Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File: C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier: G6MoOuKPMbRnUSFCrv+DPk2VcfBRGLjZC1V3gsAElRg=
Subject key identifier: 52:3E:C8:80:CA:9A:03:2D:40:AE:3D:EC:3B:BE:AD:00:9C:A7:3E:01
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer: /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial: 0197CA5E5C1BEF3244EA8183892E6926042E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number: 05ED
Signing time: Wed 02 Jul 2025 09:01:10 +0000
Manifest this update: Wed 02 Jul 2025 09:01:10 +0000
Manifest next update: Thu 03 Jul 2025 09:01:10 +0000
Files and hashes: 1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: haHRa+Sd9PHo07wBEByp05dkcf25qrkICSGDhpCWDPc=)
2: dy6V06G8CC2FK34EGVuxtzegKH4.roa (hash: gPhDzrN8RIm6TShQaGb5YzX92bCG0Thu0kMn08thu4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:5c:1b:ef:32:44:ea:81:83:89:2e:69:26:04:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Validity
Not Before: Jul 2 09:01:10 2025 GMT
Not After : Jul 3 09:01:10 2025 GMT
Subject: CN=523ec880ca9a032d40ae3dec3bbead009ca73e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:d2:94:cf:a1:6c:52:f8:52:77:8e:06:78:
af:2a:a7:22:72:62:91:2c:65:91:a5:5f:5b:e0:8a:
b4:64:7c:68:fe:2a:b7:9e:0f:48:3b:c8:c8:92:84:
ff:a0:d6:71:f8:23:7d:02:ed:41:5e:2d:cf:a8:48:
b7:57:9e:b3:2f:c8:ce:1b:fd:9d:21:6f:f4:2a:56:
4b:c9:5f:6c:f1:99:fc:74:d3:f7:cb:f2:73:31:34:
cb:df:c1:e2:59:2b:a2:ea:f6:f8:ec:d2:16:d5:2a:
6f:e0:c2:72:a9:20:d1:dd:e1:71:e0:37:7a:7e:1b:
a3:49:b9:52:b8:e1:d4:80:cf:b8:20:6e:fd:d1:9a:
73:dc:b2:38:bf:f2:4d:7c:88:b1:c7:d3:67:d5:78:
74:bd:99:af:8d:bc:e9:17:6b:e6:e5:fd:37:09:7e:
86:aa:c3:2d:c3:25:f5:ae:96:6b:4d:d1:36:71:c1:
39:00:0b:5f:c3:56:c6:72:9c:b0:7b:a8:47:9c:96:
55:f3:d9:43:1e:b2:2d:26:49:bb:43:94:d3:69:f8:
01:18:09:bb:37:a3:e3:a0:52:e8:82:8f:2a:f1:3a:
d7:26:52:e9:b6:ba:4f:ac:ec:1a:41:5d:80:6b:73:
25:5f:13:d2:56:25:1f:04:ef:43:39:7e:6b:c5:69:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3E:C8:80:CA:9A:03:2D:40:AE:3D:EC:3B:BE:AD:00:9C:A7:3E:01
X509v3 Authority Key Identifier:
keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b5:ca:a9:1a:0a:b8:02:82:af:98:e9:a5:03:b0:03:77:66:
37:4f:10:5c:96:10:b9:02:33:e4:08:aa:26:e1:52:04:92:13:
c4:5d:29:8c:58:88:ca:e2:4d:cf:b3:99:86:bc:78:2b:b6:47:
d9:dd:e4:d3:a7:df:c4:03:0e:24:e3:be:78:7d:52:95:fe:48:
4d:f9:9e:a1:17:10:81:38:cd:ff:ae:6b:b0:3d:ae:f0:4f:77:
c6:7c:5f:55:ad:1c:43:7b:4b:b3:c5:50:27:bd:3f:c2:f9:93:
ba:55:de:e4:1d:52:96:52:9c:a2:d3:69:bd:99:9b:a8:0a:61:
5f:ef:17:3f:07:9d:d7:2f:a5:a3:bb:8d:e2:a9:43:bd:c7:c4:
0e:64:44:79:cd:f7:31:fa:0b:ed:e2:bd:df:ba:19:e9:2c:6e:
2a:aa:88:dc:82:4d:f4:37:1d:d5:bf:e9:00:08:01:31:c8:40:
4d:3d:af:c4:c6:9f:79:53:76:44:0f:4f:ac:f4:d7:0a:88:9e:
1a:ba:23:9e:69:a1:db:95:9c:86:2e:86:7d:d4:75:5b:fe:16:
ed:63:7e:e3:39:01:24:b2:87:b3:ec:95:c2:0c:57:a6:e9:c7:
a5:e0:a0:28:4c:f7:33:d1:eb:8b:c0:b4:57:95:73:ed:66:cc:
ae:b6:5a:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXlwb7zJE6oGDiS5pJgQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNThjOTIxY2IzZTljODFkZGMzMTZmZjAzOWNiOWMzNmQy
YTQzOTAwHhcNMjUwNzAyMDkwMTEwWhcNMjUwNzAzMDkwMTEwWjAzMTEwLwYDVQQD
Eyg1MjNlYzg4MGNhOWEwMzJkNDBhZTNkZWMzYmJlYWQwMDljYTczZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlPSlM+hbFL4UneOBnivKqcicmKR
LGWRpV9b4Iq0ZHxo/iq3ng9IO8jIkoT/oNZx+CN9Au1BXi3PqEi3V56zL8jOG/2d
IW/0KlZLyV9s8Zn8dNP3y/JzMTTL38HiWSui6vb47NIW1Spv4MJyqSDR3eFx4Dd6
fhujSblSuOHUgM+4IG790Zpz3LI4v/JNfIixx9Nn1Xh0vZmvjbzpF2vm5f03CX6G
qsMtwyX1rpZrTdE2ccE5AAtfw1bGcpywe6hHnJZV89lDHrItJkm7Q5TTafgBGAm7
N6PjoFLogo8q8TrXJlLptrpPrOwaQV2Aa3MlXxPSViUfBO9DOX5rxWnoewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFI+yIDKmgMtQK497Du+rQCcpz4BMB8GA1UdIwQY
MBaAFAtYySHLPpyB3cMW/wOcucNtKkOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMt
NDkxNzgyOTZkZTg2LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMtNDkxNzgyOTZkZTg2
LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbXKqRoK
uAKCr5jppQOwA3dmN08QXJYQuQIz5AiqJuFSBJITxF0pjFiIyuJNz7OZhrx4K7ZH
2d3k06ffxAMOJOO+eH1Slf5ITfmeoRcQgTjN/65rsD2u8E93xnxfVa0cQ3tLs8VQ
J70/wvmTulXe5B1SllKcotNpvZmbqAphX+8XPwed1y+lo7uN4qlDvcfEDmREec33
MfoL7eK937oZ6SxuKqqI3IJN9Dcd1b/pAAgBMchATT2vxMafeVN2RA9PrPTXCoie
Grojnmmh25Wchi6GfdR1W/4W7WN+4zkBJLKHs+yVwgxXpunHpeCgKEz3M9Hri8C0
V5Vz7WbMrrZa7g==
-----END CERTIFICATE-----
Generated at Wed Jul 2 12:26:02 2025 by rpki-client