Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: ORarQA6PVh/8fwBB3LNMKV6Xdwgv44iQnNMZO8Dbtbc=
Subject key identifier: CC:40:A2:C7:F8:91:E1:BE:C0:6C:D5:AE:F5:5D:FE:C0:DE:A9:4D:59
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 0197B70EB7191603D5EBE54E38F8D9D25EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: 7wYbQJjmUZJ3jrCYQep7ej1ycX8.roa (hash: gX6AQ4uDUscH9HZMwyFhtSxb+YXiJVmytGAK7BhRx4Q=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: 5lKJS9p2iyJElhhM2tf18MePXP/BaaUFul3uHCkAjS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b7:19:16:03:d5:eb:e5:4e:38:f8:d9:d2:5e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=cc40a2c7f891e1bec06cd5aef55dfec0dea94d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:8f:5e:ef:d6:65:f3:04:05:98:b3:00:6e:
45:dc:a7:04:9a:24:05:9c:f8:bc:fd:5c:6a:81:b7:
0f:9f:1e:4a:ae:8a:77:ac:d1:55:bc:1a:5c:f4:69:
58:73:9e:eb:8c:cb:5c:7c:d0:f9:14:b1:59:bc:a4:
5f:20:b3:0b:bc:78:0c:f1:25:8c:71:5e:f4:85:e6:
57:73:0d:b8:12:14:58:5f:a5:08:ca:0d:17:35:73:
fb:69:87:80:40:95:10:e6:a9:f4:f4:75:9c:e0:0a:
21:cf:b0:73:8a:de:72:98:1f:ac:06:d3:b3:7d:ef:
e9:82:95:96:fb:60:d2:21:c6:01:82:35:c8:93:1f:
70:0a:5c:96:14:51:d6:61:ac:f7:a3:d1:94:c4:22:
15:be:e3:f1:0d:d9:d2:cf:75:23:dd:cd:ed:51:62:
5b:1d:21:4e:8a:24:2b:20:c5:bd:1f:40:96:1a:cd:
23:66:88:db:de:34:37:b6:38:d6:98:43:7d:a3:07:
20:0b:88:74:13:86:c5:63:25:01:71:0c:07:f9:77:
06:b6:c3:99:73:c8:7f:6f:c1:7d:2e:b6:5b:ed:f4:
1a:2e:94:69:a8:24:e0:fb:69:b3:b3:12:75:fe:8e:
0a:ee:2b:b6:b0:a2:c9:5c:99:ad:37:1f:eb:54:a6:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:40:A2:C7:F8:91:E1:BE:C0:6C:D5:AE:F5:5D:FE:C0:DE:A9:4D:59
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:38:fe:cd:9e:3e:3c:24:4e:75:ea:62:fb:1c:a6:e4:e1:71:
77:9e:c8:9a:f1:c1:27:66:b0:92:f7:d3:c9:bd:be:a8:72:45:
e1:1c:aa:2a:0f:42:0b:6c:70:a5:c9:a6:2a:a8:02:51:15:d7:
80:fa:cb:2b:6c:73:6b:22:a1:51:ba:80:69:14:5f:d8:6a:ad:
df:4c:60:8d:ab:c1:9e:7c:63:56:31:69:ce:e7:58:4c:16:fc:
e2:03:8d:ae:2f:80:d3:96:27:65:81:c1:24:4d:98:45:04:b8:
e7:89:64:5e:bb:ed:5d:8b:5b:7c:8d:b9:bb:c3:e2:61:47:a0:
47:c8:50:f1:bd:79:eb:9d:9f:00:8b:c3:c0:82:ce:84:44:e6:
85:e0:36:e3:77:f4:9f:1b:e7:fb:20:53:07:70:0e:cb:bd:52:
23:62:fc:c0:6b:48:ef:07:5b:67:76:77:b8:d0:36:eb:1c:76:
38:b0:ed:4b:76:c3:2f:83:3c:95:a0:b2:d0:3f:36:1a:09:39:
53:cf:41:e0:ed:a2:76:fd:79:9e:66:52:9b:b4:bd:c1:04:67:
91:20:da:90:f6:04:c8:f9:b1:44:38:9c:63:fd:a7:99:47:4f:
57:08:f1:21:f4:e5:49:bf:5e:4c:3e:71:e8:6e:fe:4c:3d:56:
df:3a:b2:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DrcZFgPV6+VOOPjZ0l6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZGJlYTA3NTNkZjA4M2U1NzgyYmI5ZjM4MGI1ZDc5OWNi
NzhhMDYwHhcNMjUwNjI4MTUwMTI0WhcNMjUwNjI5MTUwMTI0WjAzMTEwLwYDVQQD
EyhjYzQwYTJjN2Y4OTFlMWJlYzA2Y2Q1YWVmNTVkZmVjMGRlYTk0ZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOOPXu/WZfMEBZizAG5F3KcEmiQF
nPi8/VxqgbcPnx5Krop3rNFVvBpc9GlYc57rjMtcfND5FLFZvKRfILMLvHgM8SWM
cV70heZXcw24EhRYX6UIyg0XNXP7aYeAQJUQ5qn09HWc4Aohz7Bzit5ymB+sBtOz
fe/pgpWW+2DSIcYBgjXIkx9wClyWFFHWYaz3o9GUxCIVvuPxDdnSz3Uj3c3tUWJb
HSFOiiQrIMW9H0CWGs0jZojb3jQ3tjjWmEN9owcgC4h0E4bFYyUBcQwH+XcGtsOZ
c8h/b8F9LrZb7fQaLpRpqCTg+2mzsxJ1/o4K7iu2sKLJXJmtNx/rVKYwhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxAosf4keG+wGzVrvVd/sDeqU1ZMB8GA1UdIwQY
MBaAFHDb6gdT3wg+V4K7nzgLXXmct4oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZWVjMmUtMGNkNi00MTEzLWIyYjkt
MmEwY2YxMzE3M2Q4LzEvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZWVjMmUtMGNkNi00MTEzLWIyYjktMmEwY2YxMzE3M2Q4
LzEvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADj+zZ4+
PCROdepi+xym5OFxd57ImvHBJ2awkvfTyb2+qHJF4RyqKg9CC2xwpcmmKqgCURXX
gPrLK2xzayKhUbqAaRRf2Gqt30xgjavBnnxjVjFpzudYTBb84gONri+A05YnZYHB
JE2YRQS454lkXrvtXYtbfI25u8PiYUegR8hQ8b15652fAIvDwILOhETmheA243f0
nxvn+yBTB3AOy71SI2L8wGtI7wdbZ3Z3uNA26xx2OLDtS3bDL4M8laCy0D82Ggk5
U89B4O2idv15nmZSm7S9wQRnkSDakPYEyPmxRDicY/2nmUdPVwjxIfTlSb9eTD5x
6G7+TD1W3zqyHg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:17 2025 by rpki-client