Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier: x5h8WjFuP6UewpglKaGoi3Eq2ojDdRUfTOV/HKNsxiY=
Subject key identifier: 6B:4C:C7:7F:4E:CA:5E:A5:B4:BC:2D:84:90:60:55:EC:B7:8B:2C:53
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial: 0197CB3A4662FD560CEE7A0621CC5B577330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number: 11CB
Signing time: Wed 02 Jul 2025 13:01:23 +0000
Manifest this update: Wed 02 Jul 2025 13:01:23 +0000
Manifest next update: Thu 03 Jul 2025 13:01:23 +0000
Files and hashes: 1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=)
2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: APYVo7mIAeC1TyYPxwdVwLa9v4l8vZ5H3+cRiyiKKhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:46:62:fd:56:0c:ee:7a:06:21:cc:5b:57:73:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Validity
Not Before: Jul 2 13:01:23 2025 GMT
Not After : Jul 3 13:01:23 2025 GMT
Subject: CN=6b4cc77f4eca5ea5b4bc2d84906055ecb78b2c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:69:fe:66:82:5e:fa:b8:7d:0f:f4:23:82:
72:34:5e:e2:89:6f:59:36:65:ef:ac:05:01:73:e6:
14:2c:59:04:d1:bb:66:67:9d:f0:a1:a7:12:e0:f1:
57:41:14:bc:09:c3:ad:44:de:33:e7:95:a8:46:bb:
7b:b4:a8:bc:b4:3d:29:02:79:96:53:e5:5a:e0:18:
12:e9:55:c4:9c:e2:f5:b6:cf:c1:14:f3:f5:30:d1:
58:77:a5:1d:af:00:69:0d:61:48:fa:4e:bf:75:29:
80:48:53:a2:f9:cd:30:53:17:06:68:1f:a5:4b:98:
b8:61:a7:82:be:62:5c:45:9b:1a:1c:e5:3a:76:7f:
47:77:a6:44:b8:d5:03:41:6d:18:7d:7d:50:8f:1b:
70:51:68:d2:63:a3:12:b0:df:40:74:d2:f6:1f:a5:
66:46:97:3d:f6:ca:c4:87:5c:27:b9:5e:c4:9a:e3:
5e:3d:c8:74:19:fe:70:04:4e:b9:e4:e4:f2:6c:e8:
f5:2d:58:69:05:db:5d:ac:72:7c:7d:9c:2f:37:26:
d1:d0:0d:62:b7:54:24:0f:8c:3b:38:6e:b7:ff:60:
f7:1b:12:f0:de:d6:c1:c4:0f:72:45:cd:d8:14:fd:
23:c2:39:53:b8:e6:05:02:0c:d6:91:9e:10:f4:69:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4C:C7:7F:4E:CA:5E:A5:B4:BC:2D:84:90:60:55:EC:B7:8B:2C:53
X509v3 Authority Key Identifier:
keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:70:be:3a:61:ab:eb:4a:6d:16:47:62:3e:30:95:c0:92:db:
23:75:fc:e8:92:92:d8:7d:85:25:11:10:23:cc:5b:9a:10:bd:
04:64:54:b2:06:9e:c7:de:7f:24:d2:70:78:5c:96:71:74:26:
e0:6b:b4:74:0c:41:e3:91:e0:64:aa:45:c8:75:8d:e6:68:35:
9b:fc:33:19:03:fd:78:71:48:59:9e:bd:39:6c:d2:b8:5c:f7:
1d:11:b0:8f:2e:2b:3f:0f:dc:ee:c9:f2:2a:cb:89:fa:a2:99:
9b:56:8c:98:da:4f:4a:40:53:d4:16:f3:25:6b:dc:85:27:27:
64:e5:29:ec:f4:15:79:8d:54:05:b0:59:34:46:ef:da:68:a1:
a4:b9:50:67:ff:fa:81:9d:51:04:ae:c9:fb:58:5c:d9:3b:76:
6b:38:1a:ba:76:80:78:09:2e:72:f7:e6:4a:96:60:00:a4:23:
db:61:63:3a:d3:1b:13:e9:c0:71:a7:e1:a8:e4:89:13:e9:3d:
99:0f:4c:d4:ec:30:d3:ff:f2:09:b6:ff:79:5b:1b:36:bb:c9:
64:6b:5d:6f:15:5d:b4:33:f3:75:c2:43:6b:36:95:1f:4a:66:
a2:29:ba:41:31:61:7c:1a:95:bb:c0:74:d3:a3:dd:b2:ae:5f:
29:36:4d:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLOkZi/VYM7noGIcxbV3MwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzdhMDJhYTU0NmRkMWEwYTZhODJkMDVkOTBiMDkxN2Ux
NTQ1ZWQwHhcNMjUwNzAyMTMwMTIzWhcNMjUwNzAzMTMwMTIzWjAzMTEwLwYDVQQD
Eyg2YjRjYzc3ZjRlY2E1ZWE1YjRiYzJkODQ5MDYwNTVlY2I3OGIyYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn9p/maCXvq4fQ/0I4JyNF7iiW9Z
NmXvrAUBc+YULFkE0btmZ53woacS4PFXQRS8CcOtRN4z55WoRrt7tKi8tD0pAnmW
U+Va4BgS6VXEnOL1ts/BFPP1MNFYd6UdrwBpDWFI+k6/dSmASFOi+c0wUxcGaB+l
S5i4YaeCvmJcRZsaHOU6dn9Hd6ZEuNUDQW0YfX1QjxtwUWjSY6MSsN9AdNL2H6Vm
Rpc99srEh1wnuV7EmuNePch0Gf5wBE655OTybOj1LVhpBdtdrHJ8fZwvNybR0A1i
t1QkD4w7OG63/2D3GxLw3tbBxA9yRc3YFP0jwjlTuOYFAgzWkZ4Q9GnVRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtMx39Oyl6ltLwthJBgVey3iyxTMB8GA1UdIwQY
MBaAFHJ3oCqlRt0aCmqC0F2QsJF+FUXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2Yt
ZjQ4OTMwZTQyNjQxLzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2YtZjQ4OTMwZTQyNjQx
LzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHC+OmGr
60ptFkdiPjCVwJLbI3X86JKS2H2FJREQI8xbmhC9BGRUsgaex95/JNJweFyWcXQm
4Gu0dAxB45HgZKpFyHWN5mg1m/wzGQP9eHFIWZ69OWzSuFz3HRGwjy4rPw/c7sny
KsuJ+qKZm1aMmNpPSkBT1BbzJWvchScnZOUp7PQVeY1UBbBZNEbv2mihpLlQZ//6
gZ1RBK7J+1hc2Tt2azgaunaAeAkucvfmSpZgAKQj22FjOtMbE+nAcafhqOSJE+k9
mQ9M1Oww0//yCbb/eVsbNrvJZGtdbxVdtDPzdcJDazaVH0pmoim6QTFhfBqVu8B0
06Pdsq5fKTZNpQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:03:49 2025 by rpki-client