Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier: nBxoXJmarq6ustmB7wSU3zQTSzPjos4WtPAYHmU17PY=
Subject key identifier: F9:3C:6B:44:C5:D2:40:AA:A1:8D:5D:74:E0:AD:45:27:52:9A:23:BC
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial: 0197C493C42AEEC56CA949D87C37F1A489F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number: 0389
Signing time: Tue 01 Jul 2025 06:01:47 +0000
Manifest this update: Tue 01 Jul 2025 06:01:47 +0000
Manifest next update: Wed 02 Jul 2025 06:01:47 +0000
Files and hashes: 1: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: 8/0k3hguXUYi4ykLsatlw7qEqtPzdZ6cs/2B35//S1Y=)
2: lBowDCcGSdkP56eGU0lPL4u_SEM.roa (hash: j0fleVV6sjY4GNZzRXgYAIbJa3v2es0FQGzI6ZY2suc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:c4:2a:ee:c5:6c:a9:49:d8:7c:37:f1:a4:89:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Validity
Not Before: Jul 1 06:01:47 2025 GMT
Not After : Jul 2 06:01:47 2025 GMT
Subject: CN=f93c6b44c5d240aaa18d5d74e0ad4527529a23bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:51:62:75:34:ce:3f:2a:48:a3:e6:2b:f9:
d5:99:02:75:b6:ea:c8:33:f4:68:0b:51:80:1c:40:
f8:60:cf:58:2e:e4:49:8b:c2:18:67:59:72:f5:7d:
d5:7c:0d:0e:d8:e7:a6:ed:a7:45:08:e8:1d:ce:25:
d7:0d:b4:c3:ee:ae:4d:be:b0:a8:ba:42:07:19:4b:
94:78:83:60:14:45:1c:90:85:f9:0d:22:52:0b:3d:
bd:31:9d:84:f3:b8:66:9e:e6:c1:97:88:5b:94:35:
ed:4d:cb:81:61:66:85:24:9b:aa:9a:72:a2:c7:fb:
c0:67:17:bf:f4:28:25:23:3e:00:e3:cc:d9:d0:f6:
bf:e3:1b:44:c4:0f:c8:0b:7f:b7:11:db:0b:63:33:
38:63:09:47:9c:20:e2:1f:da:ad:a3:fd:5b:3b:ce:
6e:ba:a0:4f:49:eb:b6:25:d3:ca:82:f4:dc:39:02:
02:d2:ef:ca:3f:a9:1c:c9:15:d3:fe:62:d3:a1:e8:
54:19:0c:22:67:bc:65:f1:8a:3b:02:f6:67:2d:76:
c0:05:b2:d7:a4:02:da:ed:95:ef:72:20:f7:42:e7:
7f:04:a7:f3:ea:96:8d:41:3a:47:0b:24:ce:4a:8b:
20:3a:ed:9f:00:13:5a:c5:1e:a5:ea:4b:c1:91:59:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:6B:44:C5:D2:40:AA:A1:8D:5D:74:E0:AD:45:27:52:9A:23:BC
X509v3 Authority Key Identifier:
keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4f:89:10:4d:52:fa:07:62:08:14:93:60:bb:79:75:6e:88:
fd:ce:6f:69:ad:38:30:54:d8:be:c6:9b:b3:58:ea:db:d0:f4:
09:f8:88:91:40:30:d1:72:71:ec:25:f9:43:bc:1c:3a:a1:60:
35:39:a4:be:74:e7:db:92:cb:cb:aa:78:f6:9f:0f:bd:72:6c:
1c:00:01:c1:b5:04:67:b5:7c:bf:5b:b4:2d:25:96:19:e1:3b:
c2:73:2c:c7:36:3a:92:d3:48:97:ec:08:9f:9f:7e:92:0d:90:
57:fa:a7:0e:f0:60:88:bb:f5:ac:51:b7:3f:cb:fc:fb:9f:05:
c9:db:d7:bd:57:47:cf:d1:19:76:3b:57:fe:1f:35:5e:e3:70:
09:7c:24:8e:4f:b1:e7:db:05:d1:5c:4f:61:25:3e:a1:f2:a3:
b3:0e:86:82:8f:6f:80:07:09:63:2b:78:03:9c:59:08:21:6a:
8b:81:12:a3:fe:0f:84:17:92:b7:e9:9d:8d:21:87:43:fe:aa:
3f:bf:a2:da:65:c4:1f:09:12:4d:d8:e1:e3:b3:76:53:e2:26:
91:02:cd:c7:71:b2:24:08:ff:98:56:3d:aa:80:61:54:4b:23:
49:38:cd:72:a9:f3:c6:30:c3:cd:13:0b:82:10:2c:b0:00:f4:
7b:2b:38:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEk8Qq7sVsqUnYfDfxpIn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmUyYjI3MzgzN2RiNDE2NjZkNjhhOTdiYzdhYzM3ZGNj
OTZmMjAwHhcNMjUwNzAxMDYwMTQ3WhcNMjUwNzAyMDYwMTQ3WjAzMTEwLwYDVQQD
EyhmOTNjNmI0NGM1ZDI0MGFhYTE4ZDVkNzRlMGFkNDUyNzUyOWEyM2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOpRYnU0zj8qSKPmK/nVmQJ1turI
M/RoC1GAHED4YM9YLuRJi8IYZ1ly9X3VfA0O2Oem7adFCOgdziXXDbTD7q5NvrCo
ukIHGUuUeINgFEUckIX5DSJSCz29MZ2E87hmnubBl4hblDXtTcuBYWaFJJuqmnKi
x/vAZxe/9CglIz4A48zZ0Pa/4xtExA/IC3+3EdsLYzM4YwlHnCDiH9qto/1bO85u
uqBPSeu2JdPKgvTcOQIC0u/KP6kcyRXT/mLToehUGQwiZ7xl8Yo7AvZnLXbABbLX
pALa7ZXvciD3Qud/BKfz6paNQTpHCyTOSosgOu2fABNaxR6l6kvBkVmgvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk8a0TF0kCqoY1ddOCtRSdSmiO8MB8GA1UdIwQY
MBaAFAv+Kyc4N9tBZm1oqXvHrDfcyW8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEt
ZWIxZTkxNjQ0ZjJkLzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEtZWIxZTkxNjQ0ZjJk
LzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArU+JEE1S
+gdiCBSTYLt5dW6I/c5vaa04MFTYvsabs1jq29D0CfiIkUAw0XJx7CX5Q7wcOqFg
NTmkvnTn25LLy6p49p8PvXJsHAABwbUEZ7V8v1u0LSWWGeE7wnMsxzY6ktNIl+wI
n59+kg2QV/qnDvBgiLv1rFG3P8v8+58FydvXvVdHz9EZdjtX/h81XuNwCXwkjk+x
59sF0VxPYSU+ofKjsw6Ggo9vgAcJYyt4A5xZCCFqi4ESo/4PhBeSt+mdjSGHQ/6q
P7+i2mXEHwkSTdjh47N2U+ImkQLNx3GyJAj/mFY9qoBhVEsjSTjNcqnzxjDDzRML
ghAssAD0eys4Xw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:19:38 2025 by rpki-client