Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: V663kNC/O1XxneQUyyzkgVvIKnEBOYNHfvh0jQkFmB8=
Subject key identifier: D3:A3:AA:88:AD:E4:4B:DC:8D:33:26:5E:2B:28:AD:68:A1:89:2A:82
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 01974C9FB8B754ECAC32D8EA974E68F34EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 0FE2
Signing time: Sat 07 Jun 2025 23:00:25 +0000
Manifest this update: Sat 07 Jun 2025 23:00:25 +0000
Manifest next update: Sun 08 Jun 2025 23:00:25 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: MyLdeqWVL74oR2oJFqoljCbhcwAxv5+LJ8Grm6sNszI=)
2: aZ04YotwMN5NF6QJ2ZcHvh79g-w.roa (hash: dZyQQffGI8dAk3Ily2WBsTj4NOYJ+9MtNaWUE01PNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:b8:b7:54:ec:ac:32:d8:ea:97:4e:68:f3:4e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Jun 7 23:00:25 2025 GMT
Not After : Jun 8 23:00:25 2025 GMT
Subject: CN=d3a3aa88ade44bdc8d33265e2b28ad68a1892a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:87:91:1c:c1:4a:26:0f:6b:4f:3f:76:df:a2:
f0:ef:d0:d3:54:12:c4:0b:f4:a9:6c:cb:45:bd:9c:
01:cc:23:ce:2a:11:38:9d:cd:1a:d6:cd:76:c2:c5:
dc:ad:58:f2:d9:81:bc:07:d5:55:df:9e:79:09:09:
05:58:34:1b:c5:e4:9b:95:a0:9d:6e:d3:03:21:dd:
95:46:03:bc:fd:46:3a:ca:4b:81:c3:2b:b2:a5:9e:
9b:26:0e:85:5e:8a:c4:b1:d0:0c:7f:66:a7:bd:34:
7f:e4:c2:60:5a:e7:60:f6:d3:21:63:77:15:45:5a:
38:cc:f0:60:25:c0:bf:13:61:09:48:66:34:87:d9:
a3:93:d2:dd:cc:5f:22:f4:d8:2a:65:06:08:5d:e8:
3c:4b:44:18:a4:ad:da:5c:c2:81:d6:32:a3:81:a1:
c9:8d:82:78:ce:b8:e5:e2:df:7a:c2:9f:5c:c5:da:
78:a1:70:d4:f6:1a:81:bf:db:69:ec:4d:3e:e5:e7:
72:0c:25:b4:8d:a7:d7:86:49:ea:57:d1:65:d1:49:
ad:ed:ad:98:e4:90:49:49:e6:f5:84:7b:ad:11:78:
26:10:9e:88:37:4f:83:c5:1b:73:19:d7:b5:18:d5:
65:7f:bc:5e:13:d9:82:4e:e1:e8:fe:a8:cc:d5:8a:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A3:AA:88:AD:E4:4B:DC:8D:33:26:5E:2B:28:AD:68:A1:89:2A:82
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9d:4d:d6:99:ce:a5:91:c1:a9:50:cd:6c:fe:f2:97:7d:9c:
42:df:57:66:27:09:8b:73:3a:d9:e1:87:2e:9f:44:37:b5:0f:
cc:60:92:cc:f8:65:27:ab:58:42:df:78:0a:61:7e:61:2e:46:
01:42:48:db:10:0a:0c:fd:1f:8f:58:a4:c8:4b:24:6d:8d:f9:
cf:d6:4a:7d:72:38:ef:33:55:fa:b1:ca:ba:4b:0b:74:38:a7:
24:85:07:a5:0c:37:0f:9c:e2:2c:73:ea:b2:1f:cc:14:e4:90:
e2:87:40:f8:74:ea:da:c7:51:c4:65:5b:5c:f7:6c:65:f3:0b:
4e:10:34:19:b3:e0:77:00:92:1a:51:a6:c1:3a:c2:cc:5c:12:
42:f5:c1:3a:3e:bc:ef:0b:7b:f6:6d:67:dc:3e:ab:07:ca:ad:
28:2c:cb:8c:68:8f:87:84:64:0e:4d:14:7d:a5:cb:45:d1:8a:
65:2b:12:d2:25:f8:7b:a8:46:b1:40:48:a3:dd:ab:3f:0a:6b:
dc:9c:54:3f:54:f0:40:4a:38:e5:fb:d0:7e:cb:f9:19:e3:82:
4d:18:6d:a8:92:2d:7b:58:89:c5:f1:08:06:c6:93:f8:ba:3c:
75:8c:2c:81:d8:02:67:47:3b:75:3a:cc:cf:27:33:2c:85:39:
1a:08:94:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn7i3VOysMtjql05o806yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTg2OGVlODRjNWYyN2Q5MTY5ZDI0M2MzMzdiNzRiNmZm
OGMxNGQwHhcNMjUwNjA3MjMwMDI1WhcNMjUwNjA4MjMwMDI1WjAzMTEwLwYDVQQD
EyhkM2EzYWE4OGFkZTQ0YmRjOGQzMzI2NWUyYjI4YWQ2OGExODkyYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84eRHMFKJg9rTz9236Lw79DTVBLE
C/SpbMtFvZwBzCPOKhE4nc0a1s12wsXcrVjy2YG8B9VV3555CQkFWDQbxeSblaCd
btMDId2VRgO8/UY6ykuBwyuypZ6bJg6FXorEsdAMf2anvTR/5MJgWudg9tMhY3cV
RVo4zPBgJcC/E2EJSGY0h9mjk9LdzF8i9NgqZQYIXeg8S0QYpK3aXMKB1jKjgaHJ
jYJ4zrjl4t96wp9cxdp4oXDU9hqBv9tp7E0+5edyDCW0jafXhknqV9Fl0Umt7a2Y
5JBJSeb1hHutEXgmEJ6IN0+DxRtzGde1GNVlf7xeE9mCTuHo/qjM1YqzsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOjqoit5EvcjTMmXisorWihiSqCMB8GA1UdIwQY
MBaAFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMt
YTMwZjUzN2Q5YzViLzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMtYTMwZjUzN2Q5YzVi
LzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg51N1pnO
pZHBqVDNbP7yl32cQt9XZicJi3M62eGHLp9EN7UPzGCSzPhlJ6tYQt94CmF+YS5G
AUJI2xAKDP0fj1ikyEskbY35z9ZKfXI47zNV+rHKuksLdDinJIUHpQw3D5ziLHPq
sh/MFOSQ4odA+HTq2sdRxGVbXPdsZfMLThA0GbPgdwCSGlGmwTrCzFwSQvXBOj68
7wt79m1n3D6rB8qtKCzLjGiPh4RkDk0UfaXLRdGKZSsS0iX4e6hGsUBIo92rPwpr
3JxUP1TwQEo45fvQfsv5GeOCTRhtqJIte1iJxfEIBsaT+Lo8dYwsgdgCZ0c7dTrM
zyczLIU5GgiUvA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:25:10 2025 by rpki-client