Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: 1M09IL9LoYst5gCgw84YszTelk3P85zjcfMsT7rOuTM=
Subject key identifier: C8:22:53:C1:85:FB:4D:7C:B6:00:17:B5:0E:E7:FB:5B:21:9D:03:30
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 01974855061F5AECB3C7521A8EBCFF44F5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 03:00:20 +0000
Manifest this update: Sat 07 Jun 2025 03:00:20 +0000
Manifest next update: Sun 08 Jun 2025 03:00:20 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: Y9j1O1gJ+s6tDj7gLDSCFbTp5NNVr5q96b/hgSA/zfk=)
2: xbK0xWiY34_RomWctzp72CJLeyA.roa (hash: uGlhM5SP1wH5GgbXheJ7ZYAOlhLuCV1Bj19dNLN10ho=)
3: ztCPKk8w1aeaQKuLHJz_e0TSo9Y.roa (hash: eX6lgcMXGHHyxYwjBqAxjQIWBeaf2J3CyUG15tvpJ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:06:1f:5a:ec:b3:c7:52:1a:8e:bc:ff:44:f5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Jun 7 03:00:20 2025 GMT
Not After : Jun 8 03:00:20 2025 GMT
Subject: CN=c82253c185fb4d7cb60017b50ee7fb5b219d0330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:71:08:cc:89:33:4c:d5:0d:95:74:d0:d2:
12:d6:6e:2b:42:8f:45:93:0e:a4:44:7b:87:e0:5d:
20:c1:88:b2:d7:28:0a:22:29:89:a5:99:4d:d4:04:
05:ff:e8:61:eb:a9:bb:88:ef:78:10:b4:4b:b5:02:
27:8d:5a:c2:af:0b:1c:e4:fd:8e:c4:f5:e5:36:e1:
1d:fa:97:31:42:44:c0:b6:5b:42:0b:58:0f:75:bc:
3c:d0:ff:e4:36:0a:ce:a3:c0:b4:63:e3:68:ed:ba:
9c:f7:ea:22:74:28:a9:8a:de:1f:e7:f7:3f:e3:b6:
61:34:90:48:86:6e:9a:07:fe:96:9e:d1:49:ce:47:
70:fd:26:f7:e3:82:e1:a9:89:42:74:53:17:42:83:
d4:50:f5:2f:df:5a:d3:bf:0f:50:20:6b:be:fa:35:
a9:81:31:e6:4b:6a:50:44:98:57:e5:0e:44:8e:41:
c6:a6:dd:97:f0:67:e5:c1:ea:29:a1:f6:0f:5b:9a:
ad:97:e1:8a:1f:2c:84:c4:a9:23:90:f9:f4:00:a7:
e9:ed:b6:ce:fc:e0:d9:fc:73:29:38:98:2f:90:eb:
7b:8a:cd:81:20:98:1e:d4:da:15:96:75:7e:a1:06:
3d:ca:36:c9:02:66:fb:b8:2f:1a:b6:df:3c:28:c9:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:53:C1:85:FB:4D:7C:B6:00:17:B5:0E:E7:FB:5B:21:9D:03:30
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e8:6b:16:be:35:ec:a1:3f:ad:5a:50:e9:0b:26:08:7f:45:
ad:48:01:e0:51:62:c7:21:2f:e8:51:2d:0b:70:01:8e:10:20:
33:6b:92:32:42:1d:37:35:db:9c:4c:83:a9:db:71:1f:dc:43:
28:98:9b:04:29:cd:db:60:33:9d:34:65:c0:39:35:c1:06:ae:
f7:0d:8a:66:f9:a9:04:cd:16:2b:3b:e2:73:09:45:02:b0:97:
3b:0f:8a:e2:69:45:aa:df:77:39:c5:c3:5e:02:7f:fb:b4:16:
f9:60:ae:e0:d5:b4:76:53:6e:6b:c9:5c:08:f8:fe:af:a9:31:
4e:2f:cd:a5:6a:03:47:6a:18:f6:22:d7:f2:bb:12:04:8a:91:
1d:dc:bd:5b:3e:c1:b1:0a:64:3e:4f:76:9e:9b:02:2e:01:9a:
d5:28:53:f5:76:db:f0:7c:ae:ad:a1:54:0a:f3:eb:4d:2d:9d:
70:e4:2d:54:b0:24:43:80:2c:6a:5a:fd:a0:b0:f6:6c:46:b0:
db:ea:bb:be:23:6d:0a:0f:3f:f3:53:6c:ab:c1:74:28:bd:1a:
64:f0:87:66:83:ed:0d:08:b0:09:12:f3:42:55:9e:43:09:dc:
a1:1d:83:02:e0:9c:7f:4b:99:01:47:e5:84:b2:45:26:95:c7:
fa:0d:32:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVQYfWuyzx1Iajrz/RPXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOGZiMWRlYjA5ZTcyNDI1YjMwOWExNDE0OTE3ZGFmODkz
YmVmNTkwHhcNMjUwNjA3MDMwMDIwWhcNMjUwNjA4MDMwMDIwWjAzMTEwLwYDVQQD
EyhjODIyNTNjMTg1ZmI0ZDdjYjYwMDE3YjUwZWU3ZmI1YjIxOWQwMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxJxCMyJM0zVDZV00NIS1m4rQo9F
kw6kRHuH4F0gwYiy1ygKIimJpZlN1AQF/+hh66m7iO94ELRLtQInjVrCrwsc5P2O
xPXlNuEd+pcxQkTAtltCC1gPdbw80P/kNgrOo8C0Y+No7bqc9+oidCipit4f5/c/
47ZhNJBIhm6aB/6WntFJzkdw/Sb344LhqYlCdFMXQoPUUPUv31rTvw9QIGu++jWp
gTHmS2pQRJhX5Q5EjkHGpt2X8GflweopofYPW5qtl+GKHyyExKkjkPn0AKfp7bbO
/ODZ/HMpOJgvkOt7is2BIJge1NoVlnV+oQY9yjbJAmb7uC8att88KMlPowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgiU8GF+018tgAXtQ7n+1shnQMwMB8GA1UdIwQY
MBaAFAuPsd6wnnJCWzCaFBSRfa+JO+9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYzc2M2ItODNlNi00YmQxLWI5M2Et
Zjg3ODVhNTgxMDZjLzEvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYzc2M2ItODNlNi00YmQxLWI5M2EtZjg3ODVhNTgxMDZj
LzEvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOhrFr41
7KE/rVpQ6QsmCH9FrUgB4FFixyEv6FEtC3ABjhAgM2uSMkIdNzXbnEyDqdtxH9xD
KJibBCnN22AznTRlwDk1wQau9w2KZvmpBM0WKzvicwlFArCXOw+K4mlFqt93OcXD
XgJ/+7QW+WCu4NW0dlNua8lcCPj+r6kxTi/NpWoDR2oY9iLX8rsSBIqRHdy9Wz7B
sQpkPk92npsCLgGa1ShT9Xbb8HyuraFUCvPrTS2dcOQtVLAkQ4Asalr9oLD2bEaw
2+q7viNtCg8/81Nsq8F0KL0aZPCHZoPtDQiwCRLzQlWeQwncoR2DAuCcf0uZAUfl
hLJFJpXH+g0ypQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:46:51 2025 by rpki-client