Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: jN01T67a9277POnmfqml0RpY4OU0tXNOcfHpXEUD3m8=
Subject key identifier: 36:B0:B1:39:CE:D7:B3:61:7F:C9:F1:F8:E9:65:76:D0:7C:B0:64:D5
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019759125FB285505D23E803ED3EFD40C8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 158D
Signing time: Tue 10 Jun 2025 09:01:05 +0000
Manifest this update: Tue 10 Jun 2025 09:01:05 +0000
Manifest next update: Wed 11 Jun 2025 09:01:05 +0000
Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=)
2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=)
3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=)
4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=)
5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=)
6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: MhINM3/kRirmjHyLKxF/BrXO/cfjCHS9D12ie6beaPM=)
8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=)
9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:5f:b2:85:50:5d:23:e8:03:ed:3e:fd:40:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jun 10 09:01:05 2025 GMT
Not After : Jun 11 09:01:05 2025 GMT
Subject: CN=36b0b139ced7b3617fc9f1f8e96576d07cb064d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6a:6a:9e:4f:6a:d0:d6:34:7f:a6:db:41:14:
bb:e1:e4:ee:e0:ae:55:24:2d:4c:1d:6d:3b:ba:1e:
6d:2c:b7:d1:c0:76:34:d8:4c:bb:7d:8d:0e:0f:59:
05:74:87:e7:fb:7b:94:0a:af:85:41:58:13:3b:1b:
8d:54:2d:35:80:ad:69:74:cd:9e:94:86:3a:8f:83:
ac:83:80:49:e7:cd:58:d5:93:62:2d:15:a0:a4:ad:
ba:13:14:66:b7:83:a0:f7:91:7a:40:e2:cd:27:29:
f8:74:f7:d1:80:20:f9:ff:40:02:de:42:0b:81:ec:
76:3e:5e:6b:93:8b:f4:40:17:42:7a:9d:ba:1b:ac:
63:f7:74:b3:30:e8:d9:3b:8c:5b:dd:43:ed:54:3f:
b9:43:b7:d4:8a:70:17:ee:d2:db:97:1f:45:53:a8:
90:3a:58:15:e2:05:ed:e6:f4:4d:b7:c6:50:be:1a:
17:89:92:f2:43:7e:d3:55:55:91:01:b9:0f:10:a6:
2f:bb:c1:29:56:fa:b6:0f:1c:45:31:38:ce:ad:28:
a6:bd:f5:85:c2:cf:92:8b:b4:e2:2b:de:cb:ac:da:
72:14:8a:83:29:2d:01:a8:2f:2a:cd:0e:1c:a8:64:
0d:a9:79:d6:8b:25:83:61:9a:77:05:e4:b1:2d:05:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B0:B1:39:CE:D7:B3:61:7F:C9:F1:F8:E9:65:76:D0:7C:B0:64:D5
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:12:eb:b7:bd:66:83:63:af:6c:f4:38:11:5a:51:22:5c:3d:
ae:5f:a2:16:38:4a:de:37:af:2f:dc:ed:66:1f:1c:c5:a3:df:
79:a8:47:f1:b2:cb:9d:57:95:d0:12:9f:17:52:45:d9:19:8c:
ae:4c:46:67:cb:2f:81:0e:b6:4b:9e:0b:14:c0:d5:8a:3e:48:
32:af:66:e1:fc:34:63:c3:cb:cb:f6:9e:09:31:5f:52:26:68:
ec:ec:0c:dd:b8:40:50:4a:58:d4:f3:25:e7:ad:8b:31:7d:0c:
bd:11:21:80:57:f9:fd:67:e9:55:41:9e:84:fb:6e:6d:d7:0e:
5d:6d:9f:48:10:e3:e2:53:46:0e:d8:65:56:54:3a:62:33:42:
7d:34:b7:7c:93:83:97:ef:73:8c:dc:18:db:d9:60:ad:7a:f4:
3f:e4:df:b5:73:40:35:98:66:ba:ed:e9:4e:c6:d7:31:4f:41:
67:5d:0a:3e:27:9f:27:a3:80:11:88:3b:d5:94:75:49:9a:07:
c0:05:8d:7a:15:56:80:b5:ed:9e:e1:40:45:ed:76:71:4e:87:
0a:e8:0f:b4:c2:56:75:75:30:de:fd:3b:cf:d2:ca:e6:44:cb:
e6:4b:d1:24:47:50:aa:98:79:04:5a:1d:b8:27:c0:8a:63:9e:
35:13:08:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZEl+yhVBdI+gD7T79QMjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk
ZDVjNGIwHhcNMjUwNjEwMDkwMTA1WhcNMjUwNjExMDkwMTA1WjAzMTEwLwYDVQQD
EygzNmIwYjEzOWNlZDdiMzYxN2ZjOWYxZjhlOTY1NzZkMDdjYjA2NGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mpqnk9q0NY0f6bbQRS74eTu4K5V
JC1MHW07uh5tLLfRwHY02Ey7fY0OD1kFdIfn+3uUCq+FQVgTOxuNVC01gK1pdM2e
lIY6j4Osg4BJ581Y1ZNiLRWgpK26ExRmt4Og95F6QOLNJyn4dPfRgCD5/0AC3kIL
gex2Pl5rk4v0QBdCep26G6xj93SzMOjZO4xb3UPtVD+5Q7fUinAX7tLblx9FU6iQ
OlgV4gXt5vRNt8ZQvhoXiZLyQ37TVVWRAbkPEKYvu8EpVvq2DxxFMTjOrSimvfWF
ws+Si7TiK97LrNpyFIqDKS0BqC8qzQ4cqGQNqXnWiyWDYZp3BeSxLQWmUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDawsTnO17Nhf8nx+OlldtB8sGTVMB8GA1UdIwQY
MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt
NzYxMGFhYmFhMjc0LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0
LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchLrt71m
g2OvbPQ4EVpRIlw9rl+iFjhK3jevL9ztZh8cxaPfeahH8bLLnVeV0BKfF1JF2RmM
rkxGZ8svgQ62S54LFMDVij5IMq9m4fw0Y8PLy/aeCTFfUiZo7OwM3bhAUEpY1PMl
562LMX0MvREhgFf5/WfpVUGehPtubdcOXW2fSBDj4lNGDthlVlQ6YjNCfTS3fJOD
l+9zjNwY29lgrXr0P+TftXNANZhmuu3pTsbXMU9BZ10KPiefJ6OAEYg71ZR1SZoH
wAWNehVWgLXtnuFARe12cU6HCugPtMJWdXUw3v07z9LK5kTL5kvRJEdQqph5BFod
uCfAimOeNRMITA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:48:45 2025 by rpki-client