Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: 45U1R+ZMsVH3gm5rWHAuRPAfzUDiHTaAdFysATw7YK0=
Subject key identifier: AC:C6:51:AA:BD:F7:E5:A7:F2:2E:25:D4:E7:F2:79:51:C5:B5:7B:38
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 01974F3342E8507A30DEE77CF9E4820F7364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 0DA8
Signing time: Sun 08 Jun 2025 11:00:48 +0000
Manifest this update: Sun 08 Jun 2025 11:00:48 +0000
Manifest next update: Mon 09 Jun 2025 11:00:48 +0000
Files and hashes: 1: WLQJ8zcZCMsER4r6hGR6_boxEBI.roa (hash: 8yJ5VPtEriA2v8Qxk3Uyit7MsAAT1OiV71AZSGLF2yM=)
2: Z00tzDptb3jFHIL69XvH8_giNRA.roa (hash: X1cnjA0aHCCUUGs++tB5SEQQf9ajzL2uJiiXmI5qvlg=)
3: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: lixbk72q6J0nIb1ZXBnneVH6cd+YLFyiJvnMKfCmcuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:42:e8:50:7a:30:de:e7:7c:f9:e4:82:0f:73:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Jun 8 11:00:48 2025 GMT
Not After : Jun 9 11:00:48 2025 GMT
Subject: CN=acc651aabdf7e5a7f22e25d4e7f27951c5b57b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:60:53:9a:3d:93:83:2c:4e:db:61:15:ef:
cf:ef:00:0f:f8:f1:d0:8d:cb:61:69:64:99:76:9f:
19:b2:f2:a1:88:38:c9:d7:78:95:37:95:a6:3b:0b:
4a:56:fa:c8:4d:3a:ae:e4:fc:c0:8d:95:07:c7:6b:
cc:e9:23:7b:6f:cc:ac:a4:3f:a9:a1:98:01:e5:b1:
7c:e0:3b:b5:d7:f9:2d:ce:8e:c2:70:19:56:68:8a:
1f:5c:30:1a:cb:9f:33:31:83:19:a5:bb:bd:61:47:
b1:da:e0:cc:43:f4:61:e3:db:93:ef:e5:67:89:61:
76:35:06:9f:bd:af:15:c7:07:69:ee:ba:e2:c5:fe:
12:34:f0:b4:27:34:cf:ea:ac:70:c6:85:d5:00:b0:
d0:5b:cc:69:2f:3a:d5:d0:72:a1:b7:6e:6a:f8:79:
bb:5e:d6:1b:eb:65:47:7f:2d:14:da:f8:87:5c:f3:
60:92:91:0c:f5:1e:85:ee:3d:72:85:c6:21:48:53:
57:19:e6:91:b5:f1:21:25:6b:9f:0d:38:0e:4e:0a:
2c:3e:2f:92:00:9d:26:19:cd:79:6d:e0:d5:c7:85:
ae:18:81:13:2c:49:6a:01:07:61:03:7d:b0:37:a9:
f5:2b:8d:cd:d1:f0:1e:27:c8:db:71:e9:cf:50:a9:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:51:AA:BD:F7:E5:A7:F2:2E:25:D4:E7:F2:79:51:C5:B5:7B:38
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9b:cf:ca:5f:6c:8e:13:5e:77:18:65:d9:17:f5:61:2c:5e:
61:e7:3b:98:d1:f5:69:4b:c3:ef:c0:0b:b6:65:b3:af:65:b0:
2a:43:b1:63:2e:8d:6d:f0:ce:e4:8a:d8:92:20:91:f2:6e:40:
e6:12:53:6b:ab:b7:78:dd:53:ed:58:23:fe:58:6e:16:a0:50:
63:bb:97:33:b4:83:5e:fa:2d:f6:5f:35:cd:10:17:84:6b:8c:
ff:d6:4a:59:56:ed:9e:30:e3:aa:1f:b4:42:b0:e5:2d:93:8b:
aa:37:85:da:ab:da:e2:5b:e7:17:f4:94:3e:31:6a:ff:ae:a5:
d4:65:b8:40:fd:c9:85:83:4a:66:1f:1b:84:23:9d:9d:62:45:
c9:c3:20:10:19:3d:e1:24:c3:b5:9c:aa:75:73:31:77:c0:cf:
2a:da:fc:4b:90:9e:89:25:0d:06:31:02:c5:f1:04:4f:b2:d4:
13:1c:7d:15:d4:82:3a:1b:af:5c:8c:e5:ab:c3:34:85:dd:74:
99:24:21:f4:f2:0b:f7:6d:d2:bc:e4:9e:2f:f1:a5:71:2d:57:
f8:83:86:24:99:d9:17:9c:b7:5a:e8:e8:39:0b:ef:c2:db:cd:
b4:c0:11:c9:93:af:03:84:bd:dc:34:73:e6:28:7a:fb:48:a3:
52:db:ef:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPM0LoUHow3ud8+eSCD3NkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjlhMDI1YTg0ZjQyZWYzZWYwYjYwNTJkZTNmZDY1ZThj
MDg2OTIwHhcNMjUwNjA4MTEwMDQ4WhcNMjUwNjA5MTEwMDQ4WjAzMTEwLwYDVQQD
EyhhY2M2NTFhYWJkZjdlNWE3ZjIyZTI1ZDRlN2YyNzk1MWM1YjU3YjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXNgU5o9k4MsTtthFe/P7wAP+PHQ
jcthaWSZdp8ZsvKhiDjJ13iVN5WmOwtKVvrITTqu5PzAjZUHx2vM6SN7b8yspD+p
oZgB5bF84Du11/ktzo7CcBlWaIofXDAay58zMYMZpbu9YUex2uDMQ/Rh49uT7+Vn
iWF2NQafva8Vxwdp7rrixf4SNPC0JzTP6qxwxoXVALDQW8xpLzrV0HKht25q+Hm7
XtYb62VHfy0U2viHXPNgkpEM9R6F7j1yhcYhSFNXGeaRtfEhJWufDTgOTgosPi+S
AJ0mGc15beDVx4WuGIETLElqAQdhA32wN6n1K43N0fAeJ8jbcenPUKmveQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzGUaq99+Wn8i4l1OfyeVHFtXs4MB8GA1UdIwQY
MBaAFHBpoCWoT0LvPvC2BS3j/WXowIaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMt
NTE5OWE3MTE2ODRkLzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMtNTE5OWE3MTE2ODRk
LzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5vPyl9s
jhNedxhl2Rf1YSxeYec7mNH1aUvD78ALtmWzr2WwKkOxYy6NbfDO5IrYkiCR8m5A
5hJTa6u3eN1T7Vgj/lhuFqBQY7uXM7SDXvot9l81zRAXhGuM/9ZKWVbtnjDjqh+0
QrDlLZOLqjeF2qva4lvnF/SUPjFq/66l1GW4QP3JhYNKZh8bhCOdnWJFycMgEBk9
4STDtZyqdXMxd8DPKtr8S5CeiSUNBjECxfEET7LUExx9FdSCOhuvXIzlq8M0hd10
mSQh9PIL923SvOSeL/GlcS1X+IOGJJnZF5y3WujoOQvvwtvNtMARyZOvA4S93DRz
5ih6+0ijUtvvqQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 21:05:15 2025 by rpki-client