Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: S8Inxhz8kr7ayq1C4OgwSc0ZnaaFHBgDL9qbEdtrRiM=
Subject key identifier: 76:27:30:8B:CE:A6:18:DE:E1:3D:E1:2D:15:16:8C:33:10:52:7C:93
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 01974A7B7EB0D03BA378594FCA3BA0E3F454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 0203
Signing time: Sat 07 Jun 2025 13:01:36 +0000
Manifest this update: Sat 07 Jun 2025 13:01:36 +0000
Manifest next update: Sun 08 Jun 2025 13:01:36 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: 7cZi1upQhntQQ+oNuybhR7T/rjnCphGivbcr4c7pcJQ=)
2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:7e:b0:d0:3b:a3:78:59:4f:ca:3b:a0:e3:f4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Jun 7 13:01:36 2025 GMT
Not After : Jun 8 13:01:36 2025 GMT
Subject: CN=7627308bcea618dee13de12d15168c3310527c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:14:2e:62:7d:be:f4:79:98:84:32:61:2d:b7:
37:3c:cb:67:5d:cb:b9:6c:31:8f:ec:e9:59:95:e7:
e8:d7:6f:11:c9:81:7b:19:62:e0:4c:dc:5e:37:a5:
fb:f7:26:ac:80:27:12:1b:f1:1a:68:73:dd:ec:1f:
b6:ff:33:2c:7c:94:2b:c8:86:ee:ff:a0:c9:a9:fc:
26:be:73:2f:52:c4:66:a6:46:60:66:de:5b:cf:40:
8c:ce:c8:b2:e5:dd:f5:a8:e1:c2:10:20:95:fe:46:
e8:4a:c6:a8:3f:f4:f0:a7:84:b8:54:87:d8:2d:a4:
ac:de:35:4e:f7:78:f0:88:74:88:33:de:81:1b:a6:
a2:d9:4e:4f:15:9d:85:bc:89:8c:27:f0:9b:0f:e1:
6c:27:4f:20:22:a8:6f:8e:c1:6a:23:80:d3:8f:8f:
35:89:60:ae:d3:e0:b3:2e:99:45:3d:bf:37:58:8f:
c2:3d:87:25:60:1a:fd:42:96:2c:11:49:e2:12:cb:
b7:8e:71:22:c7:e5:11:3d:9a:45:0f:a1:db:c7:01:
ea:6b:20:c5:d2:5a:4e:75:fc:1d:66:80:ec:92:ec:
aa:92:9d:81:56:6b:78:09:d9:fe:a0:ef:d5:31:8a:
63:32:ac:84:b2:6c:e6:20:cc:ac:f8:e6:07:ae:a7:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:27:30:8B:CE:A6:18:DE:E1:3D:E1:2D:15:16:8C:33:10:52:7C:93
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6c:11:d6:0c:b9:8f:44:bb:4d:2a:2d:5c:37:ba:d3:7a:5e:
ca:f8:18:0a:84:03:74:75:c4:71:d5:60:91:d8:37:3f:61:d7:
58:69:89:3e:e9:d3:ba:52:a2:50:8b:aa:f1:94:c8:c1:fe:d5:
ed:79:99:d1:25:9f:f2:a0:34:b1:27:04:57:6b:00:38:76:3f:
7d:91:21:9a:c6:c3:ed:27:08:56:1e:58:7f:9c:b9:02:e0:63:
b3:4f:02:73:8f:82:bb:16:f5:0f:4d:f8:4d:45:55:68:37:f5:
26:9e:92:91:05:dc:31:d9:4e:66:7d:e0:bd:a3:f4:18:4f:63:
ff:90:a6:6f:c3:40:4b:04:7c:ed:36:4c:41:b7:6d:f6:ba:77:
06:23:d9:c9:18:66:33:85:6d:d3:a7:21:24:9b:66:55:15:68:
2c:0b:19:4f:ac:85:a6:19:5d:98:dd:26:34:67:b7:3e:3b:59:
ce:c3:e6:3b:cf:de:ca:ba:8b:d6:84:ef:14:8f:32:30:bb:b5:
e5:6a:ff:eb:47:f1:21:03:f9:ab:b0:b3:69:ba:82:97:d5:30:
09:67:7f:62:e6:71:43:f3:b9:c2:22:21:d9:11:2a:bd:23:96:
4a:1e:e0:0b:97:87:6e:84:59:0b:89:8b:a6:bd:c4:13:2f:ce:
d3:76:09:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe36w0DujeFlPyjug4/RUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhM2UwOGVmM2Q3NTRiYzZhZmE5MWZhNmMxMDAyMGY1ODUw
NWMxNjEwHhcNMjUwNjA3MTMwMTM2WhcNMjUwNjA4MTMwMTM2WjAzMTEwLwYDVQQD
Eyg3NjI3MzA4YmNlYTYxOGRlZTEzZGUxMmQxNTE2OGMzMzEwNTI3YzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBQuYn2+9HmYhDJhLbc3PMtnXcu5
bDGP7OlZlefo128RyYF7GWLgTNxeN6X79yasgCcSG/EaaHPd7B+2/zMsfJQryIbu
/6DJqfwmvnMvUsRmpkZgZt5bz0CMzsiy5d31qOHCECCV/kboSsaoP/Twp4S4VIfY
LaSs3jVO93jwiHSIM96BG6ai2U5PFZ2FvImMJ/CbD+FsJ08gIqhvjsFqI4DTj481
iWCu0+CzLplFPb83WI/CPYclYBr9QpYsEUniEsu3jnEix+URPZpFD6HbxwHqayDF
0lpOdfwdZoDskuyqkp2BVmt4Cdn+oO/VMYpjMqyEsmzmIMys+OYHrqcUjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYnMIvOphje4T3hLRUWjDMQUnyTMB8GA1UdIwQY
MBaAFAo+CO89dUvGr6kfpsEAIPWFBcFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUt
NGQxZDM3ZGM4MWI0LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUtNGQxZDM3ZGM4MWI0
LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmwR1gy5
j0S7TSotXDe603peyvgYCoQDdHXEcdVgkdg3P2HXWGmJPunTulKiUIuq8ZTIwf7V
7XmZ0SWf8qA0sScEV2sAOHY/fZEhmsbD7ScIVh5Yf5y5AuBjs08Cc4+Cuxb1D034
TUVVaDf1Jp6SkQXcMdlOZn3gvaP0GE9j/5Cmb8NASwR87TZMQbdt9rp3BiPZyRhm
M4Vt06chJJtmVRVoLAsZT6yFphldmN0mNGe3PjtZzsPmO8/eyrqL1oTvFI8yMLu1
5Wr/60fxIQP5q7CzabqCl9UwCWd/YuZxQ/O5wiIh2REqvSOWSh7gC5eHboRZC4mL
pr3EEy/O03YJ6w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:45 2025 by rpki-client