Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: bBnRK8OjPmGUpaEh47ATBuiiK4RNWO4kn7eBWjAmHOs=
Subject key identifier: 80:1D:5A:FD:95:28:C7:B7:F7:C4:0D:E7:39:A2:FE:42:65:A1:45:A9
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 0197B6A244B678D4D80989CC090E06F64F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 09F2
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: 9XzWEFmaKvZenST9aWPyNW1V4yF3xhPqYqjDZiydziA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:44:b6:78:d4:d8:09:89:cc:09:0e:06:f6:4f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=801d5afd9528c7b7f7c40de739a2fe4265a145a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:35:51:46:c7:d1:48:57:4b:fd:ad:5d:ab:
89:6c:7b:c3:5e:2e:24:4d:96:ab:c1:54:45:01:6b:
73:bc:2b:76:77:d9:f8:bf:b7:19:4a:bc:b0:a3:25:
c2:10:7e:af:74:b5:ea:23:b7:18:35:39:74:95:fe:
c6:e6:26:dd:5b:d8:4c:d9:d0:1a:00:96:80:3b:af:
39:59:4b:a4:10:4c:6e:70:eb:57:cc:8a:23:58:7c:
a0:9d:24:92:4a:2f:e4:43:9f:fe:8a:3f:db:69:ff:
67:40:d7:5b:57:37:96:d4:b4:17:39:fb:d8:f7:da:
75:0c:36:9b:b1:97:6b:d7:e3:91:63:61:cd:80:da:
46:a2:31:66:68:76:98:e3:42:95:8d:ba:75:e7:f5:
4c:b9:12:06:99:e6:bd:47:10:ee:5e:91:05:c1:8d:
7f:13:f7:a9:3e:05:a0:a9:f9:9d:cd:0c:2e:e3:c6:
8a:4b:ae:46:27:27:8b:69:b0:bb:4e:90:ef:20:2e:
77:cc:33:44:8e:2a:67:21:76:11:3f:92:a1:ab:15:
48:5c:da:7c:36:fb:d6:7e:84:fb:cd:f4:5c:14:e1:
c0:7f:ba:79:b9:47:03:08:7f:b7:70:53:b4:72:07:
b3:68:52:dc:63:d4:d2:09:4a:9c:26:66:2d:21:80:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:5A:FD:95:28:C7:B7:F7:C4:0D:E7:39:A2:FE:42:65:A1:45:A9
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:14:76:b0:8e:1d:88:6b:32:aa:43:a9:6b:64:b9:95:34:60:
3a:fa:7a:90:c3:23:32:02:f0:ca:81:66:7c:24:c4:fa:3c:a7:
66:3c:33:c4:17:b5:c0:27:20:2b:ef:92:3d:09:3e:61:dd:8c:
e6:1e:27:2c:94:89:8d:72:cd:8d:e0:a4:77:77:b9:7c:e3:58:
56:62:44:13:dd:46:19:c7:51:57:83:aa:95:5d:5b:ab:3f:71:
8d:5e:8b:7d:0b:ba:6a:9b:a2:7e:66:5b:e9:3b:77:b7:b7:64:
69:7c:e2:d5:b6:42:cf:e6:fe:dd:e5:f0:46:d7:ba:1d:9a:3b:
4e:59:a2:6c:20:42:bf:6a:3e:6b:4d:9c:6e:8a:e1:ca:d9:21:
1f:00:81:64:cb:e3:5b:05:13:0c:a5:ad:91:50:f1:46:f0:d6:
3f:41:44:6c:9f:35:a8:ed:53:3f:41:52:1d:a5:b1:d8:32:cd:
48:7e:a3:23:b7:1b:fe:7d:b1:af:f1:a6:5d:de:46:c4:12:be:
72:24:22:4b:5f:60:13:1c:e0:03:2a:57:21:df:bb:d6:07:d7:
07:45:a7:4f:7e:b8:f6:7b:15:5e:8d:e9:83:48:68:a9:1e:9c:
e5:b6:ba:42:d5:8e:6a:f6:34:a0:36:7d:e7:1d:7f:32:90:b4:
5e:b4:d1:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2okS2eNTYCYnMCQ4G9k9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzdiZDE0MzI5ODZkN2I1YjljNmU5Mzg2NWU1NDNhYmFm
NGYwZmIwHhcNMjUwNjI4MTMwMjU3WhcNMjUwNjI5MTMwMjU3WjAzMTEwLwYDVQQD
Eyg4MDFkNWFmZDk1MjhjN2I3ZjdjNDBkZTczOWEyZmU0MjY1YTE0NWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLs1UUbH0UhXS/2tXauJbHvDXi4k
TZarwVRFAWtzvCt2d9n4v7cZSrywoyXCEH6vdLXqI7cYNTl0lf7G5ibdW9hM2dAa
AJaAO685WUukEExucOtXzIojWHygnSSSSi/kQ5/+ij/baf9nQNdbVzeW1LQXOfvY
99p1DDabsZdr1+ORY2HNgNpGojFmaHaY40KVjbp15/VMuRIGmea9RxDuXpEFwY1/
E/epPgWgqfmdzQwu48aKS65GJyeLabC7TpDvIC53zDNEjipnIXYRP5KhqxVIXNp8
NvvWfoT7zfRcFOHAf7p5uUcDCH+3cFO0cgezaFLcY9TSCUqcJmYtIYDUcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAdWv2VKMe398QN5zmi/kJloUWpMB8GA1UdIwQY
MBaAFAs3vRQymG17W5xuk4ZeVDq69PD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jNGQwODQtMWI2OC00ZGEyLTk4YzYt
NDU1ZDUyZjkwMGMwLzEvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jNGQwODQtMWI2OC00ZGEyLTk4YzYtNDU1ZDUyZjkwMGMw
LzEvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRR2sI4d
iGsyqkOpa2S5lTRgOvp6kMMjMgLwyoFmfCTE+jynZjwzxBe1wCcgK++SPQk+Yd2M
5h4nLJSJjXLNjeCkd3e5fONYVmJEE91GGcdRV4OqlV1bqz9xjV6LfQu6apuifmZb
6Tt3t7dkaXzi1bZCz+b+3eXwRte6HZo7TlmibCBCv2o+a02cborhytkhHwCBZMvj
WwUTDKWtkVDxRvDWP0FEbJ81qO1TP0FSHaWx2DLNSH6jI7cb/n2xr/GmXd5GxBK+
ciQiS19gExzgAypXId+71gfXB0WnT3649nsVXo3pg0hoqR6c5ba6QtWOavY0oDZ9
5x1/MpC0XrTR4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:00 2025 by rpki-client