:97:59:65:69:e9:7e:b6:42:51:8e:
43:c1:da:af:9f:c0:a3:c8:78:54:3f:3b:88:af:a1:
3a:3a:1f:0e:31:1f:29:b9:b9:07:a0:51:ed:3e:81:
a1:27:38:b6:37:7d:e5:5b:2b:c3:ba:1b:0d:b6:82:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:05:0F:AB:A5:AD:08:2F:BF:C3:22:95:65:6B:D2:01:05:75:EB:94
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:de:bd:eb:85:8d:ba:5e:7d:49:45:1c:4b:67:66:8a:e9:75:
1b:ef:60:86:82:4a:d7:7f:e8:a9:28:2d:f3:dc:b6:4b:cb:ff:
c5:14:da:64:2b:05:b5:a9:28:f0:36:69:17:c4:53:5f:f7:d2:
c7:20:a8:0c:6c:d6:9e:28:89:97:62:4f:bb:cd:af:a3:d3:ee:
8c:3c:53:9b:05:43:85:3b:18:d3:9f:16:86:1c:5d:90:3a:eb:
e3:44:4f:39:83:94:94:08:e4:c4:7a:86:4d:bf:0a:91:e9:e9:
aa:04:6c:44:6c:16:bb:76:ff:d4:45:9e:75:c5:cb:2f:16:94:
31:8d:06:3c:56:98:63:f5:68:a0:ed:65:b2:3b:fe:fe:3c:b4:
30:fa:1d:81:b9:8e:64:a6:49:e4:3c:76:f6:ea:88:b3:ee:d2:
33:fa:15:cd:1e:95:e3:3b:d5:48:27:8f:e4:cf:f0:b7:17:aa:
ba:9b:ea:50:9c:d3:da:29:89:ff:5d:b7:88:fd:3b:e8:6a:7c:
01:31:a9:4d:19:cd:0d:82:72:67:1d:10:c2:71:ea:b1:24:26:
e2:e1:14:db:50:29:2f:dd:44:98:45:17:8b:aa:b4:66:27:a6:
82:cf:59:3a:08:63:54:f3:db:21:06:8b:bd:3c:ee:c2:2d:19:
7b:a2:fc:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjB0TxZO0axbpsAcbr2oXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZTZkNTI4NzRhMGM4ZWRiZWE5YzgxYzQyMDY3NmI2MTRl
YTI5YzgwHhcNMjUwNjA3MDQwMDMxWhcNMjUwNjA4MDQwMDMxWjAzMTEwLwYDVQQD
EyhkMDA1MGZhYmE1YWQwODJmYmZjMzIyOTU2NTZiZDIwMTA1NzVlYjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlcfW8bUfq/Cxp2/gcCg8dxkxai9
ewiPRnhjW959SRNfEC/At2DCcl9gVDmN0KWQnm2P50SO86WPgvmI5b7AlvbRMUdp
gN9aKru7CbdflwBGoextHc3PADNZ0kE9PIRJkkG5LojcaFTXOtZ4Gb7fBHMG2whv
oW3U9gjXP79JOo6hMGko1NlMZrrqzmkiUYZh7b5SEanqM4Vi7K+E2FBx4sB/jvEi
tiLbHuow4SzeiK4/kOjAi4EYBtgWdKpfNOTHEO8RGObG9pdZZWnpfrZCUY5Dwdqv
n8CjyHhUPzuIr6E6Oh8OMR8pubkHoFHtPoGhJzi2N33lWyvDuhsNtoL9bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAFD6ulrQgvv8MilWVr0gEFdeuUMB8GA1UdIwQY
MBaAFAvm1Sh0oMjtvqnIHEIGdrYU6inIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQt
MDkzMDNlNDE4ZTdkLzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQtMDkzMDNlNDE4ZTdk
LzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMN6964WN
ul59SUUcS2dmiul1G+9ghoJK13/oqSgt89y2S8v/xRTaZCsFtako8DZpF8RTX/fS
xyCoDGzWniiJl2JPu82vo9PujDxTmwVDhTsY058WhhxdkDrr40RPOYOUlAjkxHqG
Tb8KkenpqgRsRGwWu3b/1EWedcXLLxaUMY0GPFaYY/VooO1lsjv+/jy0MPodgbmO
ZKZJ5Dx29uqIs+7SM/oVzR6V4zvVSCeP5M/wtxequpvqUJzT2imJ/123iP076Gp8
ATGpTRnNDYJyZx0QwnHqsSQm4uEU21ApL91EmEUXi6q0Ziemgs9ZOghjVPPbIQaL
vTzuwi0Ze6L8/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:16 2025 by rpki-client