Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier: CXyRLs+LQ9b45RTngcxw3RXI2WmFytHZHR/5WEPvwrs=
Subject key identifier: 27:AA:42:6B:E6:B1:89:D2:94:B5:DB:28:74:1E:74:46:23:AE:DE:D4
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial: 0197B745A943844A12EA350EF0868803A3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number: 0155
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: PH2NXTPnUi5WRbLS+6yx2M+CK3bozN0i6mncv0tekLg=)
2: H2ZOh9fIAnQ96NovacR2PdzVa0g.roa (hash: +nBuIb1Jhz2syXSr6RgoJwf6cbGP9SV27ZeU9ljDCeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a9:43:84:4a:12:ea:35:0e:f0:86:88:03:a3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=27aa426be6b189d294b5db28741e744623aeded4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:b2:89:cb:11:1f:e7:f3:f8:2d:aa:02:c2:
d8:f3:2b:01:a1:ff:16:89:15:bf:0d:0f:75:b1:a8:
b1:17:4e:df:8d:fc:22:f0:cd:5d:a6:d7:67:44:fb:
c3:a0:5e:d5:84:ec:f7:6c:b5:f3:7f:96:02:93:c7:
94:93:21:b3:1b:3e:fa:66:a4:a0:e9:af:73:0a:13:
04:25:33:cc:18:72:d9:65:c1:8d:8f:3f:bc:d1:aa:
49:06:aa:3c:c7:d3:5b:c3:c9:52:79:e0:40:c4:e2:
40:12:5a:63:91:23:1d:47:10:c1:8e:f4:a1:66:c5:
6f:7d:0b:3e:8e:4f:44:11:04:d6:bf:7c:59:ab:e2:
c7:81:f5:c0:64:22:60:06:7d:26:c9:1d:37:5f:25:
4d:c6:c8:63:1f:a3:5e:a6:86:c4:30:ef:9e:5e:5d:
dc:81:c8:2f:c7:57:e7:51:56:43:f9:12:de:c9:02:
dc:54:5a:bc:77:27:33:1a:21:37:e4:1d:13:84:3a:
e0:b2:f0:d6:d3:fc:a6:7d:0c:f8:ca:15:64:6c:2b:
0f:9b:d7:25:84:c7:39:ea:97:e4:e9:93:42:55:7e:
0b:33:cb:05:aa:f8:14:6a:9d:b9:45:2b:f0:90:f3:
eb:aa:13:13:01:ad:13:54:bf:6a:10:fd:1c:b9:90:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:42:6B:E6:B1:89:D2:94:B5:DB:28:74:1E:74:46:23:AE:DE:D4
X509v3 Authority Key Identifier:
keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:44:8a:2b:b3:e7:8c:b1:bf:82:23:c2:fa:f2:66:90:2d:9a:
a5:29:eb:14:06:f8:1d:3f:28:b3:ae:e6:c5:97:9b:39:e0:d8:
a2:56:bd:3f:21:a4:87:43:4b:4a:5f:33:10:1a:74:6d:96:e8:
b3:81:08:5d:52:32:52:c8:2e:6d:92:2b:83:77:73:f2:ed:8c:
19:03:52:17:1c:49:31:d6:a6:44:f5:c9:1c:51:fe:bd:33:24:
0b:55:dc:8e:4d:c3:2e:29:6d:3e:67:48:37:6e:af:be:e2:2a:
94:55:2e:e3:5f:97:eb:88:9f:bc:8c:77:a0:bb:e8:59:a9:b3:
be:c3:b8:91:0c:f1:05:cb:4d:f4:13:3c:b0:66:1d:14:16:ec:
af:70:3f:00:de:a6:f1:16:f1:c1:ae:aa:fa:47:bb:0d:cc:c2:
23:6a:59:05:bc:92:c3:46:d5:14:ba:76:71:2c:1c:22:cd:ad:
a9:df:9f:29:95:35:01:d4:fc:5d:70:f0:fe:fe:0a:7a:ae:0b:
2d:d0:c5:ba:b3:c9:04:de:b4:13:e1:4f:e8:c2:3e:5c:10:8c:
9f:ab:7a:a7:30:c9:83:87:75:57:04:fc:50:fd:10:18:63:4c:
cf:54:8e:64:8f:f7:6e:03:1e:a1:60:42:95:7f:d9:27:bf:70:
42:d9:4a:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RalDhEoS6jUO8IaIA6P/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDQ3NzNiYjQzZGI2YjI5ZTg3ZGUwMmUzNjUzZmE3ZDhm
MjZmNjUwHhcNMjUwNjI4MTYwMTI1WhcNMjUwNjI5MTYwMTI1WjAzMTEwLwYDVQQD
EygyN2FhNDI2YmU2YjE4OWQyOTRiNWRiMjg3NDFlNzQ0NjIzYWVkZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCSyicsRH+fz+C2qAsLY8ysBof8W
iRW/DQ91saixF07fjfwi8M1dptdnRPvDoF7VhOz3bLXzf5YCk8eUkyGzGz76ZqSg
6a9zChMEJTPMGHLZZcGNjz+80apJBqo8x9Nbw8lSeeBAxOJAElpjkSMdRxDBjvSh
ZsVvfQs+jk9EEQTWv3xZq+LHgfXAZCJgBn0myR03XyVNxshjH6NepobEMO+eXl3c
gcgvx1fnUVZD+RLeyQLcVFq8dyczGiE35B0ThDrgsvDW0/ymfQz4yhVkbCsPm9cl
hMc56pfk6ZNCVX4LM8sFqvgUap25RSvwkPPrqhMTAa0TVL9qEP0cuZB1iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeqQmvmsYnSlLXbKHQedEYjrt7UMB8GA1UdIwQY
MBaAFAnUdzu0PbaynofeAuNlP6fY8m9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGIt
YWZiNTAwYTQ0ODJhLzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGItYWZiNTAwYTQ0ODJh
LzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAESKK7Pn
jLG/giPC+vJmkC2apSnrFAb4HT8os67mxZebOeDYola9PyGkh0NLSl8zEBp0bZbo
s4EIXVIyUsgubZIrg3dz8u2MGQNSFxxJMdamRPXJHFH+vTMkC1Xcjk3DLiltPmdI
N26vvuIqlFUu41+X64ifvIx3oLvoWamzvsO4kQzxBctN9BM8sGYdFBbsr3A/AN6m
8Rbxwa6q+ke7DczCI2pZBbySw0bVFLp2cSwcIs2tqd+fKZU1AdT8XXDw/v4Keq4L
LdDFurPJBN60E+FP6MI+XBCMn6t6pzDJg4d1VwT8UP0QGGNMz1SOZI/3bgMeoWBC
lX/ZJ79wQtlKLw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:22 2025 by rpki-client