Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
File: C_t1KSifiPtLuHs5577cnZ8n1fo.mft (raw, json)
Hash identifier: gT3cc4EelWWApGnzKr3Sa4GRTDudtwF3TMQDoDAQ6a8=
Subject key identifier: 97:60:CD:87:37:E7:E1:A5:33:CC:9A:23:02:60:5D:CA:50:7D:2A:FE
Authority key identifier: 0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
Certificate issuer: /CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Certificate serial: 019749D5A45C57654ED74EA94A978277D2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
Manifest number: 0B67
Signing time: Sat 07 Jun 2025 10:00:27 +0000
Manifest this update: Sat 07 Jun 2025 10:00:27 +0000
Manifest next update: Sun 08 Jun 2025 10:00:27 +0000
Files and hashes: 1: C_t1KSifiPtLuHs5577cnZ8n1fo.crl (hash: +XkjhuXU5kNDfgZy2zCO0Mxmvep7yPvCsdomBCbEAxE=)
2: whyZk-eGgLM_RCz6JHmHxo6hnC4.roa (hash: JprlHVW3ts3bvDOmnO+99r6acv/rg1V894NDodBDkxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:a4:5c:57:65:4e:d7:4e:a9:4a:97:82:77:d2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Validity
Not Before: Jun 7 10:00:27 2025 GMT
Not After : Jun 8 10:00:27 2025 GMT
Subject: CN=9760cd8737e7e1a533cc9a2302605dca507d2afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:f1:4d:2c:58:9e:d2:41:0a:1f:20:89:2a:
8b:2f:67:d2:0f:ac:0f:b2:8c:4b:2b:f2:04:57:fc:
78:b0:4a:40:66:96:a3:be:8e:d5:a4:b2:5c:6b:7d:
06:9c:29:34:93:ee:6b:92:f7:36:e0:1c:c6:3c:3b:
66:36:05:5e:c6:db:a4:9a:54:c6:4d:c6:49:ad:94:
42:8a:75:52:fd:70:a3:b8:47:d9:db:d5:b0:82:af:
b6:82:74:42:3d:48:00:60:39:6e:b4:f9:03:fc:05:
4d:34:66:dc:69:3d:47:3f:19:00:5c:bf:18:6a:6d:
8f:c1:60:f6:46:84:4c:b7:66:14:99:ee:3c:65:11:
91:15:23:6b:35:b5:62:93:e2:39:b5:18:2c:d7:97:
e4:29:80:3d:04:36:b4:ac:3d:f4:75:8e:65:43:b0:
41:02:7d:ce:b2:82:04:55:9c:c2:4c:dc:d6:5a:c2:
4a:7d:dc:3a:73:a9:d8:c7:3b:6d:36:2c:99:38:1e:
e3:a8:a2:ad:a6:4c:70:79:92:d0:41:66:e7:cd:b7:
42:eb:fb:f9:44:53:39:16:8c:b3:ba:aa:8e:6d:8f:
ea:c6:b1:ab:16:3e:6b:07:fd:55:b9:63:82:b2:44:
ca:be:83:fc:aa:3a:91:0e:50:23:e0:45:48:9c:21:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:60:CD:87:37:E7:E1:A5:33:CC:9A:23:02:60:5D:CA:50:7D:2A:FE
X509v3 Authority Key Identifier:
keyid:0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9c:f6:0b:9c:8c:8a:c0:16:01:d1:9d:b1:51:94:fd:e4:27:
c4:f7:33:f2:33:6a:5d:41:d1:8f:57:24:25:d0:f7:9b:81:66:
