Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: CCGW/sVJBfynqhvjNgGZuNhqBG15js+As7RWul0oQRQ=
Subject key identifier: E2:9F:5D:4C:1A:CE:8F:67:51:37:86:B7:22:24:37:20:FF:D8:96:F4
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 0197B77CADEF43D9972CE761A3B4181B2391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 0F7F
Signing time: Sat 28 Jun 2025 17:01:30 +0000
Manifest this update: Sat 28 Jun 2025 17:01:30 +0000
Manifest next update: Sun 29 Jun 2025 17:01:30 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: T5v1+LoGTdilj2B3LQh/JifbYUt3EpGhjjifv8iluqI=)
2: wvWJOusH9NjJmboQYN_96qUtjQA.roa (hash: lhwOpS83eW02+y1JcgzOi5Azi+mkqj4nFLbrmvvJkxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ad:ef:43:d9:97:2c:e7:61:a3:b4:18:1b:23:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Jun 28 17:01:30 2025 GMT
Not After : Jun 29 17:01:30 2025 GMT
Subject: CN=e29f5d4c1ace8f67513786b722243720ffd896f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:97:86:4f:1d:87:9f:d9:49:a9:1c:29:8c:
43:83:c3:13:8e:a1:84:ad:2c:65:31:50:ff:ca:b7:
7c:b5:b2:c4:d7:79:25:00:79:cd:d6:18:e6:8c:d8:
ce:a3:a2:17:71:c1:99:30:f4:15:07:c4:26:ee:cc:
a8:4f:96:0e:21:61:8e:22:57:26:66:de:0b:e3:8c:
d6:f8:58:49:d1:d6:de:10:e1:d2:fe:19:62:e9:23:
1b:37:25:14:bd:38:8d:63:56:25:ce:d0:99:e4:30:
98:c4:e0:f2:d4:64:a8:8c:08:f0:89:59:c1:45:86:
1a:9d:a8:5a:62:af:1f:f9:ff:5b:a4:1c:15:da:99:
e4:64:95:ae:4d:b8:fa:a1:bd:48:2b:93:2d:7a:32:
70:a8:17:cd:6d:56:5f:14:18:80:3f:7c:04:3e:7b:
d8:1a:8a:fd:01:d3:3a:52:2e:d4:df:ba:bc:cb:29:
ce:fd:de:08:98:da:26:3a:17:d2:a6:9c:58:e4:ad:
94:1c:bc:df:3c:4f:5a:83:3f:43:0d:73:f2:60:57:
e8:a5:96:6e:5b:58:fd:f9:13:f1:f0:ba:32:0b:16:
c4:e7:a5:7e:b7:e0:93:bd:be:4e:4e:d6:11:de:36:
6a:24:ac:68:0e:48:4a:0a:d7:f8:ec:d9:ea:eb:ba:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9F:5D:4C:1A:CE:8F:67:51:37:86:B7:22:24:37:20:FF:D8:96:F4
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:db:97:b6:be:8f:b8:7b:b5:d5:12:15:0e:b3:5b:80:d6:6f:
3f:27:a6:ff:ef:4f:4c:29:b7:68:59:a2:93:f1:f4:15:e4:a5:
f2:31:ad:ad:0f:bc:7d:1a:a4:95:5c:da:a5:6e:16:da:5a:15:
d3:26:af:f9:86:c8:dd:a6:38:29:d0:23:b1:d1:9d:03:fe:24:
0d:c0:42:6b:e7:da:ff:be:b1:69:d5:9d:4d:d8:02:ff:1a:e9:
59:04:d6:b7:89:e4:6a:81:d4:f6:92:a5:7e:55:93:69:fb:b5:
a2:46:82:a2:0c:d8:cc:fe:00:4d:30:f8:50:9e:01:19:71:9a:
8b:13:9b:71:7e:e1:04:f2:cc:80:fb:cc:03:80:a2:83:71:a5:
58:61:26:f0:06:14:c2:d6:9c:d3:6c:60:52:be:c3:fd:8d:fb:
87:58:c4:b7:a1:ef:39:47:c9:93:9c:5f:29:b2:ac:91:9b:dd:
2c:c3:f8:6e:02:55:b8:82:21:88:9b:c9:6b:13:7d:d5:57:e0:
a2:28:f1:0d:3b:79:6b:61:2a:f6:18:37:22:0f:a7:fb:e5:6c:
8a:48:65:fe:93:12:3e:20:87:be:1d:14:9b:aa:35:2c:ab:58:
dc:ed:a9:f1:3a:39:f4:90:4c:62:71:fa:29:00:98:c2:f2:07:
d1:62:59:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fK3vQ9mXLOdho7QYGyORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDAzZTcxZWY4YzNkOTczY2U3NmQ0MjA0MmY3ZGZhMTg5
MTY4OGIwHhcNMjUwNjI4MTcwMTMwWhcNMjUwNjI5MTcwMTMwWjAzMTEwLwYDVQQD
EyhlMjlmNWQ0YzFhY2U4ZjY3NTEzNzg2YjcyMjI0MzcyMGZmZDg5NmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DOXhk8dh5/ZSakcKYxDg8MTjqGE
rSxlMVD/yrd8tbLE13klAHnN1hjmjNjOo6IXccGZMPQVB8Qm7syoT5YOIWGOIlcm
Zt4L44zW+FhJ0dbeEOHS/hli6SMbNyUUvTiNY1YlztCZ5DCYxODy1GSojAjwiVnB
RYYanahaYq8f+f9bpBwV2pnkZJWuTbj6ob1IK5MtejJwqBfNbVZfFBiAP3wEPnvY
Gor9AdM6Ui7U37q8yynO/d4ImNomOhfSppxY5K2UHLzfPE9agz9DDXPyYFfopZZu
W1j9+RPx8LoyCxbE56V+t+CTvb5OTtYR3jZqJKxoDkhKCtf47Nnq67qxFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKfXUwazo9nUTeGtyIkNyD/2Jb0MB8GA1UdIwQY
MBaAFAtAPnHvjD2XPOdtQgQvffoYkWiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQt
MGM2ODc3N2E0MDE5LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQtMGM2ODc3N2E0MDE5
LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsduXtr6P
uHu11RIVDrNbgNZvPyem/+9PTCm3aFmik/H0FeSl8jGtrQ+8fRqklVzapW4W2loV
0yav+YbI3aY4KdAjsdGdA/4kDcBCa+fa/76xadWdTdgC/xrpWQTWt4nkaoHU9pKl
flWTafu1okaCogzYzP4ATTD4UJ4BGXGaixObcX7hBPLMgPvMA4Cig3GlWGEm8AYU
wtac02xgUr7D/Y37h1jEt6HvOUfJk5xfKbKskZvdLMP4bgJVuIIhiJvJaxN91Vfg
oijxDTt5a2Eq9hg3Ig+n++Vsikhl/pMSPiCHvh0Um6o1LKtY3O2p8To59JBMYnH6
KQCYwvIH0WJZxw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:40 2025 by rpki-client