Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: 13wC1SQ/54/kqBR1CGE5LjRKUNleTm/W61h5l11muh4=
Subject key identifier: D8:05:08:55:11:39:3E:5F:AE:BF:FA:38:FD:5B:B1:45:AE:1B:16:60
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 01974FA1438E7788331847884DFBBCEC2A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 0E94
Signing time: Sun 08 Jun 2025 13:00:58 +0000
Manifest this update: Sun 08 Jun 2025 13:00:58 +0000
Manifest next update: Mon 09 Jun 2025 13:00:58 +0000
Files and hashes: 1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: +kImjFRFAJ5M7fz6K8B9kdUThh9zkPJ5w628Xvb3LCQ=)
2: WG1KaYBil4vEXHxcooJOyBDWYD4.roa (hash: KHIxCFkGSHSfCiqYXlIC0/8nqViYZ1Y0FqW8AdTQIkI=)
3: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (hash: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:43:8e:77:88:33:18:47:88:4d:fb:bc:ec:2a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Jun 8 13:00:58 2025 GMT
Not After : Jun 9 13:00:58 2025 GMT
Subject: CN=d805085511393e5faebffa38fd5bb145ae1b1660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:ce:f4:5d:c7:d2:4f:d3:08:95:a8:f3:ce:
d6:88:d8:12:1c:04:29:de:1f:19:90:50:d5:c6:03:
3b:d3:e0:e8:43:06:a7:ac:c8:d1:99:7d:c3:9b:2d:
fa:84:98:e4:4f:b2:84:4d:05:a2:8d:de:9a:e3:21:
a4:df:0b:59:fe:1e:83:46:71:d3:50:a2:25:0d:9c:
cc:8b:1c:3d:29:db:5d:28:b1:f8:7b:f2:2e:d9:81:
9a:f0:87:a1:8d:a3:35:d2:db:3e:a1:89:02:76:ea:
2b:81:50:b8:6c:8e:8c:55:4e:23:8b:f2:27:7b:49:
c1:71:98:de:25:e1:72:1e:bb:96:3c:5d:8b:bb:e4:
dd:23:23:9c:f9:25:7d:73:e8:7c:d9:81:63:7e:55:
bc:f1:97:e5:36:eb:2c:af:2a:4c:21:dd:48:0e:fa:
a5:73:fb:0f:f6:25:bc:b9:a2:66:42:e7:04:0a:42:
22:ef:93:9c:e1:7a:8f:72:46:d6:d1:97:19:3c:e2:
a2:86:d2:ff:69:8d:20:6f:7a:70:0f:7e:05:07:e9:
bb:e0:c8:33:96:3a:cc:84:9d:8a:58:b0:c0:d5:3c:
ec:af:e9:f3:dd:69:21:ed:31:96:54:16:0b:c9:39:
59:53:a7:b6:b6:37:f4:51:f1:77:55:1e:d7:67:63:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:05:08:55:11:39:3E:5F:AE:BF:FA:38:FD:5B:B1:45:AE:1B:16:60
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:17:81:4e:99:b3:a3:04:b5:d2:2b:c2:c0:78:9c:b2:bb:b7:
8b:db:49:f6:b4:5b:90:3e:28:29:91:7a:c5:83:1a:a6:bd:db:
fb:b0:ec:76:e7:cb:22:a1:f0:eb:66:cd:15:9f:ae:d9:f1:14:
f3:a0:0d:e2:fc:02:32:dc:65:af:4f:d5:3f:82:24:e8:4a:cb:
31:9e:39:ec:0e:0f:1b:02:01:ca:6e:43:ce:4b:e8:a5:a9:f7:
64:0d:70:10:0f:3c:ba:a7:44:ee:19:60:a8:96:50:f6:fb:b6:
9d:bc:f3:07:82:19:fa:5d:3c:9a:7a:76:31:be:77:5a:21:dd:
95:94:69:eb:79:40:a8:8a:0f:dc:c8:b0:72:89:7e:20:c7:b1:
50:12:ba:11:7e:fe:b5:36:c7:b4:02:03:75:9a:f5:41:08:fd:
59:0f:cc:fc:bc:be:c3:2f:4b:33:12:cd:6f:02:b9:ad:f9:8a:
27:33:fd:a6:39:20:b7:f0:21:41:b9:e3:3f:e5:f3:e6:ee:27:
dc:8b:a3:8e:14:e2:3d:1d:23:8c:96:5c:92:b9:a3:37:0e:94:
d9:75:5e:0b:2e:f3:81:a8:2e:e0:09:be:e5:9b:88:21:7c:9e:
a8:0a:4f:32:43:d0:5a:e8:d3:b5:18:17:bc:4a:7c:d6:27:84:
8c:2f:30:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoUOOd4gzGEeITfu87CpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzM3NzhmYjFiZWMyOGM5OTgyNjUyYWVkZTg2YTAwNGMy
NjgyZjEwHhcNMjUwNjA4MTMwMDU4WhcNMjUwNjA5MTMwMDU4WjAzMTEwLwYDVQQD
EyhkODA1MDg1NTExMzkzZTVmYWViZmZhMzhmZDViYjE0NWFlMWIxNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz3O9F3H0k/TCJWo887WiNgSHAQp
3h8ZkFDVxgM70+DoQwanrMjRmX3Dmy36hJjkT7KETQWijd6a4yGk3wtZ/h6DRnHT
UKIlDZzMixw9KdtdKLH4e/Iu2YGa8IehjaM10ts+oYkCduorgVC4bI6MVU4ji/In
e0nBcZjeJeFyHruWPF2Lu+TdIyOc+SV9c+h82YFjflW88ZflNussrypMId1IDvql
c/sP9iW8uaJmQucECkIi75Oc4XqPckbW0ZcZPOKihtL/aY0gb3pwD34FB+m74Mgz
ljrMhJ2KWLDA1Tzsr+nz3Wkh7TGWVBYLyTlZU6e2tjf0UfF3VR7XZ2P0BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgFCFUROT5frr/6OP1bsUWuGxZgMB8GA1UdIwQY
MBaAFApzd4+xvsKMmYJlKu3oagBMJoLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEt
NTcwOGY1ODBlMzZhLzEvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEtNTcwOGY1ODBlMzZh
LzEvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBeBTpmz
owS10ivCwHicsru3i9tJ9rRbkD4oKZF6xYMapr3b+7DsdufLIqHw62bNFZ+u2fEU
86AN4vwCMtxlr0/VP4Ik6ErLMZ457A4PGwIBym5Dzkvopan3ZA1wEA88uqdE7hlg
qJZQ9vu2nbzzB4IZ+l08mnp2Mb53WiHdlZRp63lAqIoP3Miwcol+IMexUBK6EX7+
tTbHtAIDdZr1QQj9WQ/M/Ly+wy9LMxLNbwK5rfmKJzP9pjkgt/AhQbnjP+Xz5u4n
3IujjhTiPR0jjJZckrmjNw6U2XVeCy7zgagu4Am+5ZuIIXyeqApPMkPQWujTtRgX
vEp81ieEjC8wzA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:07 2025 by rpki-client