Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: onRac3Jjx63kr2X3Oh7OoarvmX2qBEWjIh4930fFI7I=
Subject key identifier: 4A:89:20:69:53:9C:8F:2F:44:63:AF:4B:02:3B:18:C4:E5:81:4C:48
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 0197470C02B8545F6E57A5BEDA34DB5508AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 024E
Signing time: Fri 06 Jun 2025 21:00:58 +0000
Manifest this update: Fri 06 Jun 2025 21:00:58 +0000
Manifest next update: Sat 07 Jun 2025 21:00:58 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: bFfg2iJBgKC38DS9kbCFBRs8OOzWBQdHel6fERDuXwU=)
2: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (hash: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:02:b8:54:5f:6e:57:a5:be:da:34:db:55:08:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Jun 6 21:00:58 2025 GMT
Not After : Jun 7 21:00:58 2025 GMT
Subject: CN=4a892069539c8f2f4463af4b023b18c4e5814c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:87:bc:b3:83:52:33:74:df:ed:dc:b7:80:
01:ac:7e:34:25:22:33:4f:fc:dd:d9:b0:4b:53:32:
a3:bb:17:f0:2a:d0:f0:bf:2a:8d:97:83:a8:85:03:
a1:7b:2c:cf:0e:99:69:ee:76:9f:f8:7b:c9:70:ee:
5c:10:28:fc:2e:b3:51:4b:46:d9:30:55:1f:05:64:
85:ef:e0:91:c6:7a:46:03:35:a0:8f:31:9e:2f:ff:
62:a7:26:de:e2:15:25:cb:7b:3c:1c:fc:b3:24:c1:
62:63:7a:56:2e:5d:82:03:9c:bb:a0:5a:c6:89:ca:
38:b7:db:23:d3:db:87:bc:c8:8b:7a:2f:43:c5:b6:
d0:96:d8:1c:d2:cc:8c:7a:7d:8f:31:96:7c:0f:84:
e9:e5:31:92:10:8d:c2:e8:08:1a:9f:c5:ac:65:be:
21:9a:5b:00:0b:ea:0a:d4:1b:95:68:95:df:b9:45:
ab:26:6c:07:27:b6:01:5f:c4:f3:d3:c6:95:ac:b4:
eb:cc:d9:66:ce:15:a7:59:c9:d8:9e:be:8a:ff:11:
de:48:c8:c0:bb:3b:01:e9:2b:e6:80:21:61:a2:7a:
c3:a5:cd:28:79:39:32:76:88:43:d7:98:b7:55:7a:
85:87:ee:e7:07:4e:f4:f9:39:67:f6:90:3f:19:7f:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:89:20:69:53:9C:8F:2F:44:63:AF:4B:02:3B:18:C4:E5:81:4C:48
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:02:eb:24:f1:cf:c7:74:4e:b6:4a:46:3a:38:3e:cc:45:32:
c2:4a:75:e1:f1:24:49:18:a1:ed:6e:84:cd:5d:b2:15:10:d3:
e7:56:6e:2c:1a:dc:5d:a6:33:20:bf:75:5f:94:94:81:a8:07:
6d:59:97:41:93:8d:ab:c9:c0:54:84:02:85:e7:c7:35:a8:3e:
71:17:6c:8f:ae:e8:81:48:68:61:b4:9d:81:29:86:4c:fe:1e:
13:75:69:a1:0c:b0:38:cc:e3:8b:db:44:f4:8d:c1:71:f2:3a:
51:24:66:b0:9c:e9:c1:e2:8f:81:8d:16:7a:e6:d8:a3:e7:21:
c9:cf:a6:41:05:26:dd:63:2e:c4:5c:2f:6e:29:f1:8a:db:ba:
0e:0d:b1:7f:45:9c:a9:dc:ae:38:07:43:e9:ff:19:6a:4e:b5:
16:b4:7b:ec:a2:56:68:99:cf:54:37:4d:81:7a:2e:5a:fa:1f:
21:da:c5:a3:aa:ef:ab:b4:a5:d9:e2:b4:6a:42:12:ce:33:b9:
02:ca:af:21:dd:93:56:d6:25:41:9c:44:f9:c2:56:46:c9:6c:
0e:0d:7c:00:80:fe:0f:2d:ed:d5:5c:c4:06:d9:0a:26:3a:ef:
d1:6e:27:9d:5f:35:66:4f:91:51:7e:98:03:1a:03:38:1c:93:
02:cc:3d:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHDAK4VF9uV6W+2jTbVQiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDc0MjYxNmE2ODA0MWY3ZjBmY2QwNzkyZjM4ZTQxMDNh
NzlkYzIwHhcNMjUwNjA2MjEwMDU4WhcNMjUwNjA3MjEwMDU4WjAzMTEwLwYDVQQD
Eyg0YTg5MjA2OTUzOWM4ZjJmNDQ2M2FmNGIwMjNiMThjNGU1ODE0YzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvyHvLODUjN03+3ct4ABrH40JSIz
T/zd2bBLUzKjuxfwKtDwvyqNl4OohQOheyzPDplp7naf+HvJcO5cECj8LrNRS0bZ
MFUfBWSF7+CRxnpGAzWgjzGeL/9ipybe4hUly3s8HPyzJMFiY3pWLl2CA5y7oFrG
ico4t9sj09uHvMiLei9DxbbQltgc0syMen2PMZZ8D4Tp5TGSEI3C6Agan8WsZb4h
mlsAC+oK1BuVaJXfuUWrJmwHJ7YBX8Tz08aVrLTrzNlmzhWnWcnYnr6K/xHeSMjA
uzsB6SvmgCFhonrDpc0oeTkydohD15i3VXqFh+7nB070+Tln9pA/GX+WVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqJIGlTnI8vRGOvSwI7GMTlgUxIMB8GA1UdIwQY
MBaAFHLXQmFqaAQffw/NB5LzjkEDp53CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUt
YTIwOWI5MGYyN2Q5LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUtYTIwOWI5MGYyN2Q5
LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5QLrJPHP
x3ROtkpGOjg+zEUywkp14fEkSRih7W6EzV2yFRDT51ZuLBrcXaYzIL91X5SUgagH
bVmXQZONq8nAVIQChefHNag+cRdsj67ogUhoYbSdgSmGTP4eE3VpoQywOMzji9tE
9I3BcfI6USRmsJzpweKPgY0WeubYo+chyc+mQQUm3WMuxFwvbinxitu6Dg2xf0Wc
qdyuOAdD6f8Zak61FrR77KJWaJnPVDdNgXouWvofIdrFo6rvq7Sl2eK0akISzjO5
AsqvId2TVtYlQZxE+cJWRslsDg18AID+Dy3t1VzEBtkKJjrv0W4nnV81Zk+RUX6Y
AxoDOByTAsw9Rw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:32:14 2025 by rpki-client