Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File: CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier: 9pjv/a6LfLCsoQGZOH2Cql2IAbtnzpyEWN+D3vzg7NY=
Subject key identifier: 48:A9:4F:C3:CE:B8:3F:88:45:71:CF:9B:90:68:5D:A2:CF:69:ED:FA
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer: /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial: 0197B70E8C0E925E36FD3ACFE713C5983205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number: 0673
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: Bd7FcffIWEfbujnp9WS-BYRh8lY.roa (hash: 1aqbGtOUu0Pm7rzIGfOGmwYKjDdAbGNYXLp563xVUt0=)
2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: F43xGcF7YHEg9gGqzG3+uTPhzLPfdu5/1ajAM8Ho6cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8c:0e:92:5e:36:fd:3a:cf:e7:13:c5:98:32:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=48a94fc3ceb83f884571cf9b90685da2cf69edfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:ad:8b:08:c4:0d:f5:b3:5b:5f:cc:f4:42:
72:89:05:ed:17:24:c8:5e:e1:40:31:2c:f2:c2:2d:
20:91:82:b1:5b:14:74:df:2a:cc:09:88:5c:cf:c6:
6b:37:57:5d:58:a1:38:12:44:ec:5f:3a:f1:4d:87:
bc:96:97:0f:d5:bb:59:11:38:b5:10:61:5b:a4:37:
e6:af:e4:97:d2:f5:4e:79:ba:6f:04:16:cd:84:38:
02:69:eb:93:1e:36:a1:7b:25:ae:51:70:fc:62:64:
dc:f6:ca:07:f8:f8:7b:0c:36:54:a2:aa:61:39:93:
92:9b:fd:ad:d7:bf:89:55:9d:3e:6c:7a:b8:14:03:
14:37:08:13:66:6a:05:b7:d2:c0:bf:9f:65:04:56:
44:73:8a:d8:e5:f1:95:b0:65:87:3e:50:c9:58:2d:
c3:63:dd:21:29:6c:ea:a9:1f:d2:f0:1c:ca:a8:68:
6c:51:0b:79:3f:26:01:ae:97:18:83:09:85:ee:ca:
cf:e3:2c:15:c6:5a:09:e6:b3:80:fb:d5:c6:af:c8:
c1:45:c1:39:d9:df:05:38:53:c7:5e:88:37:78:7a:
25:84:f6:c1:90:f7:a5:d4:66:df:95:19:21:83:c1:
8c:02:22:2d:4d:5c:43:80:e2:05:75:13:ad:3d:cb:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:4F:C3:CE:B8:3F:88:45:71:CF:9B:90:68:5D:A2:CF:69:ED:FA
X509v3 Authority Key Identifier:
keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:53:25:a8:ba:4f:e2:a2:a5:de:c5:36:48:91:a7:52:bc:66:
21:ef:88:98:de:6d:db:02:3b:a2:03:69:bd:8f:68:dd:43:74:
4d:98:fa:eb:28:7a:92:ec:94:39:59:78:e2:04:ee:16:79:17:
e2:c0:69:18:16:bb:d5:8f:8f:1a:ac:b1:5d:6f:23:01:1e:9d:
9b:a1:87:88:d1:1f:6f:f8:7b:d2:44:97:9f:ff:89:b7:28:9e:
b6:78:82:29:81:06:e6:2e:3e:c3:03:4b:58:67:8f:17:b8:53:
16:bb:78:6c:42:03:dd:f7:49:e7:89:2d:90:64:e1:9a:f1:62:
8d:f3:8d:33:a3:a6:42:77:a9:d9:a5:a7:bf:7c:76:c6:f7:5e:
42:e3:2e:62:f2:6d:88:df:cc:62:81:5d:72:97:81:fc:eb:17:
3d:c1:6d:f2:ce:39:7e:cb:13:eb:ec:34:44:dd:85:9a:21:26:
9b:b6:30:ac:0d:0a:37:c3:6d:2d:61:df:1d:59:af:6f:1c:73:
36:4b:34:93:54:5a:bf:4d:37:6f:db:37:29:ff:48:d8:8f:4f:
c0:20:8b:a7:1c:2d:7a:dc:6e:ab:8b:25:b0:46:d1:c9:77:3f:
9a:38:54:a4:ed:dd:66:d7:7c:c0:d2:10:ad:94:5a:11:cf:06:
af:ea:17:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DowOkl42/TrP5xPFmDIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWRhYWQzZDI3ZGJjZjk0ZDMwMDZmYmZiYTdlMWRkZDVk
MjlmMTYwHhcNMjUwNjI4MTUwMTEzWhcNMjUwNjI5MTUwMTEzWjAzMTEwLwYDVQQD
Eyg0OGE5NGZjM2NlYjgzZjg4NDU3MWNmOWI5MDY4NWRhMmNmNjllZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5OtiwjEDfWzW1/M9EJyiQXtFyTI
XuFAMSzywi0gkYKxWxR03yrMCYhcz8ZrN1ddWKE4EkTsXzrxTYe8lpcP1btZETi1
EGFbpDfmr+SX0vVOebpvBBbNhDgCaeuTHjaheyWuUXD8YmTc9soH+Ph7DDZUoqph
OZOSm/2t17+JVZ0+bHq4FAMUNwgTZmoFt9LAv59lBFZEc4rY5fGVsGWHPlDJWC3D
Y90hKWzqqR/S8BzKqGhsUQt5PyYBrpcYgwmF7srP4ywVxloJ5rOA+9XGr8jBRcE5
2d8FOFPHXog3eHolhPbBkPel1GbflRkhg8GMAiItTVxDgOIFdROtPctE5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEipT8POuD+IRXHPm5BoXaLPae36MB8GA1UdIwQY
MBaAFAkdqtPSfbz5TTAG+/un4d3V0p8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGIt
ZWIzN2U3NzZkZGQyLzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGItZWIzN2U3NzZkZGQy
LzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1MlqLpP
4qKl3sU2SJGnUrxmIe+ImN5t2wI7ogNpvY9o3UN0TZj66yh6kuyUOVl44gTuFnkX
4sBpGBa71Y+PGqyxXW8jAR6dm6GHiNEfb/h70kSXn/+JtyietniCKYEG5i4+wwNL
WGePF7hTFrt4bEID3fdJ54ktkGThmvFijfONM6OmQnep2aWnv3x2xvdeQuMuYvJt
iN/MYoFdcpeB/OsXPcFt8s45fssT6+w0RN2FmiEmm7YwrA0KN8NtLWHfHVmvbxxz
Nks0k1Rav003b9s3Kf9I2I9PwCCLpxwtetxuq4slsEbRyXc/mjhUpO3dZtd8wNIQ
rZRaEc8Gr+oXEA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:42 2025 by rpki-client