Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: bgWVGwB2EGwomL+Ix0QwHS1H6IoqzxS/BdweQDn5cN8=
Subject key identifier: 10:23:03:76:D4:87:2D:C7:A3:F2:7A:26:28:A5:78:C8:EF:61:C8:2D
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 0197B632C1F32376ACFB1DC45661FCA01C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 11:01:09 +0000
Manifest this update: Sat 28 Jun 2025 11:01:09 +0000
Manifest next update: Sun 29 Jun 2025 11:01:09 +0000
Files and hashes: 1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=)
2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: bGn/jmEZVCYu0x76w1EkkzSbwVzey35wyJqqMyyfpN0=)
3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c1:f3:23:76:ac:fb:1d:c4:56:61:fc:a0:1c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Jun 28 11:01:09 2025 GMT
Not After : Jun 29 11:01:09 2025 GMT
Subject: CN=10230376d4872dc7a3f27a2628a578c8ef61c82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:c4:62:e8:a3:0f:c1:63:4a:b1:6c:4d:da:
98:47:1c:09:7f:ed:13:c6:09:03:df:39:c3:94:3a:
61:6c:67:97:69:8e:6f:6a:45:c8:b6:5d:da:23:07:
8d:a1:e0:be:18:bf:e0:5a:55:d8:c7:19:83:33:d3:
45:69:3b:19:e2:7e:69:3a:ed:6e:c2:fc:27:6c:62:
0d:47:56:cb:f3:06:2d:68:18:28:86:cb:79:0f:33:
00:6a:a5:27:05:aa:d7:2c:55:f4:c9:55:dc:95:3f:
10:dc:30:cf:e7:e1:e7:83:48:9e:3a:d6:66:91:24:
c1:73:3d:5f:78:30:fe:4f:9d:05:29:e7:0b:de:11:
52:bf:ad:c4:92:4a:c1:09:44:31:ba:07:e4:03:18:
9c:3b:9d:8e:96:74:bc:b9:5e:ed:13:ef:43:3b:5d:
68:4d:72:dd:92:dc:62:cd:bc:67:a2:29:cd:34:e9:
9c:a3:01:74:21:46:b5:cc:b0:dd:7f:83:12:a9:ea:
05:58:51:75:53:3c:6a:5e:4c:87:e2:b1:13:10:a5:
0d:41:a4:c3:a4:77:17:50:98:cd:d4:3b:55:3c:e1:
77:32:71:1a:d1:39:fa:b9:b9:f0:d2:02:ad:8e:21:
c9:f4:90:e5:8f:bc:a8:f9:29:26:0e:d5:4c:c4:df:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:23:03:76:D4:87:2D:C7:A3:F2:7A:26:28:A5:78:C8:EF:61:C8:2D
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:41:de:14:62:77:c7:92:20:3b:9b:0d:7c:a8:37:d1:45:bf:
4a:34:03:6a:71:fc:da:b5:2d:0a:ff:23:81:8c:68:68:83:0c:
5a:b5:62:9e:19:01:89:8e:28:ec:24:51:cf:e7:0a:8c:1e:64:
1f:8c:bf:b8:0a:df:0b:83:a9:6f:31:35:c5:dc:57:35:ed:68:
8d:99:98:1b:97:d4:18:e6:9b:8d:39:85:3a:29:1d:54:29:64:
bf:e1:f6:e5:d6:ac:02:5f:b1:29:af:55:69:c9:3a:24:6b:28:
63:7c:57:b4:11:28:60:ca:6a:14:4d:b5:6a:a0:f5:1a:d5:17:
90:08:f9:da:08:0d:e9:17:ce:02:81:ad:f8:84:1c:5c:58:a4:
5d:1d:92:f6:91:d0:af:16:ff:16:e8:e3:c4:85:05:81:dd:9a:
22:98:8a:76:01:8e:3e:de:d4:ae:22:8e:24:e6:9b:b8:fe:20:
a7:7e:33:a3:40:49:17:d8:e1:f4:f2:ec:5c:27:8f:ce:b0:8b:
36:f7:5b:2f:41:8b:e0:90:e4:9d:fa:9d:06:72:a6:81:eb:9e:
6c:75:65:f2:5b:3c:59:ef:c0:f3:4e:8c:4c:9c:61:45:0b:64:
2f:0d:74:e3:9d:19:1f:6c:54:31:df:10:cb:8c:d8:19:25:16:
5c:86:0c:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MsHzI3as+x3EVmH8oBxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjgyYTc5NGIzZjdhYjRjZDZmZWI2YzVmZDZiM2QyNTZh
ZmM0NjEwHhcNMjUwNjI4MTEwMTA5WhcNMjUwNjI5MTEwMTA5WjAzMTEwLwYDVQQD
EygxMDIzMDM3NmQ0ODcyZGM3YTNmMjdhMjYyOGE1NzhjOGVmNjFjODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK/EYuijD8FjSrFsTdqYRxwJf+0T
xgkD3znDlDphbGeXaY5vakXItl3aIweNoeC+GL/gWlXYxxmDM9NFaTsZ4n5pOu1u
wvwnbGINR1bL8wYtaBgohst5DzMAaqUnBarXLFX0yVXclT8Q3DDP5+Hng0ieOtZm
kSTBcz1feDD+T50FKecL3hFSv63EkkrBCUQxugfkAxicO52OlnS8uV7tE+9DO11o
TXLdktxizbxnoinNNOmcowF0IUa1zLDdf4MSqeoFWFF1UzxqXkyH4rETEKUNQaTD
pHcXUJjN1DtVPOF3MnEa0Tn6ubnw0gKtjiHJ9JDlj7yo+SkmDtVMxN9o+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAjA3bUhy3Ho/J6JiileMjvYcgtMB8GA1UdIwQY
MBaAFPwoKnlLP3q0zW/rbF/Ws9JWr8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzIt
ZDMzMjZjNTliY2QyLzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzItZDMzMjZjNTliY2Qy
LzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw0HeFGJ3
x5IgO5sNfKg30UW/SjQDanH82rUtCv8jgYxoaIMMWrVinhkBiY4o7CRRz+cKjB5k
H4y/uArfC4OpbzE1xdxXNe1ojZmYG5fUGOabjTmFOikdVClkv+H25dasAl+xKa9V
ack6JGsoY3xXtBEoYMpqFE21aqD1GtUXkAj52ggN6RfOAoGt+IQcXFikXR2S9pHQ
rxb/FujjxIUFgd2aIpiKdgGOPt7UriKOJOabuP4gp34zo0BJF9jh9PLsXCePzrCL
NvdbL0GL4JDknfqdBnKmgeuebHVl8ls8We/A806MTJxhRQtkLw10450ZH2xUMd8Q
y4zYGSUWXIYMUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:12 2025 by rpki-client