Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: 3KzKKEgPKjzwLGaE/ARLncRdy+h17ZsjssIIpBCniuM=
Subject key identifier: CC:26:6C:73:CE:99:EE:36:C4:48:04:5E:24:CE:4D:E4:F0:F1:87:07
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 0197B933C9A2D78C9CF2F1C8CFA10DBE5CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 01:01:08 +0000
Manifest this update: Sun 29 Jun 2025 01:01:08 +0000
Manifest next update: Mon 30 Jun 2025 01:01:08 +0000
Files and hashes: 1: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: NWDNtsEJfSgNUJILgdMUACX6ZJcoufY36TOMu/1SFE4=)
2: lmn9m784OLvYNEmoODCEhtK7M6Y.roa (hash: SMHhc3f9U107wkgd7T3SBk2Npa8W1MMzuYgHU/NZOn8=)
3: thiVarAMBeEnqBDpZfGbu3w4ANA.roa (hash: dysQvxWNncFFefbso/9XEjKk2c3ldxSqvGZG35iip3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:c9:a2:d7:8c:9c:f2:f1:c8:cf:a1:0d:be:5c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Jun 29 01:01:08 2025 GMT
Not After : Jun 30 01:01:08 2025 GMT
Subject: CN=cc266c73ce99ee36c448045e24ce4de4f0f18707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:cb:b5:79:f4:7b:73:b5:b9:97:35:ef:5c:
18:58:5e:ef:77:f2:d7:aa:cd:1f:68:a4:4f:f9:26:
42:ac:2c:8e:a8:59:87:c9:11:50:da:47:b8:f4:7b:
e0:ac:51:4b:0c:df:4b:30:6d:d7:f0:e4:4e:7f:84:
a9:97:6b:22:fd:72:70:34:41:3d:31:dc:18:07:49:
b2:e0:2b:94:34:5b:2a:7c:62:6a:5c:0d:25:89:d6:
34:0f:9e:3d:f2:4b:af:f8:2c:cf:51:08:c1:c6:af:
0e:ff:ee:b3:57:f4:68:aa:3a:e8:92:f7:5d:d5:e4:
94:bb:e2:c4:32:8a:fa:44:83:77:fe:b2:64:35:d9:
ff:ba:dc:4f:0e:cb:d2:ce:ff:f1:4f:5c:da:7f:1d:
08:d6:45:50:c8:b1:40:c5:81:77:78:01:7a:8c:7d:
f5:0c:4a:5e:ed:ac:0c:13:87:10:e4:06:58:08:66:
15:a3:da:c5:31:ed:c6:c9:23:4a:51:c4:24:1d:3d:
06:02:e8:8f:49:40:01:d4:ad:f3:9c:5e:63:a7:48:
f8:d4:23:3f:13:83:ee:f7:85:9f:b8:21:e6:ec:64:
8f:4f:68:fe:16:dd:1f:d9:ad:89:c2:43:41:09:d2:
59:f2:73:ae:5a:13:20:aa:67:08:97:21:26:ed:a5:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:26:6C:73:CE:99:EE:36:C4:48:04:5E:24:CE:4D:E4:F0:F1:87:07
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:05:46:c5:c7:f1:cb:ec:78:34:cc:a7:c4:13:ac:3a:19:84:
f8:4f:ef:30:f9:9c:af:be:bc:bf:7a:f1:57:41:42:11:e1:fa:
e4:9c:8a:86:d2:56:0d:76:8a:23:a3:fb:74:b5:78:49:a2:d9:
3e:9d:d0:d7:e5:1f:0d:49:02:19:b3:f1:da:89:34:58:0f:25:
36:c7:ed:b3:71:bf:28:f9:4a:df:7a:f9:5d:9f:e3:f7:c3:9f:
8b:8e:a9:76:4a:43:56:b3:be:b8:88:aa:33:b2:ac:0c:fb:0e:
24:16:ae:10:4d:03:53:42:97:39:b4:15:58:07:24:24:1b:98:
1d:a0:19:b6:f2:23:b3:fd:26:f3:02:e5:76:01:b7:ab:bc:b5:
d1:3d:8a:d9:11:84:eb:d2:8a:9a:03:86:2f:87:ed:3e:a7:1a:
c7:4e:11:57:aa:9f:22:69:a5:8e:98:4c:0d:59:53:84:4a:8c:
47:e5:cc:ea:ce:18:d9:f1:2a:a4:ba:58:25:bb:ef:cd:da:72:
59:7c:33:2f:8d:cb:de:d0:2d:8c:a0:20:b1:b7:1a:e1:33:8d:
a4:bf:f6:e4:b4:fc:d0:9e:cd:40:f4:3f:a1:55:03:b0:3a:2c:
5a:95:22:db:e3:53:94:f2:18:3c:f4:ee:5d:9f:6b:34:d7:0a:
33:b4:b0:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M8mi14yc8vHIz6ENvlyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjQ3NTM5ZjE5ZjBmNWExM2IwYjY5YmM3OTYyNzhmMGJm
NGFlYTQwHhcNMjUwNjI5MDEwMTA4WhcNMjUwNjMwMDEwMTA4WjAzMTEwLwYDVQQD
EyhjYzI2NmM3M2NlOTllZTM2YzQ0ODA0NWUyNGNlNGRlNGYwZjE4NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEfLtXn0e3O1uZc171wYWF7vd/LX
qs0faKRP+SZCrCyOqFmHyRFQ2ke49HvgrFFLDN9LMG3X8OROf4Spl2si/XJwNEE9
MdwYB0my4CuUNFsqfGJqXA0lidY0D5498kuv+CzPUQjBxq8O/+6zV/Roqjrokvdd
1eSUu+LEMor6RIN3/rJkNdn/utxPDsvSzv/xT1zafx0I1kVQyLFAxYF3eAF6jH31
DEpe7awME4cQ5AZYCGYVo9rFMe3GySNKUcQkHT0GAuiPSUAB1K3znF5jp0j41CM/
E4Pu94WfuCHm7GSPT2j+Ft0f2a2JwkNBCdJZ8nOuWhMgqmcIlyEm7aXfQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwmbHPOme42xEgEXiTOTeTw8YcHMB8GA1UdIwQY
MBaAFHL0dTnxnw9aE7C2m8eWJ48L9K6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMt
MmVhNmVjMjg1YTE1LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMtMmVhNmVjMjg1YTE1
LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgVGxcfx
y+x4NMynxBOsOhmE+E/vMPmcr768v3rxV0FCEeH65JyKhtJWDXaKI6P7dLV4SaLZ
Pp3Q1+UfDUkCGbPx2ok0WA8lNsfts3G/KPlK33r5XZ/j98Ofi46pdkpDVrO+uIiq
M7KsDPsOJBauEE0DU0KXObQVWAckJBuYHaAZtvIjs/0m8wLldgG3q7y10T2K2RGE
69KKmgOGL4ftPqcax04RV6qfImmljphMDVlThEqMR+XM6s4Y2fEqpLpYJbvvzdpy
WXwzL43L3tAtjKAgsbca4TONpL/25LT80J7NQPQ/oVUDsDosWpUi2+NTlPIYPPTu
XZ9rNNcKM7Swdg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:17 2025 by rpki-client