Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: 3rk/cYc1DMAyLC23FXXob40rr4t/DQSinUW5iraL2w8=
Subject key identifier: A8:3F:93:D7:E9:C6:E7:12:A6:E3:9B:08:8A:0B:44:46:08:F3:BB:DE
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 0197B70E5798DCCB8B0CE78B1B2B327C9377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 08AE
Signing time: Sat 28 Jun 2025 15:00:59 +0000
Manifest this update: Sat 28 Jun 2025 15:00:59 +0000
Manifest next update: Sun 29 Jun 2025 15:00:59 +0000
Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=)
2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=)
3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: WpPD2vc8VkXwrlczEHP9jxZ7QC+b85w8crjA/Nm3uqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:57:98:dc:cb:8b:0c:e7:8b:1b:2b:32:7c:93:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Jun 28 15:00:59 2025 GMT
Not After : Jun 29 15:00:59 2025 GMT
Subject: CN=a83f93d7e9c6e712a6e39b088a0b444608f3bbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:29:e9:73:1b:dc:14:6b:fb:6b:0b:fd:89:
d9:0a:42:cc:26:dc:9e:76:1a:92:13:e9:de:62:f8:
33:a3:b5:c3:23:f9:93:74:da:d0:0b:be:ea:2c:c7:
18:fb:f6:d2:41:0d:aa:74:46:96:55:54:e2:a6:79:
9c:9e:82:48:30:cd:17:8c:09:a7:90:96:68:98:7f:
bd:c0:49:a1:04:68:48:6a:1d:a5:32:bb:20:17:3a:
2f:81:6c:06:f6:67:c9:3c:aa:02:97:25:d9:28:e8:
53:eb:06:99:3f:ab:c5:4f:d5:7a:83:ed:4d:25:81:
d1:84:e4:c5:71:83:02:44:20:e8:2e:4c:38:88:8e:
cf:ba:4d:5a:e6:03:b8:e5:87:0b:b1:ff:66:ed:fb:
ef:d4:e5:fe:70:10:fc:cf:45:60:34:65:d8:ce:1e:
9a:0f:ef:47:23:76:a6:27:87:80:c5:48:5a:90:65:
be:64:2f:a7:57:87:78:85:a5:c3:f4:9e:a3:b3:e1:
93:cc:5c:22:c8:cf:a7:6b:66:4c:82:83:25:03:00:
0f:87:2d:47:dd:ae:be:f5:9c:09:4f:a1:92:c4:b2:
d3:34:2b:aa:32:7d:50:1a:d0:a4:a8:2e:09:0a:a6:
33:3f:db:86:f3:76:d9:ce:e3:56:7f:6c:a0:4a:68:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3F:93:D7:E9:C6:E7:12:A6:E3:9B:08:8A:0B:44:46:08:F3:BB:DE
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:30:40:f1:68:94:8f:79:e6:bf:10:3c:61:57:23:da:ea:37:
8a:2d:3e:c8:ba:de:12:13:e8:cc:21:78:1c:b1:19:00:01:17:
88:6c:d8:fc:85:0a:bc:3b:51:cb:28:e0:d2:3d:08:b9:8b:3b:
70:de:80:85:06:c0:53:4f:b9:9f:68:67:97:c7:5c:25:00:e3:
a5:66:18:8f:d0:63:d9:12:29:7a:17:bd:8b:6a:bf:e3:d9:3e:
4e:42:f5:f4:dc:ac:b3:1f:6e:22:b2:8c:05:0d:64:28:a9:b8:
bb:b2:ac:d5:c8:48:bf:43:6e:e0:0b:cf:6e:41:60:4a:80:02:
e2:b2:52:cb:67:c7:10:09:30:25:7f:1c:fb:0d:9a:ba:45:13:
9e:4c:2f:33:86:ce:d1:02:13:32:cf:ae:e7:63:73:df:c0:ed:
cf:a3:6e:00:0c:35:a8:1a:3e:a2:b0:77:c8:1d:4b:a3:e8:ba:
df:65:54:f7:a5:95:e0:90:ac:9b:d1:98:c8:c6:52:ad:6f:77:
ca:c9:80:2f:1c:87:f1:d2:67:c7:87:5d:60:a9:00:dc:aa:4a:
51:6e:92:eb:08:1f:b6:dd:1e:ef:e7:e8:81:94:b6:47:2d:ea:
59:3a:93:4c:46:c7:05:74:2c:65:1d:28:36:86:6c:fd:ac:3a:
a8:e7:f2:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DleY3MuLDOeLGysyfJN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmIzNTBlOWY0ZjEyNTllMmY5YzYwOWIyMmU2NWZiZDE4
NjIwNmIwHhcNMjUwNjI4MTUwMDU5WhcNMjUwNjI5MTUwMDU5WjAzMTEwLwYDVQQD
EyhhODNmOTNkN2U5YzZlNzEyYTZlMzliMDg4YTBiNDQ0NjA4ZjNiYmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDIp6XMb3BRr+2sL/YnZCkLMJtye
dhqSE+neYvgzo7XDI/mTdNrQC77qLMcY+/bSQQ2qdEaWVVTipnmcnoJIMM0XjAmn
kJZomH+9wEmhBGhIah2lMrsgFzovgWwG9mfJPKoClyXZKOhT6waZP6vFT9V6g+1N
JYHRhOTFcYMCRCDoLkw4iI7Puk1a5gO45YcLsf9m7fvv1OX+cBD8z0VgNGXYzh6a
D+9HI3amJ4eAxUhakGW+ZC+nV4d4haXD9J6js+GTzFwiyM+na2ZMgoMlAwAPhy1H
3a6+9ZwJT6GSxLLTNCuqMn1QGtCkqC4JCqYzP9uG83bZzuNWf2ygSmiBHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKg/k9fpxucSpuObCIoLREYI87veMB8GA1UdIwQY
MBaAFHJrNQ6fTxJZ4vnGCbIuZfvRhiBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYt
YTAwNzJiYWM5ZjQ4LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYtYTAwNzJiYWM5ZjQ4
LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzBA8WiU
j3nmvxA8YVcj2uo3ii0+yLreEhPozCF4HLEZAAEXiGzY/IUKvDtRyyjg0j0IuYs7
cN6AhQbAU0+5n2hnl8dcJQDjpWYYj9Bj2RIpehe9i2q/49k+TkL19Nyssx9uIrKM
BQ1kKKm4u7Ks1chIv0Nu4AvPbkFgSoAC4rJSy2fHEAkwJX8c+w2aukUTnkwvM4bO
0QITMs+u52Nz38Dtz6NuAAw1qBo+orB3yB1Lo+i632VU96WV4JCsm9GYyMZSrW93
ysmALxyH8dJnx4ddYKkA3KpKUW6S6wgftt0e7+fogZS2Ry3qWTqTTEbHBXQsZR0o
NoZs/aw6qOfy6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:37 2025 by rpki-client