Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: +xNTQiCtQKEXcbUGOOWHC0goI39GCVL++hyf7z0LD0I=
Subject key identifier: FC:32:79:F0:A2:D9:22:57:1B:75:C6:9B:F2:46:C4:46:66:98:41:B4
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 0197CBE00A7E838EF253F9581C168676C2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 155D
Signing time: Wed 02 Jul 2025 16:02:26 +0000
Manifest this update: Wed 02 Jul 2025 16:02:26 +0000
Manifest next update: Thu 03 Jul 2025 16:02:26 +0000
Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: rtg5A5UaXUM/oDSft4EpPcUw0gjs/y8jyNy9DRmRWF4=)
3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=)
4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:e0:0a:7e:83:8e:f2:53:f9:58:1c:16:86:76:c2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Jul 2 16:02:26 2025 GMT
Not After : Jul 3 16:02:26 2025 GMT
Subject: CN=fc3279f0a2d922571b75c69bf246c446669841b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:33:0e:a0:67:f5:cb:f8:98:af:4b:ae:f8:
21:e5:49:52:a6:a0:4f:95:6f:52:52:15:4c:57:27:
75:28:5b:eb:79:75:cf:2c:92:0a:ff:51:09:ab:a0:
37:54:01:22:78:6f:f4:cd:d0:3a:78:19:ba:c5:39:
8c:73:15:a0:0e:ce:49:ed:78:83:7c:90:f4:d2:81:
e8:90:35:4e:92:37:7d:9b:24:64:58:1b:b8:64:9f:
e7:e7:0f:85:89:2b:48:ef:95:d2:49:93:87:eb:1d:
83:8e:9f:5b:f7:d9:4f:75:4e:2d:0a:77:ef:fd:e4:
f4:92:fc:dd:4b:8a:5c:4e:73:3b:3e:a9:f8:ed:29:
dc:dc:34:da:02:b8:ae:54:b3:ce:a5:d9:30:7e:1f:
41:82:e8:d1:25:56:e2:79:36:ce:71:c2:73:b1:24:
00:e6:cc:84:92:70:b9:b9:62:c0:20:86:e1:6a:75:
65:c3:9d:63:31:31:ed:7b:01:d5:e4:6f:d6:ff:8a:
2a:9e:82:c7:2c:d3:63:7d:56:7b:88:f2:b2:d6:cc:
c6:bd:88:e1:4f:35:36:b4:6e:28:08:d6:fd:2d:8b:
ba:52:19:18:37:84:2d:ce:42:05:c2:13:fe:0c:53:
3e:22:bb:9a:35:74:ac:fb:e3:a3:29:af:e9:1a:72:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:32:79:F0:A2:D9:22:57:1B:75:C6:9B:F2:46:C4:46:66:98:41:B4
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dc:7c:0f:33:2b:84:99:e6:81:6b:43:a0:23:99:57:39:67:
24:09:b4:fd:65:05:ab:58:4f:00:45:91:14:bd:a0:71:3d:7e:
a9:3b:ca:88:5e:5d:46:ba:b0:4d:2d:67:94:f4:6c:a3:5e:cd:
da:5b:bb:f9:61:df:96:b2:a3:a5:e6:43:bc:73:cd:a0:38:dd:
4c:55:36:a5:f8:84:b9:fc:34:7d:b1:6f:fe:f4:46:87:01:28:
c7:ac:1d:68:9f:c2:55:83:d7:45:d9:fb:ab:30:e6:77:69:e6:
0a:17:ee:03:55:ea:f6:f6:2d:3d:a8:e3:d2:a7:76:f0:00:56:
0c:58:c5:d7:d4:0c:bd:91:18:2b:93:e4:41:96:a6:41:19:2d:
39:7d:1a:3a:6f:95:59:e6:ad:d4:de:91:51:f9:4b:8e:05:5a:
00:6e:91:36:46:c6:90:60:1f:58:45:14:0f:26:cf:d6:d0:43:
f4:a6:e9:0a:ec:08:69:64:d8:76:9e:c9:fc:28:8a:04:a6:2c:
8d:bc:1a:f1:6c:75:06:1d:88:c2:18:8d:85:e5:e7:e3:00:02:
c5:fe:aa:af:d1:ff:0d:52:ec:94:ce:13:80:39:43:6c:3a:ce:
83:e4:30:d6:00:4e:78:5d:7c:9b:7e:4c:3f:d1:47:29:bd:c1:
1e:ff:49:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfL4Ap+g47yU/lYHBaGdsKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5
ZTRlMjUwHhcNMjUwNzAyMTYwMjI2WhcNMjUwNzAzMTYwMjI2WjAzMTEwLwYDVQQD
EyhmYzMyNzlmMGEyZDkyMjU3MWI3NWM2OWJmMjQ2YzQ0NjY2OTg0MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZYzDqBn9cv4mK9Lrvgh5UlSpqBP
lW9SUhVMVyd1KFvreXXPLJIK/1EJq6A3VAEieG/0zdA6eBm6xTmMcxWgDs5J7XiD
fJD00oHokDVOkjd9myRkWBu4ZJ/n5w+FiStI75XSSZOH6x2Djp9b99lPdU4tCnfv
/eT0kvzdS4pcTnM7Pqn47Snc3DTaAriuVLPOpdkwfh9BgujRJVbieTbOccJzsSQA
5syEknC5uWLAIIbhanVlw51jMTHtewHV5G/W/4oqnoLHLNNjfVZ7iPKy1szGvYjh
TzU2tG4oCNb9LYu6UhkYN4QtzkIFwhP+DFM+IruaNXSs++OjKa/pGnLR2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwyefCi2SJXG3XGm/JGxEZmmEG0MB8GA1UdIwQY
MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt
MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh
LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNx8DzMr
hJnmgWtDoCOZVzlnJAm0/WUFq1hPAEWRFL2gcT1+qTvKiF5dRrqwTS1nlPRso17N
2lu7+WHflrKjpeZDvHPNoDjdTFU2pfiEufw0fbFv/vRGhwEox6wdaJ/CVYPXRdn7
qzDmd2nmChfuA1Xq9vYtPajj0qd28ABWDFjF19QMvZEYK5PkQZamQRktOX0aOm+V
Weat1N6RUflLjgVaAG6RNkbGkGAfWEUUDybP1tBD9KbpCuwIaWTYdp7J/CiKBKYs
jbwa8Wx1Bh2IwhiNheXn4wACxf6qr9H/DVLslM4TgDlDbDrOg+Qw1gBOeF18m35M
P9FHKb3BHv9JjA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:00:42 2025 by rpki-client