Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier: B1cjKblV6au011S4HmBP7pu8p/68PqLEz7M6wzVsZ0M=
Subject key identifier: 35:E4:C0:8F:D3:B1:B2:FC:21:F6:80:4D:50:32:B0:25:61:65:19:1B
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial: 0197BBFDD9CE49C1265B05DA51AA19A7396F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number: 111F
Signing time: Sun 29 Jun 2025 14:01:05 +0000
Manifest this update: Sun 29 Jun 2025 14:01:05 +0000
Manifest next update: Mon 30 Jun 2025 14:01:05 +0000
Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: K55ZL8nv5xWhuDbqxYRxGJ32cxv1zWg/tsXei1MgIQw=)
2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:fd:d9:ce:49:c1:26:5b:05:da:51:aa:19:a7:39:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Validity
Not Before: Jun 29 14:01:05 2025 GMT
Not After : Jun 30 14:01:05 2025 GMT
Subject: CN=35e4c08fd3b1b2fc21f6804d5032b0256165191b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:92:a3:49:d7:45:14:3a:ce:21:39:f7:8a:
f9:a7:82:25:4f:55:37:d5:eb:d6:e6:9c:6a:a6:b1:
9c:ab:aa:ec:21:e9:3f:bf:d4:5e:de:63:49:98:d7:
fe:d7:0d:56:14:53:3c:2d:a1:0c:50:17:af:55:6b:
27:91:1d:3f:15:e4:41:61:58:bd:9b:4b:b3:c6:50:
f8:ae:c3:95:e2:20:9e:e7:f5:9a:c7:0e:0d:e5:b4:
a5:8b:36:e4:dc:9f:6c:c5:f0:53:30:44:de:31:6e:
77:e6:15:ad:cd:c0:fe:4c:8a:18:b9:13:89:9f:59:
06:f3:dc:fe:36:cc:79:0c:11:46:61:5a:2c:95:31:
08:fa:4c:ba:6e:a4:0c:e5:71:19:e9:55:34:1f:d6:
4d:19:16:42:0b:8b:d3:bd:95:3e:6f:a4:bd:c9:75:
da:dc:fc:fd:e6:69:42:8c:e7:82:f1:ad:c2:33:82:
fa:21:25:03:b5:53:a9:37:60:cd:fa:80:b6:f1:7d:
69:88:c4:24:f3:33:55:a5:ec:f1:54:9a:f7:0c:17:
dc:2e:60:ea:af:24:10:e6:be:e3:80:f5:cd:a1:f3:
fb:fd:80:bc:cf:d2:83:a7:27:2e:39:a3:f0:b8:bb:
bc:b8:5f:17:95:ec:5e:b2:dd:00:ae:1f:96:0d:b1:
b3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E4:C0:8F:D3:B1:B2:FC:21:F6:80:4D:50:32:B0:25:61:65:19:1B
X509v3 Authority Key Identifier:
keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:92:9f:27:b7:7d:7f:9b:da:4c:fd:ef:85:0a:78:33:af:96:
6a:33:36:06:3d:b9:61:e2:22:2c:d2:26:bc:05:3f:26:b1:aa:
d9:fc:89:0c:aa:04:77:28:2e:53:f4:3b:90:ab:6d:8a:97:c2:
6f:8c:b1:63:29:9f:6c:3c:97:9a:30:83:f1:fd:c2:f3:80:61:
fc:06:3f:f1:65:d6:a0:46:c2:c4:25:0e:85:ba:95:03:d0:ab:
e4:4c:44:56:64:a5:82:74:70:3b:f8:a0:41:68:c2:a4:15:d2:
8c:00:f5:02:91:74:46:59:f4:b8:ec:88:59:cd:36:f8:8a:a9:
0b:4f:fc:f6:8d:1d:e8:bd:f0:a6:f7:e8:64:57:86:4b:8e:b2:
33:27:48:ea:93:ee:4d:9e:d8:9c:34:a4:2a:e9:eb:92:d4:e2:
91:e4:76:28:f9:5d:82:73:aa:53:74:b5:75:15:13:78:8f:5e:
35:61:43:ae:77:7c:fd:87:ab:af:ff:1b:f0:41:b3:20:f7:28:
54:31:20:85:c6:0c:11:fa:66:fd:da:ee:9f:9f:9e:8d:65:3e:
a3:27:5e:62:00:51:3d:d6:59:04:f4:d9:64:9e:b6:97:17:83:
46:12:17:30:b8:a4:86:1d:e2:0b:57:72:49:94:6b:c4:59:2e:
36:89:b4:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7/dnOScEmWwXaUaoZpzlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz
ZWY4MmEwHhcNMjUwNjI5MTQwMTA1WhcNMjUwNjMwMTQwMTA1WjAzMTEwLwYDVQQD
EygzNWU0YzA4ZmQzYjFiMmZjMjFmNjgwNGQ1MDMyYjAyNTYxNjUxOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NCSo0nXRRQ6ziE594r5p4IlT1U3
1evW5pxqprGcq6rsIek/v9Re3mNJmNf+1w1WFFM8LaEMUBevVWsnkR0/FeRBYVi9
m0uzxlD4rsOV4iCe5/Waxw4N5bSlizbk3J9sxfBTMETeMW535hWtzcD+TIoYuROJ
n1kG89z+Nsx5DBFGYVoslTEI+ky6bqQM5XEZ6VU0H9ZNGRZCC4vTvZU+b6S9yXXa
3Pz95mlCjOeC8a3CM4L6ISUDtVOpN2DN+oC28X1piMQk8zNVpezxVJr3DBfcLmDq
ryQQ5r7jgPXNofP7/YC8z9KDpycuOaPwuLu8uF8Xlexest0Arh+WDbGzUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXkwI/TsbL8IfaATVAysCVhZRkbMB8GA1UdIwQY
MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt
N2U3MTkwZmZjNGM5LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5
LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5KfJ7d9
f5vaTP3vhQp4M6+WajM2Bj25YeIiLNImvAU/JrGq2fyJDKoEdyguU/Q7kKttipfC
b4yxYymfbDyXmjCD8f3C84Bh/AY/8WXWoEbCxCUOhbqVA9Cr5ExEVmSlgnRwO/ig
QWjCpBXSjAD1ApF0Rln0uOyIWc02+IqpC0/89o0d6L3wpvfoZFeGS46yMydI6pPu
TZ7YnDSkKunrktTikeR2KPldgnOqU3S1dRUTeI9eNWFDrnd8/Yerr/8b8EGzIPco
VDEghcYMEfpm/drun5+ejWU+oydeYgBRPdZZBPTZZJ62lxeDRhIXMLikhh3iC1dy
SZRrxFkuNom0Ow==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:56:48 2025 by rpki-client