02:70:c8:8c:0a:6b:29:7f:54:6c:af:89:7d:c1:00:3c:50:4c:
df:d3:41:5b:cc:9b:2f:54:5a:3c:f4:a9:b4:95:36:fb:8d:9e:
25:a1:1c:f6:26:4e:6f:0f:37:28:2e:3b:90:29:ce:f3:3c:14:
a9:85:7d:0f:1d:73:d6:ef:c4:78:f4:d1:5b:9e:fa:15:b2:54:
75:32:8e:3c:47:2b:6a:06:65:fb:79:36:1a:7e:cb:3a:49:a1:
d8:9e:f8:d0:18:33:1e:68:6d:fb:6f:6d:0c:7b:4b:b6:90:0b:
e8:61:db:5e:3d:21:47:9d:22:28:ba:72:df:97:8e:19:5a:04:
6f:67:6e:e7:4a:41:6b:40:92:b2:14:07:32:64:d5:86:26:ad:
c3:1c:12:6f:c9:86:f6:cd:46:10:62:e9:c8:45:c5:2d:7c:ed:
3a:78:73:91:93:1f:83:dd:54:33:85:71:17:04:e2:e9:bf:55:
d5:47:6a:9e:fa:f2:5d:1e:5c:29:75:ed:da:69:40:74:e8:e1:
08:15:2c:cb:a7:69:30:20:e6:d6:73:57:fb:8f:fe:a4:0f:7c:
73:0c:ef:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1aRcV2VO106pSpeCd9LyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmI3NTI5Mjg5Zjg4ZmI0YmI4N2IzOWU3YmVkYzlkOWYy
N2Q1ZmEwHhcNMjUwNjA3MTAwMDI3WhcNMjUwNjA4MTAwMDI3WjAzMTEwLwYDVQQD
Eyg5NzYwY2Q4NzM3ZTdlMWE1MzNjYzlhMjMwMjYwNWRjYTUwN2QyYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUnxTSxYntJBCh8giSqLL2fSD6wP
soxLK/IEV/x4sEpAZpajvo7VpLJca30GnCk0k+5rkvc24BzGPDtmNgVextukmlTG
TcZJrZRCinVS/XCjuEfZ29Wwgq+2gnRCPUgAYDlutPkD/AVNNGbcaT1HPxkAXL8Y
am2PwWD2RoRMt2YUme48ZRGRFSNrNbVik+I5tRgs15fkKYA9BDa0rD30dY5lQ7BB
An3OsoIEVZzCTNzWWsJKfdw6c6nYxzttNiyZOB7jqKKtpkxweZLQQWbnzbdC6/v5
RFM5FoyzuqqObY/qxrGrFj5rB/1VuWOCskTKvoP8qjqRDlAj4EVInCHotQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdgzYc35+GlM8yaIwJgXcpQfSr+MB8GA1UdIwQY
MBaAFAv7dSkon4j7S7h7Oee+3J2fJ9X6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ190MUtTaWZpUHRMdUhzNTU3N2NuWjhuMWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81N2Q1NjUtODgzYi00OGEyLWE0MjQt
MjczZGI3ZDUzODk4LzEvQ190MUtTaWZpUHRMdUhzNTU3N2NuWjhuMWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81N2Q1NjUtODgzYi00OGEyLWE0MjQtMjczZGI3ZDUzODk4
LzEvQ190MUtTaWZpUHRMdUhzNTU3N2NuWjhuMWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJz2C5yM
isAWAdGdsVGU/eQnxPcz8jNqXUHRj1ckJdD3m4FmAnDIjAprKX9UbK+JfcEAPFBM
39NBW8ybL1RaPPSptJU2+42eJaEc9iZObw83KC47kCnO8zwUqYV9Dx1z1u/EePTR
W576FbJUdTKOPEcragZl+3k2Gn7LOkmh2J740BgzHmht+29tDHtLtpAL6GHbXj0h
R50iKLpy35eOGVoEb2du50pBa0CSshQHMmTVhiatwxwSb8mG9s1GEGLpyEXFLXzt
OnhzkZMfg91UM4VxFwTi6b9V1UdqnvryXR5cKXXt2mlAdOjhCBUsy6dpMCDm1nNX
+4/+pA98cwzvcg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:52:13 2025 by rpki-client