Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
File: c2iuvB1FhbmzYS7MIgNFTWWocuM.mft (raw, json)
Hash identifier: pK3CI8aAcfa4nXXIoO8oxMe/JdvdVYgQvxr4aCTetpM=
Subject key identifier: D0:3D:46:90:96:77:49:06:55:AF:AD:32:B0:68:A6:F3:81:E1:1E:BF
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Certificate issuer: /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial: 019748FA84CFBA6C4EF6BB04B1DEE183DC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 06:01:06 +0000
Manifest this update: Sat 07 Jun 2025 06:01:06 +0000
Manifest next update: Sun 08 Jun 2025 06:01:06 +0000
Files and hashes: 1: I9vgIWuaiEwVbrWFIv7mFggy9a0.roa (hash: CuGCVrXCD5akH61wJYu8Ar6/+5VEgpmtOisQYkqg0kQ=)
2: c2iuvB1FhbmzYS7MIgNFTWWocuM.crl (hash: 2NiAGMrLfy+fg6ndwEcrQHGH3oY/WGKEUJIs/0jOxFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:84:cf:ba:6c:4e:f6:bb:04:b1:de:e1:83:dc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Validity
Not Before: Jun 7 06:01:06 2025 GMT
Not After : Jun 8 06:01:06 2025 GMT
Subject: CN=d03d46909677490655afad32b068a6f381e11ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:05:24:a4:6d:e6:1d:ad:a1:5b:a0:e6:10:
bb:39:47:69:8d:65:c2:d3:87:ac:23:7e:25:63:2b:
87:49:fc:06:cb:b6:d7:97:f6:c8:8a:a8:22:23:6f:
2f:6f:13:7a:f6:d7:08:3c:e5:0c:03:75:15:90:b7:
99:e7:17:26:bc:a2:8f:28:d8:43:d7:04:dc:20:72:
65:a1:2c:40:72:9f:4a:81:69:aa:db:21:c6:ca:dc:
42:51:db:d1:59:5b:75:1d:53:88:ee:1a:f9:82:10:
8b:b0:6a:4f:0e:eb:aa:af:73:77:a5:22:4d:82:06:
b0:11:92:84:10:71:35:0f:f1:3d:26:bb:2d:d7:68:
dc:32:47:fc:70:72:6c:95:42:3b:eb:20:45:37:80:
70:e5:a0:e0:02:44:7b:97:db:d3:15:86:78:89:a7:
19:c1:08:7e:8c:5b:25:f2:e5:91:72:55:91:c5:15:
e5:5b:4f:36:1b:4a:f4:a6:f0:ba:00:ee:e4:0f:c1:
fe:35:64:55:f3:f4:84:b0:01:06:c7:04:ba:5d:c3:
4f:d0:31:a6:1d:05:1f:75:9f:df:31:f7:a6:d0:5a:
49:50:c5:96:a8:98:dc:a5:82:bb:59:5b:b8:52:52:
85:5f:73:09:29:00:0a:ca:93:b0:12:51:84:d2:c0:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:46:90:96:77:49:06:55:AF:AD:32:B0:68:A6:F3:81:E1:1E:BF
X509v3 Authority Key Identifier:
keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cf:af:c8:ca:29:77:70:83:2b:bd:0b:8f:48:c1:f1:21:98:
9e:c2:de:d0:f4:35:d6:b9:39:5c:ff:a3:7a:67:cd:f8:d2:22:
f2:da:1b:c1:ba:a1:11:b0:4d:a7:38:06:b3:85:7e:0c:76:4c:
9c:1d:33:a8:09:13:d9:ac:31:c7:b0:92:29:fe:5f:9c:c3:37:
7d:96:e8:b2:6c:09:4d:c9:b9:71:59:30:c3:a5:7e:9b:2e:a3:
21:97:09:5f:87:22:cd:56:98:c2:52:ae:53:52:66:4b:50:a9:
1d:c0:58:e0:55:3b:4f:10:6c:91:2b:f5:0b:eb:60:01:f2:c7:
23:64:a4:ab:2f:b0:3b:0f:56:5b:4a:f8:94:3e:5c:93:49:d9:
cb:42:45:9c:76:0d:41:5e:7d:74:98:ff:56:42:b9:34:ae:3e:
82:39:cc:6f:78:c0:31:01:70:91:be:ad:2e:aa:34:43:aa:6f:
dd:f6:fc:96:27:89:bf:9e:91:96:58:64:5c:e3:da:fe:a2:0b:
19:eb:dc:b6:d5:15:a7:8c:1a:18:7e:6f:f6:95:0d:e8:93:3c:
24:87:5b:39:09:71:a8:6c:f5:5a:83:7e:c9:74:77:5a:c7:b9:
99:91:52:f2:a5:e4:ee:5c:30:f2:4c:5f:c1:d2:a1:30:e8:92:
eb:2a:fc:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+oTPumxO9rsEsd7hg9xbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjhhZWJjMWQ0NTg1YjliMzYxMmVjYzIyMDM0NTRkNjVh
ODcyZTMwHhcNMjUwNjA3MDYwMTA2WhcNMjUwNjA4MDYwMTA2WjAzMTEwLwYDVQQD
EyhkMDNkNDY5MDk2Nzc0OTA2NTVhZmFkMzJiMDY4YTZmMzgxZTExZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKoFJKRt5h2toVug5hC7OUdpjWXC
04esI34lYyuHSfwGy7bXl/bIiqgiI28vbxN69tcIPOUMA3UVkLeZ5xcmvKKPKNhD
1wTcIHJloSxAcp9KgWmq2yHGytxCUdvRWVt1HVOI7hr5ghCLsGpPDuuqr3N3pSJN
ggawEZKEEHE1D/E9Jrst12jcMkf8cHJslUI76yBFN4Bw5aDgAkR7l9vTFYZ4iacZ
wQh+jFsl8uWRclWRxRXlW082G0r0pvC6AO7kD8H+NWRV8/SEsAEGxwS6XcNP0DGm
HQUfdZ/fMfem0FpJUMWWqJjcpYK7WVu4UlKFX3MJKQAKypOwElGE0sDyvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA9RpCWd0kGVa+tMrBopvOB4R6/MB8GA1UdIwQY
MBaAFHNorrwdRYW5s2EuzCIDRU1lqHLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2It
ZjU5NTFjN2NjYmQzLzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2ItZjU5NTFjN2NjYmQz
LzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjs+vyMop
d3CDK70Lj0jB8SGYnsLe0PQ11rk5XP+jemfN+NIi8tobwbqhEbBNpzgGs4V+DHZM
nB0zqAkT2awxx7CSKf5fnMM3fZbosmwJTcm5cVkww6V+my6jIZcJX4cizVaYwlKu
U1JmS1CpHcBY4FU7TxBskSv1C+tgAfLHI2Skqy+wOw9WW0r4lD5ck0nZy0JFnHYN
QV59dJj/VkK5NK4+gjnMb3jAMQFwkb6tLqo0Q6pv3fb8lieJv56RllhkXOPa/qIL
GevcttUVp4waGH5v9pUN6JM8JIdbOQlxqGz1WoN+yXR3Wse5mZFS8qXk7lww8kxf
wdKhMOiS6yr8hg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:06 2025 by rpki-client