Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: rxhmsm2+8SyxUWgXbnN7kYlaDLje0doSvi4Izq3+JeQ=
Subject key identifier: 8D:31:74:29:AD:08:99:B1:F5:D5:0F:BC:29:8E:5A:B0:4C:A4:DA:B4
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 0197B7456D8BC2FA43C9428B24C8BE5604B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 12CE
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: I4mwa8XzDrbSzquo4U8FKZkXFfAMPbxHZ6gt3Fp9BRo=)
2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6d:8b:c2:fa:43:c9:42:8b:24:c8:be:56:04:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=8d317429ad0899b1f5d50fbc298e5ab04ca4dab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:0c:a3:cd:c5:49:c1:ca:07:d9:f6:da:10:
92:20:0a:52:db:a9:4a:72:f0:7c:6d:a0:44:52:aa:
55:55:e1:7c:41:d7:e5:bb:20:33:44:8a:3a:a8:cc:
18:1e:47:d0:fd:bc:bc:d1:71:af:9d:bf:3a:ab:99:
5d:4c:0f:1b:80:28:56:20:fc:66:5f:59:02:a7:0c:
78:07:f0:2b:99:fa:d2:a8:d7:fa:7b:b9:5e:cd:6a:
e3:b8:12:49:d2:c1:0a:8c:f6:29:7e:dd:b5:0d:61:
a5:75:8f:79:23:f8:04:ba:59:4a:3a:17:95:89:5d:
72:42:5e:d4:21:36:c3:4d:29:cc:94:21:45:02:29:
25:63:ca:aa:b5:21:91:1c:93:f4:06:50:8b:07:73:
fb:16:2f:90:26:f5:18:01:60:3b:9a:b4:07:ac:ff:
53:b4:46:52:e9:99:b8:cb:92:42:a2:a9:99:08:75:
3b:52:90:5d:e4:0f:53:5e:5a:50:e7:e9:a6:00:fd:
e0:3f:95:a5:d7:c0:1d:a0:79:e0:09:15:20:6b:ee:
06:f3:e9:5e:55:c7:eb:d8:62:07:d5:8a:94:43:83:
c6:6c:1f:71:9b:e6:7e:c8:e0:5e:f4:0d:d8:be:ef:
50:d9:e5:01:5a:15:c4:82:a0:70:72:46:a9:84:88:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:31:74:29:AD:08:99:B1:F5:D5:0F:BC:29:8E:5A:B0:4C:A4:DA:B4
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:60:e5:2c:25:bd:3c:b1:e3:14:a9:e5:2d:16:19:04:00:ff:
0b:6a:67:b9:aa:26:d9:a2:28:2f:0c:a5:0f:9c:9d:00:d5:68:
63:cf:97:74:0c:8a:45:28:51:c9:12:ee:85:c3:e6:4c:4c:45:
be:4f:db:b0:98:25:35:f4:28:50:e0:d0:e4:e4:3f:5b:fe:1c:
d0:d8:96:c5:7e:b8:c8:57:ab:7a:19:38:11:7a:12:99:f7:ae:
fa:9d:58:68:a6:a9:98:ee:01:a1:30:06:f8:56:a0:d7:83:a7:
4b:b4:36:f1:ef:23:d5:6d:e4:bd:3c:a2:8e:b1:30:6a:95:88:
a1:75:ef:05:60:70:ff:2f:e4:6a:27:94:3f:74:12:37:35:79:
5b:6d:5c:1b:dd:80:e1:d5:aa:0e:84:bb:46:71:af:72:c9:92:
bb:4f:87:32:3f:3a:45:91:e3:d4:20:c9:7d:bd:a1:ac:3f:13:
70:73:86:cd:8c:75:48:39:f5:7b:19:4a:eb:23:6c:8e:d8:27:
9f:8e:f8:ee:1c:95:b4:f9:91:b9:5f:97:37:aa:66:d2:0b:14:
3e:09:a8:14:6a:cb:96:2e:5a:b8:ae:b9:e1:f6:19:94:3b:89:
ce:b6:cf:61:c9:9d:62:24:90:ed:d6:97:5d:7b:29:7b:58:d1:
31:40:39:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RW2LwvpDyUKLJMi+VgSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDkyZDI3NDc4MTQzYzZhZTM5MDVjNDdmNTg0N2RmOWMw
MmY0MTMwHhcNMjUwNjI4MTYwMTA5WhcNMjUwNjI5MTYwMTA5WjAzMTEwLwYDVQQD
Eyg4ZDMxNzQyOWFkMDg5OWIxZjVkNTBmYmMyOThlNWFiMDRjYTRkYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgcMo83FScHKB9n22hCSIApS26lK
cvB8baBEUqpVVeF8QdfluyAzRIo6qMwYHkfQ/by80XGvnb86q5ldTA8bgChWIPxm
X1kCpwx4B/ArmfrSqNf6e7lezWrjuBJJ0sEKjPYpft21DWGldY95I/gEullKOheV
iV1yQl7UITbDTSnMlCFFAiklY8qqtSGRHJP0BlCLB3P7Fi+QJvUYAWA7mrQHrP9T
tEZS6Zm4y5JCoqmZCHU7UpBd5A9TXlpQ5+mmAP3gP5Wl18AdoHngCRUga+4G8+le
Vcfr2GIH1YqUQ4PGbB9xm+Z+yOBe9A3Yvu9Q2eUBWhXEgqBwckaphIiXNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0xdCmtCJmx9dUPvCmOWrBMpNq0MB8GA1UdIwQY
MBaAFAgJLSdHgUPGrjkFxH9YR9+cAvQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hYTk1ZTMtNTA4Mi00ZmE3LWE3YWIt
OTRjZjNhMzViZjhjLzEvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hYTk1ZTMtNTA4Mi00ZmE3LWE3YWItOTRjZjNhMzViZjhj
LzEvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2DlLCW9
PLHjFKnlLRYZBAD/C2pnuaom2aIoLwylD5ydANVoY8+XdAyKRShRyRLuhcPmTExF
vk/bsJglNfQoUODQ5OQ/W/4c0NiWxX64yFerehk4EXoSmfeu+p1YaKapmO4BoTAG
+Fag14OnS7Q28e8j1W3kvTyijrEwapWIoXXvBWBw/y/kaieUP3QSNzV5W21cG92A
4dWqDoS7RnGvcsmSu0+HMj86RZHj1CDJfb2hrD8TcHOGzYx1SDn1exlK6yNsjtgn
n4747hyVtPmRuV+XN6pm0gsUPgmoFGrLli5auK654fYZlDuJzrbPYcmdYiSQ7daX
XXspe1jRMUA5/g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:36 2025 by rpki-client