Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File: CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier: /mFcGuy+cjIvsFsooE1bEgWrkhHQWgk9+AUubATLwYo=
Subject key identifier: DF:BD:83:BD:C1:3E:DE:95:CA:73:AD:E6:40:91:47:A2:9F:7B:64:32
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer: /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial: 0196CD98D93EDE6E5C3133D0B3E5349EFE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number: 0ADA
Signing time: Wed 14 May 2025 07:01:08 +0000
Manifest this update: Wed 14 May 2025 07:01:08 +0000
Manifest next update: Thu 15 May 2025 07:01:08 +0000
Files and hashes: 1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: A1+/gHSL53J2iCAN6HC8GHRtXLGaK0hss4bPyEJjXpk=)
2: LfJ8ODju367d2avuOQm5piH-KjI.roa (hash: o3ZK8YLnbi2AKR9dzokceRf3/tnSGkPPHYTuBxrwd0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:d9:3e:de:6e:5c:31:33:d0:b3:e5:34:9e:fe:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Validity
Not Before: May 14 07:01:08 2025 GMT
Not After : May 15 07:01:08 2025 GMT
Subject: CN=dfbd83bdc13ede95ca73ade6409147a29f7b6432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:31:9c:9c:1b:27:33:d9:a5:df:f5:c2:84:
c3:9e:6e:fe:a7:42:e9:31:0d:e3:bd:8e:ed:f0:c3:
45:71:03:45:9e:ad:c0:42:c3:8e:98:3f:52:c5:5e:
29:5c:a0:3f:33:ef:8d:4c:47:d4:2d:85:70:2a:94:
b5:8c:e5:f3:47:04:06:87:4a:7f:f4:5e:c0:fe:8f:
90:f2:c3:a9:76:a5:df:d1:0c:23:90:d5:77:f3:de:
b7:cc:35:9a:65:11:9e:62:22:d6:fb:c3:09:28:a1:
60:2c:4b:9a:2c:4d:c0:23:cf:76:56:3c:9c:2b:c6:
5d:ee:1b:e8:d8:32:98:4c:84:92:0d:f0:8b:20:7a:
e9:2e:ae:9d:43:fb:24:57:41:dd:90:2a:a0:61:d1:
f9:f8:f9:d3:8a:6e:2c:b7:be:f7:db:d0:76:58:42:
5c:f2:18:38:7d:fd:b0:9d:24:f7:29:88:6a:18:9e:
a9:f3:c7:81:bb:35:fc:97:64:00:14:d4:76:2e:fa:
20:b4:66:42:81:34:7f:40:55:18:7a:f7:d4:a1:3b:
21:ff:0b:06:ca:ee:aa:96:b2:bd:bc:45:8b:d1:63:
e6:8c:b8:34:dd:55:2a:9e:c2:f5:1f:82:68:2d:38:
85:67:ea:0d:ac:97:2f:ff:82:4b:39:61:f9:06:a4:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BD:83:BD:C1:3E:DE:95:CA:73:AD:E6:40:91:47:A2:9F:7B:64:32
X509v3 Authority Key Identifier:
keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e2:69:dc:a8:9a:fd:43:93:b2:df:b9:8f:f7:08:e2:c7:0e:
fb:bd:f3:c3:93:2d:c7:d2:ab:38:b1:70:4c:99:bb:03:91:ed:
e0:55:15:d1:47:3d:23:7c:d6:c1:9a:ce:39:ed:eb:43:b5:d3:
7b:7d:c3:04:33:47:b4:0e:8c:b8:06:25:6e:b2:37:4f:d4:bc:
f5:e8:53:36:fa:59:78:bc:2c:f5:de:72:d9:3b:aa:0c:db:4a:
66:05:59:13:b5:c6:ac:c2:f3:68:a8:5a:74:a6:97:70:c2:f2:
eb:86:36:56:78:4c:4c:7d:71:43:93:85:93:1f:b5:b0:ce:51:
fb:50:5d:dd:98:31:80:90:26:23:9e:d6:4b:79:64:0a:09:dd:
6c:33:47:36:f6:59:05:92:0a:45:8e:9c:8c:b9:01:19:54:e1:
e8:c2:4d:12:f3:f0:3c:ab:87:24:a2:bf:4d:fc:05:66:df:5d:
ac:76:0b:cc:68:a4:a5:5d:ee:83:cc:1f:fd:49:7d:41:74:5c:
76:d7:9c:aa:2e:14:86:97:f5:a2:2e:0c:6d:91:f5:44:be:14:
07:09:b6:5c:50:6a:1c:10:70:76:01:7d:d3:42:c7:4d:87:b3:
4c:4d:7a:6d:dc:a4:c7:5c:e9:fd:0a:63:4a:7a:65:3c:a0:01:
14:20:be:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNmNk+3m5cMTPQs+U0nv54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTQyNzEwMWNiMmUyYmQ1NjUwODRkZTY0NzFmNmViNDhk
MjRmOTYwHhcNMjUwNTE0MDcwMTA4WhcNMjUwNTE1MDcwMTA4WjAzMTEwLwYDVQQD
EyhkZmJkODNiZGMxM2VkZTk1Y2E3M2FkZTY0MDkxNDdhMjlmN2I2NDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIUxnJwbJzPZpd/1woTDnm7+p0Lp
MQ3jvY7t8MNFcQNFnq3AQsOOmD9SxV4pXKA/M++NTEfULYVwKpS1jOXzRwQGh0p/
9F7A/o+Q8sOpdqXf0QwjkNV38963zDWaZRGeYiLW+8MJKKFgLEuaLE3AI892Vjyc
K8Zd7hvo2DKYTISSDfCLIHrpLq6dQ/skV0HdkCqgYdH5+PnTim4st77329B2WEJc
8hg4ff2wnST3KYhqGJ6p88eBuzX8l2QAFNR2LvogtGZCgTR/QFUYevfUoTsh/wsG
yu6qlrK9vEWL0WPmjLg03VUqnsL1H4JoLTiFZ+oNrJcv/4JLOWH5BqSFAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+9g73BPt6VynOt5kCRR6Kfe2QyMB8GA1UdIwQY
MBaAFArkJxAcsuK9VlCE3mRx9utI0k+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMTEyZmMtMDVlZi00ZjFmLTg1YmUt
N2M5ZTY4NGNjY2UyLzEvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lMTEyZmMtMDVlZi00ZjFmLTg1YmUtN2M5ZTY4NGNjY2Uy
LzEvQ3VRbkVCeXk0cjFXVUlUZVpISDI2MGpTVDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeJp3Kia
/UOTst+5j/cI4scO+73zw5Mtx9KrOLFwTJm7A5Ht4FUV0Uc9I3zWwZrOOe3rQ7XT
e33DBDNHtA6MuAYlbrI3T9S89ehTNvpZeLws9d5y2TuqDNtKZgVZE7XGrMLzaKha
dKaXcMLy64Y2VnhMTH1xQ5OFkx+1sM5R+1Bd3ZgxgJAmI57WS3lkCgndbDNHNvZZ
BZIKRY6cjLkBGVTh6MJNEvPwPKuHJKK/TfwFZt9drHYLzGikpV3ug8wf/Ul9QXRc
dtecqi4Uhpf1oi4MbZH1RL4UBwm2XFBqHBBwdgF900LHTYezTE16bdykx1zp/Qpj
SnplPKABFCC+aQ==
-----END CERTIFICATE-----
Generated at Wed May 14 12:28:28 2025 by rpki-client