Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: nqQ/Klc8QftY/5oLHuNfS4Sw5HfptJljuyEvBoXdvj0=
Subject key identifier: 2B:00:00:7B:27:6E:C1:AE:DE:EB:EA:E9:E0:23:78:E8:D3:8B:6E:AE
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 0197B70F34D086D3B17390CC2F7EB1330E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0CC3
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: 7wymzfB6x+/MKq0RCoWmijoF3F7ffCdwpDKI7AJn5M0=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:34:d0:86:d3:b1:73:90:cc:2f:7e:b1:33:0e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=2b00007b276ec1aedeebeae9e02378e8d38b6eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:e6:52:67:86:3e:2c:3e:4b:a9:18:43:1d:
b6:03:9e:b3:c5:16:bb:55:89:d3:5e:04:a1:98:1d:
25:c1:d3:f1:95:87:1b:c4:1b:a5:3f:74:dc:ed:20:
7a:dd:99:b2:25:66:08:e2:fd:f0:0a:84:0c:89:13:
83:5f:be:b1:2a:9d:09:24:d0:78:2d:f3:49:93:63:
dc:81:47:8c:92:11:bc:fb:d1:7a:a2:f8:3e:87:4f:
ad:e9:28:c5:65:06:8e:01:ab:15:06:9d:52:24:0b:
b4:af:39:67:29:1c:1a:a1:15:c3:f7:a2:05:ff:5b:
8e:97:ba:4c:6f:6b:51:b7:d8:00:9d:12:fe:d6:e5:
e7:41:d6:4f:32:6e:64:e7:f1:89:4a:61:85:fd:ad:
53:85:29:4e:d3:4f:cf:27:c7:0c:86:05:93:dc:93:
6a:81:fa:75:5b:66:a1:40:81:91:9c:93:c6:36:df:
2c:8e:64:02:e0:ec:29:bc:ff:0d:6c:a8:32:7b:0a:
ca:57:b2:47:7f:37:b2:6c:4e:8f:8f:56:88:7f:4a:
f0:ec:2b:25:f4:f6:1d:5b:75:7b:f4:bb:e7:04:1c:
b9:e1:5b:49:a3:38:5f:8d:0a:2f:33:81:8b:36:1d:
3e:fd:58:cc:14:98:de:69:c2:32:f4:e4:ee:40:49:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:00:00:7B:27:6E:C1:AE:DE:EB:EA:E9:E0:23:78:E8:D3:8B:6E:AE
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:1d:2b:8a:8b:18:9c:90:5d:6d:ef:d9:ee:c1:3e:a1:c1:
a5:25:eb:d9:bc:86:5b:c0:98:0b:67:de:9c:bf:fe:09:01:41:
83:0f:5b:33:c7:fe:a6:d7:d3:9c:c9:98:fd:9e:5e:2e:10:cd:
fd:9d:1f:d1:92:77:83:6b:c9:ff:f0:d5:c7:b5:3f:60:e8:8b:
3f:25:9b:30:8b:15:48:8e:c3:ec:f6:43:7a:2a:51:8d:b5:29:
8f:46:82:e5:c4:96:e0:1d:47:dc:5b:3d:79:3f:2f:73:43:71:
51:bb:26:3c:c7:13:e8:35:d5:af:b4:a3:b6:15:14:f2:74:e0:
2f:0a:54:aa:ec:b2:7b:90:f5:04:e8:db:ec:98:be:18:a3:b4:
41:13:a8:74:4c:54:08:9b:5a:c9:92:53:42:72:e0:90:d3:32:
61:06:09:38:f8:8e:ad:ea:bc:16:5d:29:76:34:d5:f4:19:b4:
48:fb:66:72:bc:e9:dd:46:69:41:bc:4e:08:45:58:6f:2f:3c:
04:bd:35:ba:e6:00:14:10:b8:8a:32:d2:87:21:40:eb:36:0c:
7e:86:0a:8b:06:94:8e:b1:ef:1c:5b:47:3f:cf:89:64:ee:bf:
ed:c0:4c:a3:e5:17:f3:c5:22:db:1e:40:6d:c3:79:58:73:2d:
d4:9a:c7:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DzTQhtOxc5DML36xMw4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0
MmY1MGQwHhcNMjUwNjI4MTUwMTU2WhcNMjUwNjI5MTUwMTU2WjAzMTEwLwYDVQQD
EygyYjAwMDA3YjI3NmVjMWFlZGVlYmVhZTllMDIzNzhlOGQzOGI2ZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArejmUmeGPiw+S6kYQx22A56zxRa7
VYnTXgShmB0lwdPxlYcbxBulP3Tc7SB63ZmyJWYI4v3wCoQMiRODX76xKp0JJNB4
LfNJk2PcgUeMkhG8+9F6ovg+h0+t6SjFZQaOAasVBp1SJAu0rzlnKRwaoRXD96IF
/1uOl7pMb2tRt9gAnRL+1uXnQdZPMm5k5/GJSmGF/a1ThSlO00/PJ8cMhgWT3JNq
gfp1W2ahQIGRnJPGNt8sjmQC4OwpvP8NbKgyewrKV7JHfzeybE6Pj1aIf0rw7Csl
9PYdW3V79LvnBBy54VtJozhfjQovM4GLNh0+/VjMFJjeacIy9OTuQEmm4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsAAHsnbsGu3uvq6eAjeOjTi26uMB8GA1UdIwQY
MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt
MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl
LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMgdK4qL
GJyQXW3v2e7BPqHBpSXr2byGW8CYC2fenL/+CQFBgw9bM8f+ptfTnMmY/Z5eLhDN
/Z0f0ZJ3g2vJ//DVx7U/YOiLPyWbMIsVSI7D7PZDeipRjbUpj0aC5cSW4B1H3Fs9
eT8vc0NxUbsmPMcT6DXVr7SjthUU8nTgLwpUquyye5D1BOjb7Ji+GKO0QROodExU
CJtayZJTQnLgkNMyYQYJOPiOreq8Fl0pdjTV9Bm0SPtmcrzp3UZpQbxOCEVYby88
BL01uuYAFBC4ijLShyFA6zYMfoYKiwaUjrHvHFtHP8+JZO6/7cBMo+UX88Ui2x5A
bcN5WHMt1JrHeg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:17 2025 by rpki-client