Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier: oXqxS+pHlPQPc4E8VqensSxs3S2YOBmdfUYyrM6eh2U=
Subject key identifier: 2C:B4:CE:18:2B:19:D0:2F:6C:3D:A4:AE:47:5F:38:DC:46:32:72:93
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 0197B5C4EF1D620B476A1503281A03F2BA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 09:01:11 +0000
Manifest this update: Sat 28 Jun 2025 09:01:11 +0000
Manifest next update: Sun 29 Jun 2025 09:01:11 +0000
Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: gZZm0VrrejL5SPwYjwCgemi8hZW6lDVw4ohUwY3Vsig=)
2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:ef:1d:62:0b:47:6a:15:03:28:1a:03:f2:ba:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Jun 28 09:01:11 2025 GMT
Not After : Jun 29 09:01:11 2025 GMT
Subject: CN=2cb4ce182b19d02f6c3da4ae475f38dc46327293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:46:81:5f:be:37:8a:69:2e:2c:5a:b8:3a:
f7:3f:e4:9d:f6:1b:6d:6f:48:14:c4:3a:6d:d6:10:
a0:d3:a8:80:c2:fb:ef:d8:61:44:47:69:92:8e:26:
84:f5:c3:52:63:07:a7:40:0f:ba:f4:f1:77:b8:30:
0f:9a:5f:7b:b8:9b:a8:0f:f6:e1:10:2e:ab:80:a5:
60:57:f6:4e:92:2b:b3:a3:c7:d8:17:ac:66:fe:7a:
b2:8b:1b:89:9b:dd:e8:9b:bf:13:96:e5:7a:d0:ec:
a0:c1:5a:f4:9c:4b:08:ab:40:18:f2:d8:ef:20:4b:
89:6a:8f:6f:7d:75:0d:5d:9f:71:9d:25:cb:61:27:
37:b3:1c:6a:74:02:af:4b:d5:22:13:da:33:e4:6a:
96:59:d8:d5:55:a4:1f:96:6b:f8:94:5f:73:1b:66:
55:b9:1a:c6:bc:2f:f4:93:9d:a2:4b:a1:c6:50:1c:
cb:ab:5a:33:fc:93:4c:29:cf:68:25:db:4e:5e:83:
ce:63:04:fd:4a:a2:8d:d9:ae:5b:55:dc:ce:0a:3c:
37:e3:d4:b0:c0:71:e4:20:44:a9:fe:99:45:e2:09:
c1:b8:6f:c4:81:db:16:d1:29:16:89:d4:0f:96:68:
87:f5:85:15:1d:39:81:86:fd:96:e9:65:e1:6b:c2:
96:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:CE:18:2B:19:D0:2F:6C:3D:A4:AE:47:5F:38:DC:46:32:72:93
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ea:e0:af:d8:30:f7:63:9d:c9:29:f2:9b:91:8c:1a:bd:cc:
03:ea:30:59:a6:ca:46:21:00:57:9d:23:0f:5d:11:18:8c:37:
51:2b:30:36:2b:8e:a1:41:9b:96:74:c8:9f:e7:f2:4e:c9:31:
d1:3d:5b:56:85:d3:fa:89:65:24:56:ab:71:bc:de:13:db:e7:
06:cd:98:d4:02:89:3f:96:42:8e:99:0e:30:c7:78:1c:f7:80:
b9:03:61:de:72:34:ab:ce:09:b3:6a:b6:75:ba:d9:51:41:0c:
3e:f7:ed:f4:84:52:2c:53:22:07:23:d5:36:46:ae:47:df:b5:
3d:fd:a9:0d:af:62:57:b6:e9:6c:3b:09:71:de:19:2b:cb:62:
2f:90:57:23:69:e1:21:03:8c:7d:41:a5:d1:cf:58:30:dc:e8:
86:33:43:85:41:75:22:8c:2a:a2:70:04:c3:d6:ae:29:82:7c:
58:24:17:a1:34:8b:ab:28:23:cb:37:4b:34:3a:41:7b:91:21:
33:95:6d:c2:a7:d8:0b:f9:f2:03:dd:8f:6b:7e:88:7d:34:cc:
b5:b7:7b:01:87:a6:a4:f4:df:eb:6c:6e:8b:ce:31:b8:4f:de:
1e:eb:fe:0a:43:e9:ce:df:fe:49:ad:6e:4b:f9:92:22:24:03:
8a:be:6c:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xO8dYgtHahUDKBoD8roMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1MzkwYjhkNjgwMjE4MDNlN2JlOWZjZjVlOGUxMzkz
YWMwNDMwHhcNMjUwNjI4MDkwMTExWhcNMjUwNjI5MDkwMTExWjAzMTEwLwYDVQQD
EygyY2I0Y2UxODJiMTlkMDJmNmMzZGE0YWU0NzVmMzhkYzQ2MzI3MjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOtGgV++N4ppLixauDr3P+Sd9htt
b0gUxDpt1hCg06iAwvvv2GFER2mSjiaE9cNSYwenQA+69PF3uDAPml97uJuoD/bh
EC6rgKVgV/ZOkiuzo8fYF6xm/nqyixuJm93om78TluV60OygwVr0nEsIq0AY8tjv
IEuJao9vfXUNXZ9xnSXLYSc3sxxqdAKvS9UiE9oz5GqWWdjVVaQflmv4lF9zG2ZV
uRrGvC/0k52iS6HGUBzLq1oz/JNMKc9oJdtOXoPOYwT9SqKN2a5bVdzOCjw349Sw
wHHkIESp/plF4gnBuG/EgdsW0SkWidQPlmiH9YUVHTmBhv2W6WXha8KWswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCy0zhgrGdAvbD2krkdfONxGMnKTMB8GA1UdIwQY
MBaAFAtaU5C41oAhgD576fz16OE5OsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEt
ZTdjZDE4ODU1ZTJjLzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEtZTdjZDE4ODU1ZTJj
LzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnurgr9gw
92OdySnym5GMGr3MA+owWabKRiEAV50jD10RGIw3USswNiuOoUGblnTIn+fyTskx
0T1bVoXT+ollJFarcbzeE9vnBs2Y1AKJP5ZCjpkOMMd4HPeAuQNh3nI0q84Js2q2
dbrZUUEMPvft9IRSLFMiByPVNkauR9+1Pf2pDa9iV7bpbDsJcd4ZK8tiL5BXI2nh
IQOMfUGl0c9YMNzohjNDhUF1IowqonAEw9auKYJ8WCQXoTSLqygjyzdLNDpBe5Eh
M5VtwqfYC/nyA92Pa36IfTTMtbd7AYempPTf62xui84xuE/eHuv+CkPpzt/+Sa1u
S/mSIiQDir5siA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:25 2025 by rpki-client