Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: umTIiwQ0NNKulRw46JBAwYzImMNQi/xYyndACNh1CII=
Subject key identifier: A9:4D:4A:03:C7:07:7A:E7:5F:0E:9F:65:24:33:10:05:B5:C3:FA:3E
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 0197B8213F6E7E28812C75B6B60D502714B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 031B
Signing time: Sat 28 Jun 2025 20:01:16 +0000
Manifest this update: Sat 28 Jun 2025 20:01:16 +0000
Manifest next update: Sun 29 Jun 2025 20:01:16 +0000
Files and hashes: 1: 7SbxWOq-MRP5ULWQ2099XB6fnsw.roa (hash: 5+GTdZJjZ/hGlJyiza+hMgn0Xvc9DgVXyOpbY9SRSSQ=)
2: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: uyJFj7IIZ0UdwGt9KX4qoMloaSU70Ol0vKuXGaGRPX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3f:6e:7e:28:81:2c:75:b6:b6:0d:50:27:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Jun 28 20:01:16 2025 GMT
Not After : Jun 29 20:01:16 2025 GMT
Subject: CN=a94d4a03c7077ae75f0e9f6524331005b5c3fa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6c:7d:b2:fc:15:c1:44:bd:61:0b:d1:84:d0:
ac:11:55:9b:bd:e4:83:77:52:ef:55:6e:6a:72:00:
a6:9b:b7:0a:c2:0c:10:00:2b:10:47:58:7e:8c:0d:
a3:b4:52:1c:9e:5f:a1:4e:d8:37:a5:82:2e:c0:b9:
f4:b8:4d:43:e8:f4:5e:5e:c0:b4:63:2b:f2:b2:2d:
2c:b2:0b:93:aa:50:87:5e:8f:d2:b6:7a:24:0e:a4:
36:80:77:a5:cb:6d:53:f7:77:9a:63:b0:e7:1a:bd:
23:f1:ad:47:e5:27:0d:98:43:98:5a:a8:ac:bc:fe:
34:a3:cf:7f:6e:1d:e4:08:4a:06:fb:c4:20:a7:b5:
18:e7:e1:e1:20:81:a9:69:d8:82:25:9e:85:7e:3f:
35:f9:20:6d:a4:7a:0b:20:75:54:17:b1:38:1f:7d:
4c:68:60:1c:4e:c9:8c:21:dc:6d:15:ef:04:48:66:
56:60:37:05:0f:09:a0:86:34:c1:35:e1:7f:4d:e6:
e3:ae:7e:0d:9b:a7:17:b5:7f:eb:be:4c:59:d5:10:
86:f5:2a:02:9e:32:89:c0:25:7e:02:1d:6c:38:fb:
3b:50:af:6a:88:fa:e5:a9:24:ef:99:74:fb:0b:4a:
e6:6a:7f:8b:4d:dc:f0:11:e4:52:7e:ca:e6:02:03:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4D:4A:03:C7:07:7A:E7:5F:0E:9F:65:24:33:10:05:B5:C3:FA:3E
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4e:d0:b9:b9:aa:d9:f2:0f:19:da:8c:f1:7a:c6:ec:63:99:
f3:85:9a:55:43:d0:4b:72:49:9a:9c:d4:68:fd:d6:3c:b6:02:
64:f7:d7:e7:f6:59:c3:33:3b:83:f1:e6:42:82:96:9d:67:4f:
d6:c3:02:27:b0:04:81:4a:6d:37:fd:ca:cc:81:34:3a:60:9f:
75:a4:6a:e6:81:e8:d5:dc:d4:07:c7:98:06:8a:71:97:d9:fb:
e7:63:5b:ae:dd:fe:c2:a2:f1:2e:17:d1:29:28:f2:e7:4d:23:
97:7c:97:3f:81:cd:6f:1b:a2:0b:72:41:47:92:56:13:97:04:
d8:40:0f:92:35:39:93:d9:40:60:e3:5f:36:17:61:2b:3e:5b:
60:b7:3d:d5:3c:62:82:71:11:d3:00:f3:9a:4d:4c:67:44:fa:
21:9c:fa:da:a0:fa:4d:23:dc:d4:94:22:5d:6a:09:70:32:0c:
1f:16:0d:bc:b7:4d:47:17:b8:65:f0:1c:6f:14:28:a0:67:8d:
4e:cb:9b:b6:bf:d4:cc:a8:d9:7e:ef:39:93:b3:b3:65:4e:15:
ba:c1:62:93:49:22:84:3c:60:7e:3c:f8:30:80:5f:67:21:ab:
cc:5a:a2:28:3a:b6:12:3d:25:f6:a2:9e:93:5b:9b:95:27:22:
c1:9e:ca:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IT9ufiiBLHW2tg1QJxS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjE0N2QzOWU0M2JiNzVmOWY3YWZmNDVlN2JmMmI4MzUz
MGY4NzQwHhcNMjUwNjI4MjAwMTE2WhcNMjUwNjI5MjAwMTE2WjAzMTEwLwYDVQQD
EyhhOTRkNGEwM2M3MDc3YWU3NWYwZTlmNjUyNDMzMTAwNWI1YzNmYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72x9svwVwUS9YQvRhNCsEVWbveSD
d1LvVW5qcgCmm7cKwgwQACsQR1h+jA2jtFIcnl+hTtg3pYIuwLn0uE1D6PReXsC0
Yyvysi0ssguTqlCHXo/StnokDqQ2gHely21T93eaY7DnGr0j8a1H5ScNmEOYWqis
vP40o89/bh3kCEoG+8Qgp7UY5+HhIIGpadiCJZ6Ffj81+SBtpHoLIHVUF7E4H31M
aGAcTsmMIdxtFe8ESGZWYDcFDwmghjTBNeF/Tebjrn4Nm6cXtX/rvkxZ1RCG9SoC
njKJwCV+Ah1sOPs7UK9qiPrlqSTvmXT7C0rman+LTdzwEeRSfsrmAgMhbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlNSgPHB3rnXw6fZSQzEAW1w/o+MB8GA1UdIwQY
MBaAFAixR9OeQ7t1+fev9F578rg1MPh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xGSDA1NUR1M1g1OTZfMFhudnl1RFV3LUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82YWM3M2EtNmI1Zi00MjMyLTliOGMt
MzA1ZTMzZWY4YjI5LzEvQ0xGSDA1NUR1M1g1OTZfMFhudnl1RFV3LUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82YWM3M2EtNmI1Zi00MjMyLTliOGMtMzA1ZTMzZWY4YjI5
LzEvQ0xGSDA1NUR1M1g1OTZfMFhudnl1RFV3LUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI07Qubmq
2fIPGdqM8XrG7GOZ84WaVUPQS3JJmpzUaP3WPLYCZPfX5/ZZwzM7g/HmQoKWnWdP
1sMCJ7AEgUptN/3KzIE0OmCfdaRq5oHo1dzUB8eYBopxl9n752Nbrt3+wqLxLhfR
KSjy500jl3yXP4HNbxuiC3JBR5JWE5cE2EAPkjU5k9lAYONfNhdhKz5bYLc91Txi
gnER0wDzmk1MZ0T6IZz62qD6TSPc1JQiXWoJcDIMHxYNvLdNRxe4ZfAcbxQooGeN
Tsubtr/UzKjZfu85k7OzZU4VusFik0kihDxgfjz4MIBfZyGrzFqiKDq2Ej0l9qKe
k1ublSciwZ7KFw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:54 2025 by rpki-client