Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: Ia9RWUs3kKiaW+6+1z4mu5KCFmHa19nWV8/Z8APhmcI=
Subject key identifier: 7C:53:4E:61:8C:F1:A0:1E:DA:96:48:75:08:3C:03:47:95:2C:31:66
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 01975BDCF06D66206E537FF1D2A650C3C8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 0D15
Signing time: Tue 10 Jun 2025 22:01:35 +0000
Manifest this update: Tue 10 Jun 2025 22:01:35 +0000
Manifest next update: Wed 11 Jun 2025 22:01:35 +0000
Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: iUpu9I7Dz7FzTm8tfIMY0XIsVWcbpPlegUuOU4kPF/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:f0:6d:66:20:6e:53:7f:f1:d2:a6:50:c3:c8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: Jun 10 22:01:35 2025 GMT
Not After : Jun 11 22:01:35 2025 GMT
Subject: CN=7c534e618cf1a01eda964875083c0347952c3166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1d:a4:02:b7:4a:35:fe:78:08:87:5b:ab:e9:
ba:90:41:d2:6e:e7:9a:cf:d6:53:f9:0e:86:15:5b:
b7:50:89:61:58:0a:c1:10:49:08:5d:b6:8c:2e:5b:
27:b3:a5:61:df:64:6f:40:b2:21:57:e7:f0:0c:07:
95:d4:bb:55:c7:f7:fd:5e:a0:bb:87:1b:f4:be:32:
3a:4d:82:14:8b:a7:d2:d3:e9:dc:08:7b:65:39:ce:
80:93:8f:3f:54:f0:49:f6:a2:b0:21:bc:6a:ec:42:
9a:17:7a:27:39:14:23:cf:62:41:c0:37:35:cd:0b:
13:2a:70:35:1e:02:ec:35:0d:1d:2f:36:1f:f2:75:
80:c5:15:3b:0e:66:e3:20:4b:fd:a9:aa:c1:65:c9:
45:a6:6b:44:0c:8e:2d:82:10:52:f0:19:fb:c2:ce:
21:39:4a:28:5c:90:35:8e:1c:d2:13:9a:22:19:fc:
81:c4:3e:e8:58:3c:9e:c0:88:4f:e3:b0:52:13:c8:
62:19:b0:79:27:15:14:ed:a3:0c:ae:61:67:24:59:
a2:0e:f2:18:d8:78:69:63:c4:9e:b6:fc:8f:f9:a6:
ac:f9:63:ed:bd:c2:91:57:ff:a3:fd:b6:e6:40:56:
73:48:24:44:35:70:da:82:a5:bb:e5:0b:c7:87:03:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:4E:61:8C:F1:A0:1E:DA:96:48:75:08:3C:03:47:95:2C:31:66
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d6:92:89:19:01:16:01:24:97:59:d1:98:67:27:3f:04:9a:
66:4a:07:e8:01:5e:9e:63:35:2d:3c:6f:42:a0:9d:16:50:b0:
75:78:ae:8a:f2:ec:8c:2d:d4:de:b8:88:9d:80:c4:17:32:b5:
93:dc:84:4c:92:db:98:e7:9c:93:6b:cf:7d:28:37:be:f0:5f:
05:49:17:1b:66:82:98:74:87:3c:13:1c:47:e3:72:ef:90:ff:
d1:b3:83:ef:73:03:c4:aa:58:4c:38:47:ff:37:62:6b:c2:0d:
53:f6:d9:47:31:92:ee:b5:0c:bf:90:76:c7:76:51:0f:2a:21:
96:5f:7c:96:3d:4a:65:8e:dd:a2:6e:db:ca:cc:ba:02:14:3e:
32:7b:f8:68:9a:8a:08:9e:d1:86:c7:07:2f:d1:b7:ef:a3:e5:
17:7e:a8:bb:4c:d4:04:65:c6:a8:1d:f2:05:ed:f4:3b:5e:0c:
47:4c:44:fc:cf:d5:03:b6:02:d3:47:8c:f7:06:94:5c:63:1a:
fe:2d:1d:d7:81:07:44:e7:6c:d0:f3:d0:1f:39:65:4a:16:4b:
e2:d8:ca:98:51:db:c6:19:c7:9f:c4:d2:47:58:ae:3b:5d:d1:
ff:49:a5:05:67:39:70:b8:cf:38:b0:33:17:9f:7e:e1:76:05:
8e:70:7d:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdb3PBtZiBuU3/x0qZQw8jYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxN2Y1NWYzYzYwMDdiMWNiZGQ3ZTgyMDg5MDU2OTAwNjc1
N2IzNjYwHhcNMjUwNjEwMjIwMTM1WhcNMjUwNjExMjIwMTM1WjAzMTEwLwYDVQQD
Eyg3YzUzNGU2MThjZjFhMDFlZGE5NjQ4NzUwODNjMDM0Nzk1MmMzMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8x2kArdKNf54CIdbq+m6kEHSbuea
z9ZT+Q6GFVu3UIlhWArBEEkIXbaMLlsns6Vh32RvQLIhV+fwDAeV1LtVx/f9XqC7
hxv0vjI6TYIUi6fS0+ncCHtlOc6Ak48/VPBJ9qKwIbxq7EKaF3onORQjz2JBwDc1
zQsTKnA1HgLsNQ0dLzYf8nWAxRU7DmbjIEv9qarBZclFpmtEDI4tghBS8Bn7ws4h
OUooXJA1jhzSE5oiGfyBxD7oWDyewIhP47BSE8hiGbB5JxUU7aMMrmFnJFmiDvIY
2HhpY8SetvyP+aas+WPtvcKRV/+j/bbmQFZzSCRENXDagqW75QvHhwO/KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxTTmGM8aAe2pZIdQg8A0eVLDFmMB8GA1UdIwQY
MBaAFHF/VfPGAHscvdfoIIkFaQBnV7NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgt
NjczNjQwMjMzNjY1LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgtNjczNjQwMjMzNjY1
LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNaSiRkB
FgEkl1nRmGcnPwSaZkoH6AFenmM1LTxvQqCdFlCwdXiuivLsjC3U3riInYDEFzK1
k9yETJLbmOeck2vPfSg3vvBfBUkXG2aCmHSHPBMcR+Ny75D/0bOD73MDxKpYTDhH
/zdia8INU/bZRzGS7rUMv5B2x3ZRDyohll98lj1KZY7dom7bysy6AhQ+Mnv4aJqK
CJ7RhscHL9G376PlF36ou0zUBGXGqB3yBe30O14MR0xE/M/VA7YC00eM9waUXGMa
/i0d14EHROds0PPQHzllShZL4tjKmFHbxhnHn8TSR1iuO13R/0mlBWc5cLjPOLAz
F59+4XYFjnB9TA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 03:44:17 2025 by rpki-client