Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: mfBeYDe1mUKXV1IxpVPCI9fmf43QDQjSxhG6Naqt3cc=
Subject key identifier: 51:88:03:72:CA:D2:52:70:D0:66:C2:CE:C2:C2:97:C8:F8:3D:0A:B8
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 0197B6A0CAE2E1CEB9312487C0CC7973C41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 0FE6
Signing time: Sat 28 Jun 2025 13:01:20 +0000
Manifest this update: Sat 28 Jun 2025 13:01:20 +0000
Manifest next update: Sun 29 Jun 2025 13:01:20 +0000
Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: A5JFQCaSl+kQBm8avT9BlwnZCPcnO8Dc2PJSuQw9HiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ca:e2:e1:ce:b9:31:24:87:c0:cc:79:73:c4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jun 28 13:01:20 2025 GMT
Not After : Jun 29 13:01:20 2025 GMT
Subject: CN=51880372cad25270d066c2cec2c297c8f83d0ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:ab:45:a0:b7:b3:4d:67:7e:62:7c:1a:aa:
6d:e5:ef:7d:f9:ac:0c:7d:b4:4b:b4:32:3e:d5:b6:
bb:01:62:36:0a:56:36:0e:78:f0:0c:fa:84:1b:3d:
48:d3:fc:49:1c:f7:0f:04:25:e0:b9:b6:c3:c8:b4:
b4:18:52:b9:c2:bc:6a:13:4f:11:aa:09:0e:1f:d9:
4e:1e:1d:02:a2:11:43:c5:e8:5d:4d:81:33:a7:0c:
df:0d:b4:98:77:a4:a0:e8:c2:dd:9c:dd:60:68:c1:
d6:27:7e:9a:5e:0d:39:1e:7e:a3:65:04:e8:90:84:
0a:b0:74:32:e4:cb:c8:94:17:a4:34:e4:41:3d:dd:
db:46:22:14:d9:ed:e0:6c:d0:8e:45:70:ee:c7:d2:
8c:91:2d:32:f8:a7:46:ba:89:c2:3a:c5:d8:8b:79:
be:88:8a:1c:67:22:dd:05:fc:1f:f6:30:ed:d8:d9:
19:51:8c:bc:93:0f:87:e4:23:57:89:55:f3:59:7b:
22:a7:16:13:5b:e9:4b:27:c8:43:b4:3f:1b:aa:f6:
ce:a2:2f:ce:f3:3c:73:c1:e5:af:30:a1:ed:76:50:
a5:4c:e8:b3:d7:7d:e5:38:b7:0a:cd:4c:2f:0c:69:
52:5b:c7:b7:10:df:6c:3c:f3:7f:be:d2:68:84:71:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:88:03:72:CA:D2:52:70:D0:66:C2:CE:C2:C2:97:C8:F8:3D:0A:B8
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bf:44:f9:d4:5e:d6:7e:95:d0:d8:82:ee:7d:0e:f4:f7:63:
dc:8e:1a:48:73:a1:be:0d:05:d7:91:60:8a:6f:35:46:41:82:
55:f8:03:58:71:34:ef:0e:cd:80:00:4d:cd:10:61:f4:2f:c2:
0a:23:a6:1f:30:a6:af:28:19:3e:81:4f:5d:25:db:87:7a:4a:
a9:a6:99:76:85:9e:d7:20:ba:6c:e5:93:f1:b5:b3:88:7e:53:
d0:39:4b:15:7e:6b:50:b6:07:91:eb:00:08:71:3b:ef:41:58:
5c:56:1e:ad:e3:5e:e8:dd:5f:eb:89:5b:82:cd:17:ef:3d:08:
a7:54:c5:cf:3e:b8:9e:a2:fa:b9:d1:8f:a3:bd:04:61:ef:80:
fd:fe:05:9e:bb:f7:11:c4:26:21:4d:77:8d:1e:fe:2f:d9:c5:
f6:bc:48:e8:9e:68:a7:51:3b:6d:52:6d:13:bc:27:09:fc:62:
c9:eb:e4:63:91:09:e7:5a:e8:1f:d6:51:07:43:4c:a2:95:49:
e4:c1:91:27:06:53:3f:ca:b3:b1:ac:ea:00:85:7d:45:85:89:
90:29:19:f2:d9:a2:a0:2c:f9:51:c5:99:0f:1c:23:4b:c1:5e:
f5:0d:23:d1:27:27:86:8e:d5:5f:a4:bd:29:93:31:bb:4b:18:
d6:51:7a:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oMri4c65MSSHwMx5c8QaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy
OWVhMWYwHhcNMjUwNjI4MTMwMTIwWhcNMjUwNjI5MTMwMTIwWjAzMTEwLwYDVQQD
Eyg1MTg4MDM3MmNhZDI1MjcwZDA2NmMyY2VjMmMyOTdjOGY4M2QwYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWqrRaC3s01nfmJ8Gqpt5e99+awM
fbRLtDI+1ba7AWI2ClY2DnjwDPqEGz1I0/xJHPcPBCXgubbDyLS0GFK5wrxqE08R
qgkOH9lOHh0CohFDxehdTYEzpwzfDbSYd6Sg6MLdnN1gaMHWJ36aXg05Hn6jZQTo
kIQKsHQy5MvIlBekNORBPd3bRiIU2e3gbNCORXDux9KMkS0y+KdGuonCOsXYi3m+
iIocZyLdBfwf9jDt2NkZUYy8kw+H5CNXiVXzWXsipxYTW+lLJ8hDtD8bqvbOoi/O
8zxzweWvMKHtdlClTOiz133lOLcKzUwvDGlSW8e3EN9sPPN/vtJohHFKuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGIA3LK0lJw0GbCzsLCl8j4PQq4MB8GA1UdIwQY
MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt
ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1
LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfL9E+dRe
1n6V0NiC7n0O9Pdj3I4aSHOhvg0F15Fgim81RkGCVfgDWHE07w7NgABNzRBh9C/C
CiOmHzCmrygZPoFPXSXbh3pKqaaZdoWe1yC6bOWT8bWziH5T0DlLFX5rULYHkesA
CHE770FYXFYereNe6N1f64lbgs0X7z0Ip1TFzz64nqL6udGPo70EYe+A/f4Fnrv3
EcQmIU13jR7+L9nF9rxI6J5op1E7bVJtE7wnCfxiyevkY5EJ51roH9ZRB0NMopVJ
5MGRJwZTP8qzsazqAIV9RYWJkCkZ8tmioCz5UcWZDxwjS8Fe9Q0j0Scnho7VX6S9
KZMxu0sY1lF6Lg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:24 2025 by rpki-client